$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa File: da015e1a-f458-3674-9325-2b4dbacc74f1.roa (raw, json) Hash identifier: XDarLoBZtuJMyTeaVfe39JkphjddqP9GuEdoO3uDqc8= Subject key identifier: FA:D0:5C:7C:5E:48:35:94:71:48:72:24:3C:1B:64:A2:8B:3F:E0:F8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D143D49B6DA4F9F276D171380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 3360 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:49:b6:da:4f:9f:27:6d:17:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=2c805b12-c32c-4500-b7c7-6d8fc9dc2a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:1d:8c:91:d5:64:d6:a1:6d:68:00:ca:03: f0:93:31:43:e7:70:7c:4d:2b:47:99:da:d4:2e:78: 3f:3f:de:3c:e9:a6:e7:b6:4f:c9:4a:0a:51:a9:ac: 57:aa:e4:1a:ac:1d:ba:7b:77:80:da:e4:87:6b:0c: ad:77:e5:6e:5d:59:51:3a:c0:f9:fe:4f:40:f5:c9: 8e:eb:44:9c:8c:56:67:d4:f3:91:e0:dc:c4:ef:5b: 81:bd:50:9f:ac:d6:9b:df:3e:71:4e:de:a1:3f:b6: b3:55:f0:c1:c4:0c:36:03:09:a2:a0:c6:6e:42:6f: 5a:5e:fe:f7:d3:bc:14:a1:d9:6c:bf:35:36:72:0f: 59:a2:bd:38:b2:c9:a2:9a:e0:ed:95:e1:33:6b:9d: cd:b4:c0:d8:2e:16:f7:cb:56:6d:cf:50:8b:4e:95: 13:2b:bd:9d:bf:93:b7:8f:b8:44:ec:9f:16:b2:ef: 04:cc:7e:ee:00:2d:bd:39:10:f6:ea:df:64:d2:bd: dc:f3:1c:c2:84:92:dd:a6:c3:4c:bd:28:d7:11:7c: 72:d2:27:27:1d:2e:39:6b:4d:c0:f7:fb:24:7c:96: 4d:72:9d:8f:1c:1f:6c:37:39:e2:77:9f:0f:25:27: 09:fc:8b:a6:49:29:85:0d:56:a0:ad:db:88:73:e7: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D0:5C:7C:5E:48:35:94:71:48:72:24:3C:1B:64:A2:8B:3F:E0:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a5:8c:3d:ad:9b:98:6a:85:41:83:fe:ac:3b:97:52:9c:aa: e8:54:97:8a:2d:ec:61:c2:df:50:78:f8:02:ab:9d:db:5a:21: 4f:14:97:5d:52:b1:95:b3:17:f4:86:09:c5:ed:74:ba:f6:b4: 5d:e4:26:05:f1:9c:ee:ea:e0:28:88:ea:a6:79:cf:b9:2a:09: ce:00:af:e9:c3:09:d7:a4:56:2a:2d:c6:f1:68:e1:a2:48:d5: 9c:11:99:42:f1:6a:37:2c:79:22:1e:de:f0:e1:f6:0b:b1:7a: 4f:30:cd:ff:a5:3b:3b:d3:d4:a6:36:f2:f5:7d:59:06:25:59: 20:cf:29:e2:c9:5c:c7:b1:21:46:62:af:2e:17:2f:77:88:20: 82:4e:17:7e:a6:5f:47:e4:f4:00:ef:8f:0f:8b:0a:ca:7b:cf: 33:27:be:1a:98:40:36:64:bf:50:8e:16:e7:6a:36:36:88:37: ad:6e:20:80:a8:1f:21:57:4f:31:25:82:fa:8a:6c:f3:f2:84: f1:06:eb:e2:95:ab:8f:cb:88:55:df:aa:ab:78:aa:b1:02:38: af:a7:91:36:48:59:1a:92:d9:18:bf:ab:7e:de:db:b5:70:b8: 74:b1:5a:d8:be:36:15:ed:c1:bb:13:59:93:0f:ca:27:34:fc: 81:3f:cf:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUm22k+fJ20XE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MmM4MDViMTItYzMyYy00NTAwLWI3YzctNmQ4ZmM5ZGMyYTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgwdjJHVZNahbWgAygPwkzFD53B8TStHmdrU Lng/P9486abntk/JSgpRqaxXquQarB26e3eA2uSHawytd+VuXVlROsD5/k9A9cmO 60ScjFZn1POR4NzE71uBvVCfrNab3z5xTt6hP7azVfDBxAw2AwmioMZuQm9aXv73 07wUodlsvzU2cg9Zor04ssmimuDtleEza53NtMDYLhb3y1Ztz1CLTpUTK72dv5O3 j7hE7J8Wsu8EzH7uAC29ORD26t9k0r3c8xzChJLdpsNMvSjXEXxy0icnHS45a03A 9/skfJZNcp2PHB9sNznid58PJScJ/IumSSmFDVagrduIc+f+mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrQXHxeSDWUcUhyJDwbZKKLP+D4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwMTVlMWEtZjQ1OC0z Njc0LTkzMjUtMmI0ZGJhY2M3NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSljD2tm5hqhUGD/qw7l1KcquhUl4ot7GHC31B4+AKrndtaIU8Ul11S sZWzF/SGCcXtdLr2tF3kJgXxnO7q4CiI6qZ5z7kqCc4Ar+nDCdekViotxvFo4aJI 1ZwRmULxajcseSIe3vDh9guxek8wzf+lOzvT1KY28vV9WQYlWSDPKeLJXMexIUZi ry4XL3eIIIJOF36mX0fk9ADvjw+LCsp7zzMnvhqYQDZkv1COFudqNjaIN61uIICo HyFXTzElgvqKbPPyhPEG6+KVq4/LiFXfqqt4qrECOK+nkTZIWRqS2Ri/q37e27Vw uHSxWti+NhXtwbsTWZMPyic0/IE/z8Y= -----END CERTIFICATE-----Generated at Thu Mar 26 23:07:28 2026 by rpki-client