$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa File: ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa (raw, json) Hash identifier: VEGNHlQxJwJxdE41M8u6iKeBpLNnbqjFBgE8CouObdw= Subject key identifier: D5:CA:A8:2B:C1:81:E9:B9:7C:9B:7E:20:12:5F:90:7A:93:05:32:D4 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D143D4A6B5EDE4693D2E7CC80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 202 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4a:6b:5e:de:46:93:d2:e7:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=4fd01280-f901-46f1-823c-329827b39a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:3a:a9:d7:04:7e:d4:55:a6:d1:36:62:1a: 0f:a8:13:d2:c4:75:5d:b0:0c:83:b3:63:12:03:ec: ff:6e:ec:75:e4:cf:ad:85:f7:fd:65:a8:94:02:04: 9c:04:f6:87:46:00:a6:05:93:6f:86:05:de:64:96: 81:55:b5:03:04:16:50:e1:88:d1:fd:76:3c:ae:07: 6b:c9:f7:61:23:c2:f6:43:6d:58:a0:1e:20:f8:bd: 35:76:fd:13:3f:e5:96:24:58:7f:89:1c:bd:4f:5e: f8:79:22:53:24:b0:88:19:4d:4a:d3:ab:da:5e:03: 5c:f4:e2:2c:c2:0a:20:31:4e:a5:e3:84:34:3c:f3: 05:10:78:b1:93:6c:2b:4f:46:dd:9d:7e:3a:0b:dc: b9:e9:3a:22:da:d6:77:98:d5:63:0f:c6:f0:12:b6: 1c:ce:33:02:b0:94:2f:d4:51:fd:a8:4c:dd:10:30: 87:0e:e4:49:d5:4d:d5:e3:91:54:3e:67:17:89:94: 9e:86:f5:93:bd:b6:f6:54:44:ca:a6:67:76:47:ae: f8:42:9b:d6:f9:bb:47:bb:88:ba:cc:b1:7b:c1:3a: 2a:4a:6b:f8:d0:66:1d:c6:e5:a1:75:24:ac:f1:22: 28:b0:5f:a8:0d:8e:2b:59:86:84:d2:96:91:9e:f9: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CA:A8:2B:C1:81:E9:B9:7C:9B:7E:20:12:5F:90:7A:93:05:32:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:4f:08:f4:38:54:2b:c7:ce:28:0c:8a:c9:0c:fd:90:d2:30: 6e:77:4c:46:c0:a0:b8:12:3e:c7:76:18:46:d9:93:b9:9b:5f: c2:52:69:69:e9:e5:ef:a1:e9:c4:f8:1a:a6:ea:82:b2:75:9b: 03:0d:28:90:10:40:d1:1e:5a:ce:7f:7f:19:36:13:4b:4d:0c: d2:6f:f4:05:13:e4:35:d0:12:5a:5c:5b:b9:12:ee:67:7f:b7: a8:33:db:1b:b5:a2:60:75:6f:8d:a3:93:f2:bc:70:ad:94:57: ba:7b:3d:b3:e9:53:6b:fd:3a:70:12:0d:93:e9:ba:e1:02:20: 16:45:47:da:bc:74:c4:53:eb:ab:44:84:69:7b:f4:80:b5:a6: c7:c6:89:55:22:dc:fa:c9:b3:3d:ab:45:28:76:46:77:2c:dd: a9:89:55:fa:3c:49:53:d9:18:66:5e:17:fc:b6:0d:d5:ac:e1: 5f:f2:a3:a1:d2:9d:b6:9e:33:cb:05:e3:c7:99:4c:7e:e7:f8: 3d:fb:a7:d7:68:15:2b:f4:bc:a9:b8:61:f1:83:ad:d8:83:9b: c6:64:aa:1b:5a:d0:0b:24:af:54:0f:99:cd:f1:c0:4c:60:33: 3b:2c:58:e8:5c:3d:75:fa:5e:bf:bc:0e:ee:eb:63:a6:eb:62: 10:d7:44:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUprXt5Gk9LnzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NGZkMDEyODAtZjkwMS00NmYxLTgyM2MtMzI5ODI3YjM5YTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNI6qdcEftRVptE2YhoPqBPSxHVdsAyDs2MS A+z/bux15M+thff9ZaiUAgScBPaHRgCmBZNvhgXeZJaBVbUDBBZQ4YjR/XY8rgdr yfdhI8L2Q21YoB4g+L01dv0TP+WWJFh/iRy9T174eSJTJLCIGU1K06vaXgNc9OIs wgogMU6l44Q0PPMFEHixk2wrT0bdnX46C9y56Toi2tZ3mNVjD8bwErYczjMCsJQv 1FH9qEzdEDCHDuRJ1U3V45FUPmcXiZSehvWTvbb2VETKpmd2R674QpvW+btHu4i6 zLF7wToqSmv40GYdxuWhdSSs8SIosF+oDY4rWYaE0paRnvnsBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXKqCvBgem5fJt+IBJfkHqTBTLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWQxZDM5OTQtY2EzZi0z NDVmLThkYmUtOWZlZTdkZDk3NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdPCPQ4VCvHzigMiskM/ZDSMG53TEbAoLgSPsd2GEbZk7mbX8JSaWnp 5e+h6cT4GqbqgrJ1mwMNKJAQQNEeWs5/fxk2E0tNDNJv9AUT5DXQElpcW7kS7md/ t6gz2xu1omB1b42jk/K8cK2UV7p7PbPpU2v9OnASDZPpuuECIBZFR9q8dMRT66tE hGl79IC1psfGiVUi3PrJsz2rRSh2Rncs3amJVfo8SVPZGGZeF/y2DdWs4V/yo6HS nbaeM8sF48eZTH7n+D37p9doFSv0vKm4YfGDrdiDm8Zkqhta0Askr1QPmc3xwExg MzssWOhcPXX6Xr+8Du7rY6brYhDXRKU= -----END CERTIFICATE-----Generated at Thu Mar 26 23:48:22 2026 by rpki-client