$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e05ae60a-5ff9-3ee5-884e-da2510336861.roa File: e05ae60a-5ff9-3ee5-884e-da2510336861.roa (raw, json) Hash identifier: kUwIVMNqCZ2+8gZDn3cFwfikmje60AcMPA3YOyHua1I= Subject key identifier: 9C:32:4C:4E:1F:AD:6D:B6:29:8E:5E:41:B8:E7:44:67:D7:35:22:CA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D2D3F9CDF4920A740F11CB540 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e05ae60a-5ff9-3ee5-884e-da2510336861.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 3360 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:9c:df:49:20:a7:40:f1:1c:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=d3f27c28-bf2e-4e6e-8e75-98d1f3395484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9e:1b:fb:a2:0f:30:47:79:c6:07:f4:eb:03: 8b:0c:9b:3c:5c:ce:de:c5:86:7b:8c:9e:89:f5:91: 8d:3b:15:79:79:2f:c4:b0:58:8f:a0:89:31:0b:ca: ec:9e:86:e0:51:03:bb:51:2a:18:29:aa:55:65:f4: c9:97:d3:b5:aa:27:a1:41:73:46:7e:99:01:e6:a9: 65:69:ef:f7:34:40:42:df:7b:08:94:80:78:eb:ef: e2:cf:0e:55:70:3b:ae:1e:fa:60:3e:fc:63:f2:c9: 51:b3:b6:2f:e5:1a:17:10:64:e9:e0:08:58:df:e3: 3c:e2:29:1a:0e:4b:40:d4:70:05:b4:a1:b9:58:a6: 0a:59:eb:7e:93:3c:99:22:2b:69:4a:ca:de:82:6a: 6c:a2:9c:14:2b:78:b4:52:e5:be:38:77:bd:d2:50: a5:73:e9:d8:56:11:1e:bd:f7:55:f7:31:6e:ae:af: 00:48:ae:1e:11:60:1d:c4:71:b6:af:97:40:27:94: b8:64:b6:42:c3:6e:e7:06:3f:27:a0:39:99:4c:8e: 48:48:6d:44:f1:96:b4:06:81:dc:78:75:a9:56:de: eb:6b:9f:5f:80:dd:49:2b:91:c8:2e:11:16:c1:31: 09:10:fb:a4:d2:98:3c:12:e4:0f:c5:62:b3:c2:52: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:32:4C:4E:1F:AD:6D:B6:29:8E:5E:41:B8:E7:44:67:D7:35:22:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e05ae60a-5ff9-3ee5-884e-da2510336861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8e:04:37:88:cb:ed:44:f9:13:be:07:2a:64:d5:1e:2b:f6: 21:18:32:d2:f7:5f:d0:6f:ba:11:ba:dc:02:09:78:e7:c4:d4: 93:59:66:9e:96:ca:49:dc:b8:86:05:e2:18:9c:cb:9d:91:d4: 10:e9:22:93:8f:5b:f6:93:a8:49:49:92:24:74:bc:23:aa:3c: 3a:14:10:05:7a:7c:64:59:4b:82:b9:2b:6c:31:71:56:c6:47: 88:1b:39:4a:52:73:69:f1:52:ab:b4:3d:af:cb:48:cc:48:07: 6d:0e:1f:f2:5b:89:e2:cf:2f:41:fb:17:52:17:af:50:57:6f: 42:92:bf:70:56:1b:4c:1e:68:d3:55:45:c9:f7:1e:53:7e:b4: 7c:52:ce:75:0a:0b:6e:df:05:e6:e3:17:b5:35:5c:00:85:e1: f3:ec:ca:81:8a:f7:40:46:0e:4e:c7:9c:bf:b5:4a:61:3f:2b: fc:37:01:23:0f:4a:94:23:da:9a:e6:44:52:6c:b8:a3:ee:cf: 51:fe:af:a8:b0:fb:82:64:4b:e4:33:97:5d:6e:4c:9e:8a:d6: 0d:b8:20:94:3e:a5:18:39:52:56:f5:25:3f:4f:84:5f:2b:8b: 9d:d5:57:ce:4a:8b:f4:b1:84:f0:f4:35:7e:88:3f:4f:9f:eb: d2:cb:9c:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5zfSSCnQPEctUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ZDNmMjdjMjgtYmYyZS00ZTZlLThlNzUtOThkMWYzMzk1NDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ4b+6IPMEd5xgf06wOLDJs8XM7exYZ7jJ6J 9ZGNOxV5eS/EsFiPoIkxC8rsnobgUQO7USoYKapVZfTJl9O1qiehQXNGfpkB5qll ae/3NEBC33sIlIB46+/izw5VcDuuHvpgPvxj8slRs7Yv5RoXEGTp4AhY3+M84ika DktA1HAFtKG5WKYKWet+kzyZIitpSsregmpsopwUK3i0UuW+OHe90lClc+nYVhEe vfdV9zFurq8ASK4eEWAdxHG2r5dAJ5S4ZLZCw27nBj8noDmZTI5ISG1E8Za0BoHc eHWpVt7ra59fgN1JK5HILhEWwTEJEPuk0pg8EuQPxWKzwlLonQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwyTE4frW22KY5eQbjnRGfXNSLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTA1YWU2MGEtNWZmOS0z ZWU1LTg4NGUtZGEyNTEwMzM2ODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqOBDeIy+1E+RO+Bypk1R4r9iEYMtL3X9BvuhG63AIJeOfE1JNZZp6W ykncuIYF4hicy52R1BDpIpOPW/aTqElJkiR0vCOqPDoUEAV6fGRZS4K5K2wxcVbG R4gbOUpSc2nxUqu0Pa/LSMxIB20OH/JbieLPL0H7F1IXr1BXb0KSv3BWG0weaNNV Rcn3HlN+tHxSznUKC27fBebjF7U1XACF4fPsyoGK90BGDk7HnL+1SmE/K/w3ASMP SpQj2prmRFJsuKPuz1H+r6iw+4JkS+Qzl11uTJ6K1g24IJQ+pRg5Ulb1JT9PhF8r i53VV85Ki/SxhPD0NX6IP0+f69LLnOA= -----END CERTIFICATE-----Generated at Thu Mar 26 20:00:48 2026 by rpki-client