$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa File: 5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa (raw, json) Hash identifier: 1twVxy+sAIoTsRvJJGVxvDVAOQ0X/2DT2aYa89V62NI= Subject key identifier: D3:49:E3:A8:28:67:41:C4:80:7A:B3:3A:26:D5:9E:76:94:54:2A:EF Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D2D3F9D0282C24D7AE495AFE0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 203 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:9d:02:82:c2:4d:7a:e4:95:af:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=1d90ecc3-9291-43dc-acec-a1a446406037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:4a:5a:f7:84:4d:c1:83:03:5b:7d:a9:56: 87:7b:db:1a:84:a2:d9:e0:65:c9:0e:3b:55:ad:5d: 0d:48:05:f6:c9:52:b6:c9:37:8f:33:2a:61:2a:cc: fe:23:27:c7:80:99:1a:a5:c7:9d:21:29:af:71:a2: d7:48:49:46:db:ec:d7:39:53:07:a3:14:45:f9:db: e6:ba:31:d4:e1:a7:86:4c:d5:ff:b8:5b:51:ee:ce: 66:06:96:59:8d:ed:da:41:94:c1:b7:93:eb:cc:91: d8:ce:60:fc:68:f7:9e:41:13:d7:22:d0:9f:0a:92: 54:77:0b:2c:77:76:7b:f6:32:49:7b:b3:fb:a7:1c: 6d:54:05:95:c5:bd:a6:7e:1a:0e:32:3a:b2:47:5f: 46:be:c5:b5:60:20:49:a0:2e:61:e3:a4:70:09:f1: 49:02:de:19:67:8e:2d:90:56:62:32:fb:1b:a3:14: 2f:6c:07:39:50:d6:a2:e1:18:dd:11:ac:67:8c:79: 57:83:c4:b9:2c:14:41:ce:11:a3:d0:d8:1c:35:03: 61:5b:61:9f:41:d8:2e:d1:d6:06:06:42:ab:16:d2: 8b:5a:2b:88:02:85:54:b4:9c:c5:fd:0a:31:0b:d4: 04:c3:a2:39:d0:de:8f:67:43:db:27:3a:06:00:99: 6d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:49:E3:A8:28:67:41:C4:80:7A:B3:3A:26:D5:9E:76:94:54:2A:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:de:2b:04:32:6f:a7:97:61:a0:c6:6d:de:3a:bd:85:2c:ef: f0:99:c1:44:d0:97:db:c1:90:e9:4e:47:e5:11:dd:24:2b:f0: fe:52:d7:e8:36:5a:4a:c5:fa:62:70:ba:d9:b4:eb:5b:ae:7e: 28:aa:e2:73:03:62:79:1d:4f:7c:38:f3:95:1f:0c:8b:90:b8: 24:bb:b8:78:0e:1c:47:0c:dc:1a:86:cf:3b:06:13:30:c8:0b: 27:eb:6d:cb:48:1c:0a:58:c4:ed:cc:25:b7:14:e4:c8:47:88: 90:05:9a:d4:e7:8d:0a:92:39:5c:f4:5e:45:82:09:04:58:70: 52:0d:f4:4f:c6:9c:7d:35:c4:9d:d7:ae:25:5f:a2:9a:42:b1: ca:e7:22:15:c9:b2:0c:b3:f1:83:c6:0f:1a:5b:77:a0:49:20: 8c:19:39:87:57:98:0d:61:63:92:ec:84:2e:da:5f:4a:82:a8: 32:8f:d8:86:1a:51:bb:b6:78:54:52:0b:f2:0d:be:44:52:b2: df:d0:94:15:91:a5:7d:b4:90:37:39:9b:20:e2:e9:6e:61:1f: cc:8d:e0:36:9c:93:3f:d8:0d:7d:44:35:f1:61:a5:f5:9e:bb: a3:d4:ef:be:15:af:8a:a2:f6:ed:a9:cb:62:e7:31:21:a4:98: 6c:33:51:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP50CgsJNeuSVr+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MWQ5MGVjYzMtOTI5MS00M2RjLWFjZWMtYTFhNDQ2NDA2MDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBFKWveETcGDA1t9qVaHe9sahKLZ4GXJDjtV rV0NSAX2yVK2yTePMyphKsz+IyfHgJkapcedISmvcaLXSElG2+zXOVMHoxRF+dvm ujHU4aeGTNX/uFtR7s5mBpZZje3aQZTBt5PrzJHYzmD8aPeeQRPXItCfCpJUdwss d3Z79jJJe7P7pxxtVAWVxb2mfhoOMjqyR19GvsW1YCBJoC5h46RwCfFJAt4ZZ44t kFZiMvsboxQvbAc5UNai4RjdEaxnjHlXg8S5LBRBzhGj0NgcNQNhW2GfQdgu0dYG BkKrFtKLWiuIAoVUtJzF/QoxC9QEw6I50N6PZ0PbJzoGAJltmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNJ46goZ0HEgHqzOibVnnaUVCrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWEyYTZkMzEtOGNkMC0z NTIxLWJlYjEtZjY5YzA0NmNiMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTeKwQyb6eXYaDGbd46vYUs7/CZwUTQl9vBkOlOR+UR3SQr8P5S1+g2 WkrF+mJwutm061uufiiq4nMDYnkdT3w485UfDIuQuCS7uHgOHEcM3BqGzzsGEzDI CyfrbctIHApYxO3MJbcU5MhHiJAFmtTnjQqSOVz0XkWCCQRYcFIN9E/GnH01xJ3X riVfoppCscrnIhXJsgyz8YPGDxpbd6BJIIwZOYdXmA1hY5LshC7aX0qCqDKP2IYa Ubu2eFRSC/INvkRSst/QlBWRpX20kDc5myDi6W5hH8yN4Dackz/YDX1ENfFhpfWe u6PU774Vr4qi9u2py2LnMSGkmGwzUUQ= -----END CERTIFICATE-----Generated at Thu Mar 26 20:12:46 2026 by rpki-client