$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa File: e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa (raw, json) Hash identifier: SkXaDWoaZSct7ZQW/B3X+j8trg83CNW9HQXpDZdz/aw= Subject key identifier: 84:3B:A4:08:A5:D5:11:4B:86:E1:DA:48:E1:49:68:16:76:0A:A1:30 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D143D49C79E997725900C5240 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 3356 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:49:c7:9e:99:77:25:90:0c:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=fd24245a-49ef-46be-921e-1c55c9a3a744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5e:21:75:fe:8e:0b:c8:b8:59:59:74:74:9b: 6c:44:69:20:d8:96:3a:8a:89:4a:13:4f:d0:f5:35: c2:2e:4d:29:a9:e7:72:57:d8:43:33:2c:0b:ea:70: 07:3d:cb:6e:8f:47:67:e1:65:d1:80:7d:ee:57:fc: fc:5b:84:af:a4:10:42:3c:98:9b:17:dc:96:68:59: 57:35:0b:cc:7e:50:97:be:c2:0a:88:bc:07:7c:ac: 92:d7:f2:19:6c:8e:aa:4d:03:05:50:f8:78:92:b2: a7:32:6c:39:ab:0a:d2:04:a6:96:dc:3b:3d:31:f2: 69:5a:eb:25:9c:04:97:1d:ce:ce:b2:8d:50:2c:27: 4f:a4:27:60:3b:45:3c:9d:01:cc:9c:fd:2e:a0:6f: 64:23:bd:1c:c1:44:66:03:08:3c:bc:dc:7d:54:8c: 6f:96:96:06:19:c4:28:94:80:77:2c:5d:79:86:09: a3:2b:86:69:10:2e:2e:9f:68:3d:60:5b:1b:b8:92: 80:58:bc:82:b9:2d:dc:67:e6:14:e3:a2:e3:0e:e8: 79:e6:48:c7:b6:e8:8b:ec:6f:a8:63:3c:74:a6:7d: 94:db:81:a6:88:a0:e1:61:9c:10:6d:a3:cd:b2:54: 67:e8:78:56:93:4f:88:fd:9a:84:c5:9c:5c:8f:33: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3B:A4:08:A5:D5:11:4B:86:E1:DA:48:E1:49:68:16:76:0A:A1:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:59:7d:c0:68:f9:aa:a7:7a:0b:67:a6:d1:03:ce:87:3a:fc: 5a:07:e4:11:ca:50:89:c8:29:46:13:09:6c:4a:87:4a:72:b9: a8:e4:0b:01:58:92:1f:92:54:f6:df:75:f1:10:e7:3d:07:2a: 95:f4:52:03:df:b1:0e:a2:47:37:11:a2:78:be:5c:0b:2d:d7: 31:95:c3:e2:81:bd:42:51:b0:f4:74:f6:24:46:a8:9f:79:75: 5b:34:ee:2c:e9:cb:c0:1e:63:3e:10:1c:fe:16:f8:05:80:f5: bb:ab:bd:ed:7f:c1:33:0f:16:4e:a3:73:96:2c:7f:fd:6a:90: 71:d2:95:0a:f5:ff:f8:f9:95:4f:53:47:a4:e5:49:7e:c2:59: 61:72:eb:9d:a2:0a:a0:10:c4:d0:a4:1c:ec:74:90:e9:92:f4: 5d:af:94:e3:47:7c:b7:52:eb:42:80:1d:da:1d:80:60:15:97: 27:8a:21:99:f9:6d:2a:20:d7:c7:db:ec:d3:62:83:d0:e3:7c: 68:0c:d2:99:b9:3d:cd:d5:e0:9b:e7:b0:66:0c:a4:93:04:6e: 62:58:15:a5:18:01:23:67:3d:a6:89:18:bd:bf:df:e6:0b:cd: 3a:f8:d9:6e:e6:67:9c:73:f6:e1:08:f4:29:9c:d2:9b:a4:2d: c8:20:32:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUnHnpl3JZAMUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmQyNDI0NWEtNDllZi00NmJlLTkyMWUtMWM1NWM5YTNhNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil4hdf6OC8i4WVl0dJtsRGkg2JY6iolKE0/Q 9TXCLk0pqedyV9hDMywL6nAHPctuj0dn4WXRgH3uV/z8W4SvpBBCPJibF9yWaFlX NQvMflCXvsIKiLwHfKyS1/IZbI6qTQMFUPh4krKnMmw5qwrSBKaW3Ds9MfJpWusl nASXHc7Oso1QLCdPpCdgO0U8nQHMnP0uoG9kI70cwURmAwg8vNx9VIxvlpYGGcQo lIB3LF15hgmjK4ZpEC4un2g9YFsbuJKAWLyCuS3cZ+YU46LjDuh55kjHtuiL7G+o Yzx0pn2U24GmiKDhYZwQbaPNslRn6HhWk0+I/ZqExZxcjzNaWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQ7pAil1RFLhuHaSOFJaBZ2CqEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTJkMTdkNzEtZjZmOC0z YmU1LWFkMmQtODgzODE3MTYwOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANZfcBo+aqnegtnptEDzoc6/FoH5BHKUInIKUYTCWxKh0pyuajkCwFY kh+SVPbfdfEQ5z0HKpX0UgPfsQ6iRzcRoni+XAst1zGVw+KBvUJRsPR09iRGqJ95 dVs07izpy8AeYz4QHP4W+AWA9burve1/wTMPFk6jc5Ysf/1qkHHSlQr1//j5lU9T R6TlSX7CWWFy652iCqAQxNCkHOx0kOmS9F2vlONHfLdS60KAHdodgGAVlyeKIZn5 bSog18fb7NNig9DjfGgM0pm5Pc3V4JvnsGYMpJMEbmJYFaUYASNnPaaJGL2/3+YL zTr42W7mZ5xz9uEI9Cmc0pukLcggMjU= -----END CERTIFICATE-----Generated at Thu Mar 26 19:55:25 2026 by rpki-client