$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/47be25e4-1c7a-336c-88b9-469b9f959666.roa File: 47be25e4-1c7a-336c-88b9-469b9f959666.roa (raw, json) Hash identifier: 9ArZSWY7TmaR6AN0U/WAEqgU9o/2J61A9y/sgWI1b0w= Subject key identifier: 32:B8:C6:0E:D4:FE:5F:D4:CC:1E:84:07:2B:61:40:02:6A:CF:A0:1A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DA6B02005C6273A4E9F2E9580 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/47be25e4-1c7a-336c-88b9-469b9f959666.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 203 IP address blocks: 20.134.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:20:05:c6:27:3a:4e:9f:2e:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=ec012a49-b5b1-44fc-a19a-b200efe5ccf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2f:f5:48:20:65:44:05:f9:49:f0:15:73:f4: eb:1e:45:a0:14:24:f1:28:99:08:e8:0e:f9:df:93: 18:36:36:d0:ea:2b:94:c9:82:f9:b9:1f:d5:6c:ca: 94:a4:65:a0:e2:99:18:cb:c2:2a:db:89:37:c9:fb: 03:f0:11:86:ad:f1:64:a0:55:b3:67:f9:8f:ae:af: d6:7e:d5:bf:49:4c:df:b0:45:c3:e3:65:3c:b7:00: 77:7c:10:59:96:7b:d6:46:ab:69:28:71:07:90:0c: 15:9f:29:bd:37:a5:68:ac:da:47:31:4d:6d:05:7d: 70:c0:55:35:25:83:2c:66:8d:ca:46:d4:e2:b4:98: dd:76:ec:4e:ae:aa:73:d2:fa:12:db:a5:88:04:14: 06:89:c6:45:bc:d1:11:ea:e8:e3:b9:b6:13:ef:68: 0c:cf:40:ff:a9:26:15:35:dc:a8:b2:b9:92:fa:64: e6:47:79:d1:83:4e:e1:26:89:12:20:77:ba:0a:3a: cd:91:a4:40:05:8c:1c:de:87:e3:35:7e:65:78:3b: 27:93:9a:91:2f:28:a1:d3:26:be:01:d7:f8:30:5c: 23:48:8e:17:bc:bb:2c:08:73:47:3f:ca:02:05:35: bb:70:e3:f7:7c:cc:a9:59:31:d3:50:f1:f3:97:63: 0d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B8:C6:0E:D4:FE:5F:D4:CC:1E:84:07:2B:61:40:02:6A:CF:A0:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/47be25e4-1c7a-336c-88b9-469b9f959666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a5:32:f7:e8:df:14:d1:82:56:1a:b3:88:1f:c3:39:d2:0e: 3a:c8:6a:87:37:49:48:a0:47:68:95:63:53:5d:1f:14:cd:21: d3:0c:84:99:e0:e0:cd:fb:3a:99:fb:a9:f3:f7:9f:73:94:48: 38:46:e1:cf:0b:d1:01:cf:02:db:0b:c1:79:54:71:eb:46:6c: d4:f9:fc:7a:60:01:12:f2:70:ef:8c:8d:a3:08:3a:39:ca:8a: 46:93:c3:85:bd:88:6c:33:cb:7a:85:f9:f4:3a:5b:f8:a0:66: 55:32:7e:f4:8d:f9:d3:92:e9:3f:c3:03:62:43:24:a6:54:58: 84:24:ee:15:96:c9:4b:39:f5:e1:48:bf:59:ab:f9:45:36:29: 3a:ed:32:e0:c8:96:0d:94:02:8d:f6:ff:cb:5d:bd:af:88:26: 9f:a2:61:f7:bb:7e:6c:c2:29:94:3c:1e:8a:7b:81:cf:cf:9d: d1:0d:2c:dc:98:18:9d:fc:a8:e5:b4:04:f7:68:68:cd:b7:b3: 1e:dc:de:f1:40:77:26:79:61:2e:56:ef:e7:dc:40:2d:49:9d: d9:84:b2:4e:9e:b4:18:0f:95:f9:6d:36:ff:62:15:8a:82:53: 42:d4:8f:53:cd:60:80:85:5b:0f:3d:8f:cf:e5:e0:50:80:7a: 70:e9:d3:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCAFxic6Tp8ulYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZWMwMTJhNDktYjViMS00NGZjLWExOWEtYjIwMGVmZTVjY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS/1SCBlRAX5SfAVc/TrHkWgFCTxKJkI6A75 35MYNjbQ6iuUyYL5uR/VbMqUpGWg4pkYy8Iq24k3yfsD8BGGrfFkoFWzZ/mPrq/W ftW/SUzfsEXD42U8twB3fBBZlnvWRqtpKHEHkAwVnym9N6VorNpHMU1tBX1wwFU1 JYMsZo3KRtTitJjdduxOrqpz0voS26WIBBQGicZFvNER6ujjubYT72gMz0D/qSYV NdyosrmS+mTmR3nRg07hJokSIHe6CjrNkaRABYwc3ofjNX5leDsnk5qRLyih0ya+ Adf4MFwjSI4XvLssCHNHP8oCBTW7cOP3fMypWTHTUPHzl2MNiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK4xg7U/l/UzB6EBythQAJqz6AaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDdiZTI1ZTQtMWM3YS0z MzZjLTg4YjktNDY5YjlmOTU5NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIylMvfo3xTRglYas4gfwznSDjrIaoc3SUigR2iVY1NdHxTNIdMMhJng 4M37Opn7qfP3n3OUSDhG4c8L0QHPAtsLwXlUcetGbNT5/HpgARLycO+MjaMIOjnK ikaTw4W9iGwzy3qF+fQ6W/igZlUyfvSN+dOS6T/DA2JDJKZUWIQk7hWWyUs59eFI v1mr+UU2KTrtMuDIlg2UAo32/8tdva+IJp+iYfe7fmzCKZQ8Hop7gc/PndENLNyY GJ38qOW0BPdoaM23sx7c3vFAdyZ5YS5W7+fcQC1JndmEsk6etBgPlfltNv9iFYqC U0LUj1PNYICFWw89j8/l4FCAenDp010= -----END CERTIFICATE-----Generated at Wed May 13 17:19:53 2026 by rpki-client