$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa File: da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa (raw, json) Hash identifier: C2kAhgL5MimtwVHtweLZn67gwQxNO/dxTtLAFv3qG8I= Subject key identifier: 27:35:CF:38:4C:8A:79:39:62:89:F9:F4:9B:48:72:72:CE:13:8D:E2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DBBA058F9F556B25BACEF7400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 202 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:58:f9:f5:56:b2:5b:ac:ef:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=3d201d55-b9b2-4e1b-9153-ac177054664e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:31:e4:50:c5:12:5f:d4:df:30:8b:93:89:ff: 7d:71:bd:14:64:c1:86:07:23:17:72:da:b5:40:ca: 7a:76:59:2d:e7:e0:fb:42:34:7f:47:af:d9:88:3e: 5e:57:2f:11:3b:5e:9c:b7:54:f4:a2:e3:c2:ba:92: b4:e1:73:46:e3:4d:bb:af:36:65:97:52:f1:a7:60: fb:95:4c:d2:31:7b:a8:ab:d6:f8:18:3b:2b:3f:6c: 6d:4c:36:6d:d6:d5:c7:e6:d5:90:1e:36:75:13:d5: c8:eb:89:e1:14:98:cd:72:e9:c8:bf:c3:33:69:ed: 69:7a:5a:50:2b:41:a3:00:3e:4d:7c:cd:1e:a4:33: 19:50:49:a4:75:19:db:c0:ee:f9:29:31:f5:fa:45: 77:37:1e:d7:5b:4d:61:45:95:11:7f:95:88:e5:2f: 89:1c:f5:ae:1b:60:3e:e0:c5:0f:37:23:8c:14:e6: fa:f3:0c:7b:cd:53:48:e5:1d:35:f3:33:af:d5:66: 26:f8:88:01:a3:3d:41:88:75:c0:0b:20:8c:42:00: 9d:4f:53:07:19:1b:98:50:ea:f9:dd:55:fe:4a:a8: f5:82:d2:e3:0c:46:5b:93:d9:ee:63:d4:44:e1:15: fe:58:d2:91:d0:10:bb:0f:1f:8c:b2:d0:6d:ed:5c: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:35:CF:38:4C:8A:79:39:62:89:F9:F4:9B:48:72:72:CE:13:8D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:bc:fa:77:84:34:5a:0e:91:9c:b5:63:ea:e3:0e:ec:ed:e1: db:2f:d2:38:f6:b7:9a:f3:83:a9:c1:a9:c0:5a:36:2c:1c:c1: 10:c3:f4:7b:e9:9d:e6:26:02:04:d4:c0:d1:50:1e:5d:03:32: d2:b1:bf:b8:83:25:c9:60:dd:76:b6:c9:31:9f:5f:2e:8d:c4: 59:40:c4:05:72:f0:d6:90:08:28:a1:0e:b8:bd:bd:33:8d:1a: 10:ea:13:c3:cd:54:96:a0:8d:cd:4a:16:04:e6:b5:63:d2:7a: f9:f9:af:df:18:4f:aa:7f:eb:5c:9c:61:ed:3c:18:c6:5f:c5: 94:7b:66:53:4b:14:a2:03:d1:54:e0:df:5c:89:10:1b:d9:22: 79:3b:02:81:de:7c:86:c0:cc:69:7c:8c:15:d1:44:7a:8c:fc: f8:6f:26:cd:fb:a4:54:1d:fb:37:9e:e8:60:b9:cc:73:72:8d: 18:4a:b4:2b:0b:c7:c2:59:d4:11:62:2c:f9:2a:d4:2a:18:50: 12:44:cc:f5:5f:ad:b4:48:f9:fa:1c:17:1d:30:36:03:c7:8b: 5f:5c:2d:fb:c1:23:97:30:40:f2:b3:77:ad:d0:74:7d:72:3d: d6:3f:3a:31:59:de:2e:77:b3:65:bd:fd:e3:ad:8a:ac:a4:07: 93:16:a1:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oFj59VayW6zvdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk M2QyMDFkNTUtYjliMi00ZTFiLTkxNTMtYWMxNzcwNTQ2NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjHkUMUSX9TfMIuTif99cb0UZMGGByMXctq1 QMp6dlkt5+D7QjR/R6/ZiD5eVy8RO16ct1T0ouPCupK04XNG4027rzZll1Lxp2D7 lUzSMXuoq9b4GDsrP2xtTDZt1tXH5tWQHjZ1E9XI64nhFJjNcunIv8Mzae1pelpQ K0GjAD5NfM0epDMZUEmkdRnbwO75KTH1+kV3Nx7XW01hRZURf5WI5S+JHPWuG2A+ 4MUPNyOMFOb68wx7zVNI5R018zOv1WYm+IgBoz1BiHXACyCMQgCdT1MHGRuYUOr5 3VX+Sqj1gtLjDEZbk9nuY9RE4RX+WNKR0BC7Dx+MstBt7Vz6AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCc1zzhMink5Yon59JtIcnLOE43iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwMjRiOWItYmI2Mi0z ZDNmLTg0YzctZjM1YjUyNzc5Y2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe8+neENFoOkZy1Y+rjDuzt4dsv0jj2t5rzg6nBqcBaNiwcwRDD9Hvp neYmAgTUwNFQHl0DMtKxv7iDJclg3Xa2yTGfXy6NxFlAxAVy8NaQCCihDri9vTON GhDqE8PNVJagjc1KFgTmtWPSevn5r98YT6p/61ycYe08GMZfxZR7ZlNLFKID0VTg 31yJEBvZInk7AoHefIbAzGl8jBXRRHqM/PhvJs37pFQd+zee6GC5zHNyjRhKtCsL x8JZ1BFiLPkq1CoYUBJEzPVfrbRI+focFx0wNgPHi19cLfvBI5cwQPKzd63QdH1y PdY/OjFZ3i53s2W9/eOtiqykB5MWoXk= -----END CERTIFICATE-----Generated at Wed May 13 16:14:09 2026 by rpki-client