$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/381453b7-1e6e-3c6f-b7be-eda673e18282.roa File: 381453b7-1e6e-3c6f-b7be-eda673e18282.roa (raw, json) Hash identifier: 98wMYockbL5V8ON0CywoQ8qT0x60QKyVFOgK8tq59Z0= Subject key identifier: 9F:37:2D:1D:A0:1C:98:25:22:34:35:58:DF:10:8B:F3:79:01:C9:D1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A41441B2B4CF0D8602980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/381453b7-1e6e-3c6f-b7be-eda673e18282.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 3356 IP address blocks: 20.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:41:44:1b:2b:4c:f0:d8:60:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=021d1031-1333-40dc-85a4-cd0e979a6b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5a:00:a6:10:86:1f:e1:ba:9a:cf:de:e0:03: 8b:8d:fc:d7:d7:20:56:08:59:89:bb:fd:00:ca:00: f7:4f:60:b7:b5:3c:4d:f8:c0:df:45:a1:c5:ef:7a: df:44:b6:a7:f4:1f:82:20:4f:ca:24:5b:72:32:b8: cb:08:fe:66:05:ee:eb:e5:59:88:60:9e:d8:ca:72: 0f:3f:92:68:c3:a3:dd:43:f0:5c:75:e9:fc:97:c8: 10:57:fb:30:32:16:e3:62:be:94:2d:47:9c:1c:49: 97:af:cf:7e:1f:dc:2c:a0:7f:45:5b:21:52:d0:ed: 7c:2e:9c:6f:3f:24:f1:9c:68:f0:0e:97:d8:d2:b5: ed:42:2a:34:84:2a:52:2b:a4:13:fb:ee:59:d8:b5: d7:e9:b6:8d:ca:4d:5a:5a:90:d2:21:71:10:a6:66: 4d:e9:bd:ce:c7:25:97:6e:1e:09:25:8e:c8:a0:54: b7:bc:98:df:e2:fe:44:f4:b3:6a:c6:2c:5e:12:d6: ae:f3:c2:5e:8a:37:a7:42:f2:3a:70:69:b8:3a:c4: eb:24:b7:2f:62:fa:05:27:2f:f8:45:c4:3d:bc:58: ab:72:1f:7e:70:49:17:c6:85:dd:eb:9f:fa:68:a3: d0:35:7c:86:2a:4b:46:8f:c4:91:82:66:58:8d:4a: 31:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:37:2D:1D:A0:1C:98:25:22:34:35:58:DF:10:8B:F3:79:01:C9:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/381453b7-1e6e-3c6f-b7be-eda673e18282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:04:47:3a:4d:69:e4:d9:4e:4f:9a:42:8b:0f:45:bb:bd:a4: 32:da:39:72:37:fb:c9:91:82:f2:96:f2:56:27:21:ac:68:31: 9e:9c:a5:23:95:df:81:51:a9:e1:7d:0b:9f:f1:d4:78:ab:24: 1e:a4:9f:91:92:6a:5a:23:3b:4c:7b:94:7c:18:86:56:39:c1: 9c:81:6d:6e:a7:ca:bc:00:ed:a3:dd:b4:74:6d:bd:cd:47:5c: cc:31:07:9c:df:ab:3f:a1:e9:58:62:8e:e3:c8:dc:73:c4:78: 17:6f:d3:b3:ec:46:38:13:d2:7b:2e:82:99:8d:26:0f:b6:0e: 74:e0:e8:f3:28:d7:e8:40:e0:2a:37:97:22:4e:41:a4:90:36: c3:f2:aa:2d:9a:8d:b1:b9:fa:39:ef:4c:5b:01:e3:42:b1:cd: 7b:c3:09:86:b5:eb:44:0c:72:de:a3:c8:06:2c:2c:f4:aa:63: e5:81:78:bb:5c:da:57:04:75:58:36:68:c0:93:d7:ed:8c:0e: 9b:0b:dd:03:1d:e3:cd:48:7b:c4:c3:6a:4e:a5:ce:e3:3e:83: ce:3e:81:2f:fc:9c:09:71:70:ac:6c:44:17:82:91:9a:a3:c4: 51:1b:5a:6a:0d:56:81:f4:94:bf:23:a0:23:4f:97:bd:5d:8a: 95:3a:e7:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04akFEGytM8NhgKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MDIxZDEwMzEtMTMzMy00MGRjLTg1YTQtY2QwZTk3OWE2YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVoAphCGH+G6ms/e4AOLjfzX1yBWCFmJu/0A ygD3T2C3tTxN+MDfRaHF73rfRLan9B+CIE/KJFtyMrjLCP5mBe7r5VmIYJ7YynIP P5Jow6PdQ/Bcden8l8gQV/swMhbjYr6ULUecHEmXr89+H9wsoH9FWyFS0O18Lpxv PyTxnGjwDpfY0rXtQio0hCpSK6QT++5Z2LXX6baNyk1aWpDSIXEQpmZN6b3OxyWX bh4JJY7IoFS3vJjf4v5E9LNqxixeEtau88JeijenQvI6cGm4OsTrJLcvYvoFJy/4 RcQ9vFirch9+cEkXxoXd65/6aKPQNXyGKktGj8SRgmZYjUox4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ83LR2gHJglIjQ1WN8Qi/N5AcnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzgxNDUzYjctMWU2ZS0z YzZmLWI3YmUtZWRhNjczZTE4MjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQERzpNaeTZTk+aQosPRbu9pDLaOXI3+8mRgvKW8lYnIaxoMZ6cpSOV 34FRqeF9C5/x1HirJB6kn5GSalojO0x7lHwYhlY5wZyBbW6nyrwA7aPdtHRtvc1H XMwxB5zfqz+h6VhijuPI3HPEeBdv07PsRjgT0nsugpmNJg+2DnTg6PMo1+hA4Co3 lyJOQaSQNsPyqi2ajbG5+jnvTFsB40KxzXvDCYa160QMct6jyAYsLPSqY+WBeLtc 2lcEdVg2aMCT1+2MDpsL3QMd481Ie8TDak6lzuM+g84+gS/8nAlxcKxsRBeCkZqj xFEbWmoNVoH0lL8joCNPl71dipU657w= -----END CERTIFICATE-----Generated at Thu Mar 26 19:59:09 2026 by rpki-client