$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa File: 38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa (raw, json) Hash identifier: HZ+kTdXMoAVkaLQceag3/xDk8G9FPD3W1Q2Le4Ej0qc= Subject key identifier: A9:1F:AB:B3:79:BC:DB:B1:98:A0:6B:03:A7:DF:CB:AF:F3:A7:49:5D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D143D4A5A8E062A70124B1E80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 3356 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4a:5a:8e:06:2a:70:12:4b:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1837e264-22a2-44f9-a6de-9d64dbd05a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f2:82:ff:f5:b5:76:10:fb:b8:fe:2f:79:3d: 50:1c:f4:46:d1:86:f9:8c:95:fb:d5:da:07:a0:f6: 45:1a:5e:ff:56:2c:ad:3b:fc:fd:0d:81:bb:a7:93: 17:09:6c:a5:70:21:53:04:d1:4d:dc:ca:c8:71:aa: 42:6e:0d:3b:9e:b3:82:b8:0e:89:ee:af:da:a4:71: f2:21:e4:49:f9:8d:82:36:2d:71:9d:b4:03:ce:82: cb:9f:54:ea:cb:87:2d:7c:e0:85:1a:d6:31:5e:39: b0:a5:6a:78:aa:ad:2c:ac:02:6c:2a:39:e4:6b:89: 0b:d8:e9:2a:89:69:61:43:d8:ec:da:ae:26:34:70: 87:8d:c6:1e:54:16:61:13:57:58:24:01:09:40:4a: a3:2c:58:03:1b:09:4d:bb:12:d7:2c:c8:19:07:56: 4f:b7:fa:51:0c:f8:2a:72:b4:ba:bc:c0:d9:30:e5: 2d:27:e7:96:35:cf:e6:d1:f1:77:ef:1f:33:f0:b3: 2e:65:cc:56:b4:cf:87:08:63:16:94:ad:9e:52:f8: 7e:de:94:44:f9:79:52:cd:88:45:eb:64:c5:f2:6c: 47:c4:50:7f:31:f5:d8:b1:99:33:76:74:4f:f4:a0: 7b:c3:48:b8:ee:66:2e:b4:70:0a:5d:42:32:00:dc: e0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1F:AB:B3:79:BC:DB:B1:98:A0:6B:03:A7:DF:CB:AF:F3:A7:49:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:6d:cf:b6:f0:4c:ee:a5:d8:c7:64:51:30:31:07:a8:d6:a8: a7:ee:ca:b8:45:90:fa:16:a3:3f:19:5e:60:3b:e9:7c:a3:26: af:55:cc:57:f3:19:6f:f5:8f:5b:89:a0:e8:27:1b:6f:4d:c2: 65:03:9e:e2:f3:de:b7:45:54:a5:78:03:f0:70:75:43:b2:3c: 8c:2f:a1:3f:40:87:72:4f:10:83:3c:72:ad:17:5d:19:92:fd: 54:d0:06:64:9b:1b:92:a3:8d:62:a8:8d:34:94:41:16:2b:b0: dc:b4:1f:b6:e5:5b:6b:09:a9:77:41:85:33:48:13:be:8d:36: 55:40:40:35:57:d6:42:e7:6b:ea:7b:1f:14:62:d6:af:47:20: 27:ea:ff:39:f3:0f:ca:a6:2d:c7:c1:3f:2a:d6:a9:11:e6:ec: 49:4c:80:df:e5:85:07:87:dc:d5:e4:45:a3:20:03:be:50:34: 65:61:0e:15:20:16:5a:40:d0:77:c6:6e:05:e9:37:04:84:ad: e8:44:48:d7:dc:c2:46:64:9e:89:ca:2a:c6:7b:6d:54:c0:26: 69:fd:3f:24:35:75:62:ec:09:07:8f:99:19:e5:8b:4b:93:14: c1:5a:8a:a4:48:16:a4:d2:ce:a2:c6:f9:c9:71:2e:f7:d4:fc: 1b:14:e9:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUpajgYqcBJLHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTgzN2UyNjQtMjJhMi00NGY5LWE2ZGUtOWQ2NGRiZDA1YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/KC//W1dhD7uP4veT1QHPRG0Yb5jJX71doH oPZFGl7/ViytO/z9DYG7p5MXCWylcCFTBNFN3MrIcapCbg07nrOCuA6J7q/apHHy IeRJ+Y2CNi1xnbQDzoLLn1Tqy4ctfOCFGtYxXjmwpWp4qq0srAJsKjnka4kL2Okq iWlhQ9js2q4mNHCHjcYeVBZhE1dYJAEJQEqjLFgDGwlNuxLXLMgZB1ZPt/pRDPgq crS6vMDZMOUtJ+eWNc/m0fF37x8z8LMuZcxWtM+HCGMWlK2eUvh+3pRE+XlSzYhF 62TF8mxHxFB/MfXYsZkzdnRP9KB7w0i47mYutHAKXUIyANzgQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkfq7N5vNuxmKBrA6ffy6/zp0ldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhhNDk4ZmYtZjZmNi0z ZDU0LTliZmEtOGY3ZmYyMjZmYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5tz7bwTO6l2MdkUTAxB6jWqKfuyrhFkPoWoz8ZXmA76XyjJq9VzFfz GW/1j1uJoOgnG29NwmUDnuLz3rdFVKV4A/BwdUOyPIwvoT9Ah3JPEIM8cq0XXRmS /VTQBmSbG5KjjWKojTSUQRYrsNy0H7blW2sJqXdBhTNIE76NNlVAQDVX1kLna+p7 HxRi1q9HICfq/znzD8qmLcfBPyrWqRHm7ElMgN/lhQeH3NXkRaMgA75QNGVhDhUg FlpA0HfGbgXpNwSErehESNfcwkZknonKKsZ7bVTAJmn9PyQ1dWLsCQePmRnli0uT FMFaiqRIFqTSzqLG+clxLvfU/BsU6Zo= -----END CERTIFICATE-----Generated at Thu Mar 26 23:51:29 2026 by rpki-client