$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa File: 21be8a54-9d15-3bcf-b328-06e1c263d460.roa (raw, json) Hash identifier: uaMNT5ofuz5ZpOKq/C04EtB4wwEo6S9iUIQHH1gwXes= Subject key identifier: 32:FF:4C:83:15:8D:2B:BC:F8:A6:C3:DD:63:63:75:0A:E9:B7:2B:68 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DF4DB5FF404C1246A623E1900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 3356 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:5f:f4:04:c1:24:6a:62:3e:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=32e9b703-e911-4d0c-a29c-b165111712c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:38:35:5c:28:45:c6:7f:dd:2e:45:8b:34: 41:03:b7:fc:ba:94:20:52:06:0f:9c:23:7e:8f:67: 95:85:22:88:30:2c:c6:bd:af:b2:5d:ac:b2:23:7f: e1:dd:81:da:b5:13:33:f3:e2:51:14:93:13:a6:f0: b0:c1:b0:84:0c:36:6e:bb:3e:7b:12:fb:1b:5f:32: c7:30:50:b2:34:42:93:5a:ef:3a:7f:06:b6:9e:77: 1d:90:0d:01:bc:dc:03:5a:21:21:8a:60:af:a1:16: 1c:cc:d0:9b:76:37:f4:1a:a7:fa:5d:69:34:37:d5: d6:57:24:7a:7c:4b:9b:15:d3:45:54:be:2e:0a:f6: 94:08:59:96:7f:af:50:6b:08:63:eb:1d:44:5f:40: 0f:d8:3d:97:b7:3b:2f:08:8d:e6:45:f3:99:00:71: 1c:92:7c:5e:3d:fa:18:2b:88:61:00:b7:30:5a:d8: 2f:00:f1:03:e1:4e:7d:2c:ce:7f:47:62:94:bc:aa: 19:fa:f6:4e:62:62:24:31:36:ba:10:fd:1d:00:2d: 60:b2:4d:20:ad:27:cb:c1:ef:e4:6c:ca:82:e3:66: ed:b9:32:43:a2:45:9c:16:99:d9:08:69:e0:47:fb: e5:cd:2c:fa:5a:1a:a3:3d:ac:2c:2b:a8:58:1f:8b: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FF:4C:83:15:8D:2B:BC:F8:A6:C3:DD:63:63:75:0A:E9:B7:2B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:4c:ec:14:8c:cb:20:80:d6:3c:a1:64:00:8c:d1:ea:a9:27: de:f5:d0:1f:bd:75:de:2d:01:43:32:02:8b:8e:d6:ef:37:b6: 1a:e3:ad:37:a1:57:d9:9c:28:88:f6:ef:fa:32:d8:11:b7:39: 6c:5a:1b:47:96:35:dd:62:ce:9a:49:47:40:c6:8f:2d:2d:f2: 03:a1:18:28:35:4e:ff:c5:46:50:02:63:4b:c3:f9:3d:2c:00: e0:43:0b:ab:1c:8b:3c:65:0d:08:1c:be:3e:e3:d2:d4:9e:e2: cb:55:48:67:17:41:45:ae:95:7d:24:7e:84:cd:4b:e0:e1:7a: a8:1a:07:61:8a:57:c0:37:3d:70:64:3d:1f:b3:4d:c8:3d:c0: 9a:b5:31:27:c4:5a:70:ea:55:e5:3c:c3:55:1a:dd:0c:04:9c: 10:69:a1:f5:0d:aa:66:39:aa:bb:d6:89:7d:79:ab:4f:e0:a8: ca:f6:8f:5d:b1:e7:e8:35:61:8a:6c:68:e4:ce:a5:f2:d3:b9: 01:d7:b9:7c:bb:fe:43:f3:ae:35:2f:cd:47:68:88:a7:49:a7: 27:d2:51:e6:75:3f:da:bc:ef:ac:0f:37:ec:b7:a5:90:9d:10: 19:4c:11:0c:51:59:b9:f4:dd:1e:4e:78:81:62:f0:12:35:a2: 97:7c:17:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021/0BMEkamI+GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MzJlOWI3MDMtZTkxMS00ZDBjLWEyOWMtYjE2NTExMTcxMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlc4NVwoRcZ/3S5FizRBA7f8upQgUgYPnCN+ j2eVhSKIMCzGva+yXayyI3/h3YHatRMz8+JRFJMTpvCwwbCEDDZuuz57EvsbXzLH MFCyNEKTWu86fwa2nncdkA0BvNwDWiEhimCvoRYczNCbdjf0Gqf6XWk0N9XWVyR6 fEubFdNFVL4uCvaUCFmWf69Qawhj6x1EX0AP2D2XtzsvCI3mRfOZAHEcknxePfoY K4hhALcwWtgvAPED4U59LM5/R2KUvKoZ+vZOYmIkMTa6EP0dAC1gsk0grSfLwe/k bMqC42btuTJDokWcFpnZCGngR/vlzSz6WhqjPawsK6hYH4udwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL/TIMVjSu8+KbD3WNjdQrptytoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjFiZThhNTQtOWQxNS0z YmNmLWIzMjgtMDZlMWMyNjNkNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJM7BSMyyCA1jyhZACM0eqpJ9710B+9dd4tAUMyAouO1u83thrjrTeh V9mcKIj27/oy2BG3OWxaG0eWNd1izppJR0DGjy0t8gOhGCg1Tv/FRlACY0vD+T0s AOBDC6scizxlDQgcvj7j0tSe4stVSGcXQUWulX0kfoTNS+DheqgaB2GKV8A3PXBk PR+zTcg9wJq1MSfEWnDqVeU8w1Ua3QwEnBBpofUNqmY5qrvWiX15q0/gqMr2j12x 5+g1YYpsaOTOpfLTuQHXuXy7/kPzrjUvzUdoiKdJpyfSUeZ1P9q876wPN+y3pZCd EBlMEQxRWbn03R5OeIFi8BI1opd8F0U= -----END CERTIFICATE-----Generated at Mon Jun 8 20:08:53 2026 by rpki-client