$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa File: 89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa (raw, json) Hash identifier: yE6dCaQ6yHjjVylT7A4w/lbBT5s1x6Dnv8vCI6MxV88= Subject key identifier: 95:8D:A8:FB:B4:DC:F7:9D:98:17:0E:22:86:97:8A:12:AA:2E:61:8C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DA6B01FE0EBE01BED1BE4A980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 3360 IP address blocks: 20.134.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1f:e0:eb:e0:1b:ed:1b:e4:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=3b0384c2-e7a5-4c32-961d-f037030ccf11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:8c:41:ee:9c:fe:ef:1d:b5:fd:cd:52:08: 8d:a1:cd:cb:99:7d:3f:7e:02:a2:d6:57:91:85:99: 3a:72:74:89:ad:b0:11:6a:e2:5c:52:11:1b:a8:30: 06:4c:42:75:2e:0b:73:bc:80:95:98:cc:ec:42:4e: c9:77:b7:5e:0e:8d:16:dc:5a:34:56:37:14:47:21: 05:dd:29:b8:95:2b:c6:83:a2:62:c7:11:9c:e2:7d: 34:43:c5:0f:25:89:59:bd:ac:d9:09:94:86:81:32: fd:cd:12:5a:95:2a:09:88:51:ed:d2:86:4c:6f:1d: c7:6a:41:0b:6d:1e:9b:4e:de:57:e4:b8:ae:9e:28: d6:4f:76:a7:56:cd:e9:a7:b4:17:e4:96:66:ae:00: a6:10:2a:61:f1:4b:9c:10:54:7b:1b:5c:fc:68:a0: 2f:c6:d6:f0:14:47:b8:7f:80:36:6e:31:8d:14:44: 7e:87:97:32:1d:02:b1:88:38:22:cf:60:d0:97:c1: ef:2d:fc:ca:99:83:d1:a4:10:23:a1:32:a2:c7:6b: b5:00:09:d9:8c:5d:d3:5d:b4:fa:76:f1:77:f1:89: a1:a0:58:0c:74:e8:b2:5b:99:6c:e8:d7:d4:1b:7a: d3:73:05:81:31:b0:bd:2f:ca:a0:60:d4:6d:37:c8: f7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8D:A8:FB:B4:DC:F7:9D:98:17:0E:22:86:97:8A:12:AA:2E:61:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:41:3c:8c:c8:40:31:af:21:75:fd:5d:16:aa:cc:b5:e5:53: 02:43:92:fb:31:f1:c4:dd:28:16:c6:5d:af:b2:35:43:ea:51: 8f:97:f7:eb:41:04:aa:2e:32:05:d2:a8:00:0b:7a:b7:21:68: 67:55:03:de:82:29:e7:c5:8c:79:d9:59:83:a5:d9:4a:f8:ed: 01:c1:65:cd:30:a1:2e:b7:72:ed:dc:0d:84:ef:15:7b:a8:ae: 25:73:fb:8c:da:fe:3b:ae:49:1c:f6:8c:e0:55:fb:b2:6d:c3: 11:1b:17:b6:b0:e9:f4:44:96:c4:5c:9e:c0:fe:40:1d:a3:c0: 86:53:b4:17:f2:27:c1:7d:49:d7:d9:54:12:ec:3e:13:5d:4e: 47:4d:6f:3b:b9:b5:b8:ad:a5:1d:8b:1c:0a:31:a9:05:da:cd: 62:f3:d4:c6:21:1c:2a:84:b0:65:5e:c6:7e:97:29:3d:49:45: 64:8d:46:4e:93:5c:58:22:d0:73:54:c7:ab:f2:69:58:8c:d3: 01:3f:12:fa:3d:30:77:d1:af:4c:c6:de:f3:f2:59:52:0d:19: ad:f1:66:64:2b:3f:26:55:03:bc:4d:7d:ac:25:30:6b:1a:9b: 4c:55:7a:7b:5e:ef:1c:79:d2:9f:60:85:44:96:83:ce:c4:f8: 87:30:b2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msB/g6+Ab7RvkqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk M2IwMzg0YzItZTdhNS00YzMyLTk2MWQtZjAzNzAzMGNjZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeaMQe6c/u8dtf3NUgiNoc3LmX0/fgKi1leR hZk6cnSJrbARauJcUhEbqDAGTEJ1LgtzvICVmMzsQk7Jd7deDo0W3Fo0VjcURyEF 3Sm4lSvGg6JixxGc4n00Q8UPJYlZvazZCZSGgTL9zRJalSoJiFHt0oZMbx3HakEL bR6bTt5X5LiunijWT3anVs3pp7QX5JZmrgCmECph8UucEFR7G1z8aKAvxtbwFEe4 f4A2bjGNFER+h5cyHQKxiDgiz2DQl8HvLfzKmYPRpBAjoTKix2u1AAnZjF3TXbT6 dvF38YmhoFgMdOiyW5ls6NfUG3rTcwWBMbC9L8qgYNRtN8j3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWNqPu03PedmBcOIoaXihKqLmGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODlkMzNjMmMtY2M2ZC0z ZmZkLWFiYmQtNjNmNDU5ZDQ0ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5BPIzIQDGvIXX9XRaqzLXlUwJDkvsx8cTdKBbGXa+yNUPqUY+X9+tB BKouMgXSqAALerchaGdVA96CKefFjHnZWYOl2Ur47QHBZc0woS63cu3cDYTvFXuo riVz+4za/juuSRz2jOBV+7JtwxEbF7aw6fRElsRcnsD+QB2jwIZTtBfyJ8F9SdfZ VBLsPhNdTkdNbzu5tbitpR2LHAoxqQXazWLz1MYhHCqEsGVexn6XKT1JRWSNRk6T XFgi0HNUx6vyaViM0wE/Evo9MHfRr0zG3vPyWVINGa3xZmQrPyZVA7xNfawlMGsa m0xVente7xx50p9ghUSWg87E+IcwsjE= -----END CERTIFICATE-----Generated at Wed May 13 13:29:33 2026 by rpki-client