$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa File: 5d2179de-2db2-31e0-91ae-22d99860f145.roa (raw, json) Hash identifier: F3he3VocSszP/j58/Ary8fdbPkqF+wj/n6wYgkAof54= Subject key identifier: 76:CE:B2:D5:B0:F2:10:F8:03:B7:BD:C4:44:FC:86:9B:64:2A:7D:22 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A2E69C6F452A7ABE21980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 3360 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:2e:69:c6:f4:52:a7:ab:e2:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=f0b5bed2-9198-412b-adcd-e215b4cd4aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:92:1d:91:f9:69:6b:a6:e5:3f:e3:f1:9f:e9: 7d:1c:ee:37:9d:ed:5c:66:d2:fa:25:aa:db:f9:ef: 6b:3f:ad:2b:77:65:7f:8d:f8:8c:11:65:66:13:59: b7:81:ba:19:f5:e0:78:17:74:86:92:5c:bb:13:91: bc:9e:41:d2:6b:01:ae:9b:f8:c9:82:17:88:92:c8: 1e:9d:0b:14:7a:62:c5:b5:81:f6:65:d5:8a:9b:6a: 79:61:67:23:50:c0:31:7f:60:64:84:cb:69:5c:c3: 90:35:06:d6:95:9f:f0:44:91:30:ab:b0:90:b8:26: b9:14:56:16:61:7c:40:c1:a0:33:ec:6e:af:6a:d7: ca:cd:bd:b2:5f:29:8f:06:4f:f3:13:43:8d:d2:00: e2:e9:42:f7:2d:bf:76:85:71:d3:46:97:57:fa:5a: 13:a9:12:da:84:ca:85:a9:50:21:6e:58:6f:71:3c: 1a:fa:a9:c5:e9:d1:85:d1:d2:ac:9a:b9:ce:58:ae: fe:3a:60:13:57:9f:d5:b4:90:b5:ca:a6:cc:2e:81: 0b:85:ea:53:09:4d:6c:e6:78:b0:cb:ea:4e:2c:56: 8f:cb:6e:63:d4:8b:7f:81:23:fd:9c:f1:a6:47:79: 46:85:3b:06:71:50:52:8c:37:9d:70:17:30:e9:2e: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CE:B2:D5:B0:F2:10:F8:03:B7:BD:C4:44:FC:86:9B:64:2A:7D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d5:fb:bb:46:7f:6d:d8:7a:40:80:15:5a:4b:c4:98:48:cb: 33:7b:b7:86:e3:2f:a2:a3:f0:f7:d2:1c:70:b6:c7:71:6d:29: e1:f9:a4:94:a4:3f:47:d7:f6:2b:16:cd:42:c4:8c:5b:00:ca: 1c:1b:ff:0b:b6:e3:f8:9c:4a:10:33:26:a3:d9:08:c3:99:62: 9f:e0:3c:92:51:40:a0:80:4c:d3:39:c3:b0:68:e0:39:0b:fd: ad:a8:fa:4e:9a:75:9b:d4:53:c5:dd:1d:c4:d5:29:43:22:d4: 2c:2c:61:92:cf:77:ed:61:cd:be:d1:6b:b3:7e:2f:2e:99:83: 51:59:27:9b:11:1a:3d:f5:69:be:32:37:fc:93:28:b6:b5:18: 20:e1:27:ec:c4:7e:d4:15:46:92:b8:12:2b:9d:4a:77:ab:78: 1d:f2:1b:dc:7c:27:94:88:b5:41:7b:f5:7b:95:34:ba:9d:c2: e1:17:a3:8b:1b:d4:a1:65:c0:72:45:01:fc:d1:1d:1b:79:7a: d2:8f:c4:54:e1:1f:c1:62:e0:8a:bb:3f:0d:f1:e1:3c:7a:7b: 79:02:8e:ff:2e:2b:24:92:9e:d4:79:0e:8f:0d:65:02:ac:ea: a6:46:74:f7:ee:5b:2d:c4:26:51:0c:85:fe:0a:bb:4d:8c:65: 58:c4:02:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ai5pxvRSp6viGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZjBiNWJlZDItOTE5OC00MTJiLWFkY2QtZTIxNWI0Y2Q0YWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpIdkflpa6blP+Pxn+l9HO43ne1cZtL6Jarb +e9rP60rd2V/jfiMEWVmE1m3gboZ9eB4F3SGkly7E5G8nkHSawGum/jJgheIksge nQsUemLFtYH2ZdWKm2p5YWcjUMAxf2BkhMtpXMOQNQbWlZ/wRJEwq7CQuCa5FFYW YXxAwaAz7G6vatfKzb2yXymPBk/zE0ON0gDi6UL3Lb92hXHTRpdX+loTqRLahMqF qVAhblhvcTwa+qnF6dGF0dKsmrnOWK7+OmATV5/VtJC1yqbMLoELhepTCU1s5niw y+pOLFaPy25j1It/gSP9nPGmR3lGhTsGcVBSjDedcBcw6S4+3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbOstWw8hD4A7e9xET8hptkKn0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWQyMTc5ZGUtMmRiMi0z MWUwLTkxYWUtMjJkOTk4NjBmMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPV+7tGf23YekCAFVpLxJhIyzN7t4bjL6Kj8PfSHHC2x3FtKeH5pJSk P0fX9isWzULEjFsAyhwb/wu24/icShAzJqPZCMOZYp/gPJJRQKCATNM5w7Bo4DkL /a2o+k6adZvUU8XdHcTVKUMi1CwsYZLPd+1hzb7Ra7N+Ly6Zg1FZJ5sRGj31ab4y N/yTKLa1GCDhJ+zEftQVRpK4EiudSnereB3yG9x8J5SItUF79XuVNLqdwuEXo4sb 1KFlwHJFAfzRHRt5etKPxFThH8Fi4Iq7Pw3x4Tx6e3kCjv8uKySSntR5Do8NZQKs 6qZGdPfuWy3EJlEMhf4Ku02MZVjEArs= -----END CERTIFICATE-----Generated at Thu Mar 26 19:51:25 2026 by rpki-client