$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa File: e3806760-7d79-3d01-859b-ff7d8faa361a.roa (raw, json) Hash identifier: Nju8T4OREt4fKWjggRn2sF6AAzV5Wd2OkLTNi7KdHGA= Subject key identifier: DE:05:74:FE:4B:1B:53:5A:C5:E2:96:04:56:E1:FD:E6:B7:D0:98:B5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A3D252B314B5A69F89300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 203 IP address blocks: 20.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:3d:25:2b:31:4b:5a:69:f8:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=02ee116e-8ba1-4f48-a6cb-c2466473032c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:b1:18:16:38:b7:45:41:5c:35:7d:b3:be: 00:e9:ce:8a:02:f4:43:80:45:e4:0f:9e:cd:b0:12: aa:7d:c7:a3:89:c0:fc:01:39:e9:eb:b6:1e:3e:14: f4:f5:0c:cf:2f:c9:f6:20:22:76:8e:af:e6:de:56: a0:e9:22:c2:9d:48:ff:f6:f4:3d:93:1b:47:cc:65: 95:f0:d4:98:dd:82:5c:47:ca:cc:ae:cd:fd:33:2e: 38:64:c6:8e:51:96:88:3b:6e:64:7b:87:e2:88:32: 6a:db:70:59:a2:62:5d:e8:19:44:31:29:89:f4:50: 79:c9:b2:c5:57:ff:09:97:f2:93:58:12:1e:cc:b4: f2:51:82:dd:f9:24:60:1d:40:21:1a:c2:89:d1:35: 52:19:da:c8:82:6c:81:35:15:30:32:e8:df:d3:80: 6e:91:23:99:49:7e:4a:47:61:f0:a6:6b:bf:ea:fb: ea:d7:77:cd:6d:f4:d1:b1:18:6d:28:9a:c0:1b:1d: 51:10:c9:cf:ad:ab:4d:bf:23:83:83:c0:69:90:55: 52:b5:25:7b:d8:5c:4d:c6:f2:c0:07:16:18:e5:8a: fa:c9:1e:03:fd:e8:80:cd:04:42:6c:b0:2c:e2:94: 3e:c2:e4:58:23:d1:b3:98:52:b3:f2:91:5c:72:b3: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:05:74:FE:4B:1B:53:5A:C5:E2:96:04:56:E1:FD:E6:B7:D0:98:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:01:3f:30:25:d3:e3:9f:48:c0:7f:e4:3d:f3:e0:11:ec:80: 76:54:7f:cc:1e:04:d9:a5:f8:1a:b7:13:21:b4:e7:89:bc:b2: 90:73:7e:0f:c7:73:f1:67:b8:b3:16:40:59:7b:2c:ed:6f:dd: 4a:80:be:1f:ac:a9:5f:e2:6b:98:bf:c8:aa:68:2d:58:ef:2f: eb:c3:83:24:8d:82:44:1d:9d:96:e3:fa:a0:db:4f:91:1b:f1: 77:a5:40:b3:57:db:29:63:05:1e:7c:bf:61:70:1f:e2:8f:b0: 7a:3c:fa:ff:59:4a:c3:80:61:37:df:97:13:2d:9c:af:58:af: 97:b2:34:41:f6:a8:e4:27:4a:b1:f6:05:de:59:9d:ed:7f:0d: 9c:3a:38:b7:d3:18:36:92:6b:71:93:1a:37:e9:bc:82:ac:e1: 05:ce:2d:4d:9a:13:08:90:1a:89:92:a3:ca:0b:91:ce:3b:e8: d7:bf:e5:67:9d:8d:e5:21:c6:48:8e:7a:09:46:0a:be:d0:9a: 02:c5:88:f6:11:09:80:b0:77:37:98:48:f1:ea:a4:db:79:68: bf:47:ff:8e:eb:f0:4e:bc:67:1c:11:13:c6:42:89:68:61:db: 5d:75:e7:3a:3f:92:70:fd:2e:43:db:8a:01:8a:9f:42:f3:45: de:c8:b4:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04aj0lKzFLWmn4kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MDJlZTExNmUtOGJhMS00ZjQ4LWE2Y2ItYzI0NjY0NzMwMzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryWxGBY4t0VBXDV9s74A6c6KAvRDgEXkD57N sBKqfcejicD8ATnp67YePhT09QzPL8n2ICJ2jq/m3lag6SLCnUj/9vQ9kxtHzGWV 8NSY3YJcR8rMrs39My44ZMaOUZaIO25ke4fiiDJq23BZomJd6BlEMSmJ9FB5ybLF V/8Jl/KTWBIezLTyUYLd+SRgHUAhGsKJ0TVSGdrIgmyBNRUwMujf04BukSOZSX5K R2Hwpmu/6vvq13fNbfTRsRhtKJrAGx1REMnPratNvyODg8BpkFVStSV72FxNxvLA BxYY5Yr6yR4D/eiAzQRCbLAs4pQ+wuRYI9GzmFKz8pFccrPs6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4FdP5LG1NaxeKWBFbh/ea30Ji1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTM4MDY3NjAtN2Q3OS0z ZDAxLTg1OWItZmY3ZDhmYWEzNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIBPzAl0+OfSMB/5D3z4BHsgHZUf8weBNml+Bq3EyG054m8spBzfg/H c/FnuLMWQFl7LO1v3UqAvh+sqV/ia5i/yKpoLVjvL+vDgySNgkQdnZbj+qDbT5Eb 8XelQLNX2yljBR58v2FwH+KPsHo8+v9ZSsOAYTfflxMtnK9Yr5eyNEH2qOQnSrH2 Bd5Zne1/DZw6OLfTGDaSa3GTGjfpvIKs4QXOLU2aEwiQGomSo8oLkc476Ne/5Wed jeUhxkiOeglGCr7QmgLFiPYRCYCwdzeYSPHqpNt5aL9H/47r8E68ZxwRE8ZCiWhh 21115zo/knD9LkPbigGKn0LzRd7ItAE= -----END CERTIFICATE-----Generated at Thu Mar 26 23:51:31 2026 by rpki-client