$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d5fd34aa-2591-314e-8b27-a7c9695e168c.roa File: d5fd34aa-2591-314e-8b27-a7c9695e168c.roa (raw, json) Hash identifier: 4IwvZdU+UQp9r0qu2KnjDTYKwxuqowaGzF54j+syNBE= Subject key identifier: CF:4D:F0:92:6B:67:9D:EF:B4:AE:76:B8:72:0A:F5:6E:B5:4F:44:9A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A61352820268B62105780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d5fd34aa-2591-314e-8b27-a7c9695e168c.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 202 IP address blocks: 20.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:61:35:28:20:26:8b:62:10:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=b8f461a2-d9eb-41fb-bfc8-a686bc50c8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:60:7e:c9:f3:a4:cf:1c:5d:92:e4:c5:04:86: 26:18:0a:21:3b:fa:ef:98:b7:7f:ef:22:2b:e8:47: 69:3c:e5:d1:e0:e0:3e:b4:29:51:4f:04:06:b2:8a: f0:99:7c:65:2b:71:97:85:01:ec:d7:db:c9:30:df: 78:c5:b0:0b:74:9b:95:25:c4:ff:08:89:f2:3c:27: 4b:5d:8b:e2:3e:28:45:d7:01:a5:27:6b:cc:26:24: 14:05:6f:68:6c:8a:89:a7:2d:e8:0f:44:cd:db:87: e9:46:40:f3:97:f6:11:7e:30:ea:b3:fb:38:cf:ce: 53:8a:dc:93:75:38:52:38:16:52:8c:8a:98:42:22: 97:b1:4e:c0:62:fe:79:72:ad:59:cf:51:90:ac:5c: 9f:a4:68:b6:8d:8b:d2:d7:b8:72:52:7e:0f:83:48: 0c:3e:cb:a5:d0:3a:e7:b4:3c:e4:b1:5a:38:c0:0a: 1b:06:34:e9:a2:b6:4e:24:ec:c0:8f:88:da:37:78: 0b:81:08:d9:47:e0:8d:3e:85:64:bd:6d:46:92:eb: ec:a8:94:7c:bd:27:26:6d:a9:ba:a1:5a:4b:50:eb: 64:61:3d:7b:d7:d0:f1:1d:89:5f:bc:f4:27:27:4c: 1c:96:d0:66:a0:55:02:19:36:69:e8:ed:f8:5a:c5: 30:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4D:F0:92:6B:67:9D:EF:B4:AE:76:B8:72:0A:F5:6E:B5:4F:44:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d5fd34aa-2591-314e-8b27-a7c9695e168c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:e6:24:7a:16:53:df:76:f9:a4:81:ec:09:a1:3b:4c:3e:a3: 16:1f:8c:ec:c5:7f:e7:0a:8d:90:cd:d7:86:a7:67:a0:34:46: da:b7:99:4e:0b:0a:68:57:6d:b0:8a:5f:3e:49:61:ea:38:9b: 85:da:c9:95:53:c3:28:91:9b:ae:18:27:d8:06:de:38:86:e2: b1:8c:23:2d:58:f4:11:4f:00:7c:bf:c9:34:51:f3:3b:fe:e7: 47:b2:b8:14:8a:66:ac:4e:a8:86:93:63:ac:e1:f1:a0:85:dd: 2e:c2:a0:32:78:b8:36:a0:67:38:1c:e4:cd:bf:97:ee:8e:15: 36:a7:7d:e8:b2:b2:a6:1c:50:4a:60:97:f3:99:35:6e:a7:7d: dd:e6:a2:63:4d:6e:72:2a:6e:7b:58:1b:27:8c:7f:27:1e:91: 1c:b4:05:a9:e4:5b:58:6b:39:ab:d4:5b:f0:98:8e:cc:fc:f4: d6:50:c1:64:e4:1e:7e:28:82:79:a6:28:64:85:0b:d0:bc:97: 33:87:57:d1:9e:97:6f:6e:25:18:e5:07:aa:64:97:90:c6:01: 62:b3:ee:75:3a:63:a3:72:ef:30:f0:20:30:76:17:d6:f8:a9: 61:e9:c4:7b:51:4c:1b:50:98:7f:6d:e9:49:74:c0:03:fe:0c: e6:5d:78:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04amE1KCAmi2IQV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YjhmNDYxYTItZDllYi00MWZiLWJmYzgtYTY4NmJjNTBjOGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GB+yfOkzxxdkuTFBIYmGAohO/rvmLd/7yIr 6EdpPOXR4OA+tClRTwQGsorwmXxlK3GXhQHs19vJMN94xbALdJuVJcT/CInyPCdL XYviPihF1wGlJ2vMJiQUBW9obIqJpy3oD0TN24fpRkDzl/YRfjDqs/s4z85TityT dThSOBZSjIqYQiKXsU7AYv55cq1Zz1GQrFyfpGi2jYvS17hyUn4Pg0gMPsul0Drn tDzksVo4wAobBjTporZOJOzAj4jaN3gLgQjZR+CNPoVkvW1GkuvsqJR8vScmbam6 oVpLUOtkYT1719DxHYlfvPQnJ0wcltBmoFUCGTZp6O34WsUwZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9N8JJrZ53vtK52uHIK9W61T0SaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDVmZDM0YWEtMjU5MS0z MTRlLThiMjctYTdjOTY5NWUxNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7mJHoWU992+aSB7AmhO0w+oxYfjOzFf+cKjZDN14anZ6A0Rtq3mU4L CmhXbbCKXz5JYeo4m4XayZVTwyiRm64YJ9gG3jiG4rGMIy1Y9BFPAHy/yTRR8zv+ 50eyuBSKZqxOqIaTY6zh8aCF3S7CoDJ4uDagZzgc5M2/l+6OFTanfeiysqYcUEpg l/OZNW6nfd3momNNbnIqbntYGyeMfycekRy0BankW1hrOavUW/CYjsz89NZQwWTk Hn4ognmmKGSFC9C8lzOHV9Gel29uJRjlB6pkl5DGAWKz7nU6Y6Ny7zDwIDB2F9b4 qWHpxHtRTBtQmH9t6Ul0wAP+DOZdeFU= -----END CERTIFICATE-----Generated at Thu Mar 26 22:54:38 2026 by rpki-client