$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/381453b7-1e6e-3c6f-b7be-eda673e18282.roa File: 381453b7-1e6e-3c6f-b7be-eda673e18282.roa (raw, json) Hash identifier: jImvdPjXvVbb07izhNhNQX+cIEcqba9BkZhVtKW2j6I= Subject key identifier: 63:04:CB:AF:DD:8D:F3:1C:85:E3:5D:D8:79:30:F6:0E:C3:68:54:E9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E18AEEA5D42BE33E7D84F6600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/381453b7-1e6e-3c6f-b7be-eda673e18282.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 3356 IP address blocks: 20.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:ea:5d:42:be:33:e7:d8:4f:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=3771b3f3-7eec-4c3b-9bd6-4b6375dc1062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:36:6d:5e:e7:84:65:99:cd:ac:a0:ad:8e:a9: be:46:c9:4b:8b:63:52:8b:04:a6:57:0b:e8:4f:6d: b3:48:be:17:d5:12:85:35:75:e5:b9:f4:3c:d8:68: 03:68:15:96:58:b4:c9:ec:22:df:52:fc:23:5f:e0: 4d:4d:75:a1:29:93:ac:ea:26:62:b7:2f:e8:df:ad: 10:cb:6d:9d:9a:68:39:dd:a1:16:8a:0f:97:11:e0: b7:37:01:94:c5:ab:55:c7:ea:cb:0c:cd:a7:6c:ce: 7b:c8:49:a8:1c:03:fc:e7:b6:aa:63:76:56:5f:2a: 11:c0:64:7b:de:70:1e:17:49:79:ad:36:62:4f:63: 6c:d7:0f:87:de:9b:6f:79:cb:b0:80:8a:9d:b2:86: a3:bd:e6:0c:c8:49:a3:63:87:91:09:e6:a2:32:f0: 40:6f:b5:b7:58:4f:ed:6c:2f:0f:6a:20:42:68:97: b9:bc:ba:3c:72:df:6d:92:69:ea:c3:a1:d9:7e:cc: 64:a1:a1:ff:eb:c4:80:3b:01:1c:b5:b0:59:17:f9: 65:1b:ea:ae:3e:8c:6f:fe:13:80:91:cc:56:5d:1d: 98:13:00:c9:b9:ad:fb:9b:2d:bd:0a:98:b2:7b:14: 9c:08:e3:eb:1f:d7:3e:b0:f3:6a:4f:9a:5c:1b:ab: 6e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:04:CB:AF:DD:8D:F3:1C:85:E3:5D:D8:79:30:F6:0E:C3:68:54:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/381453b7-1e6e-3c6f-b7be-eda673e18282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:9f:8a:fe:28:6e:1a:74:83:cf:96:e1:49:66:e7:40:e2:5a: 50:fb:ce:8c:64:f4:63:fe:06:32:3e:f0:71:93:fa:73:af:4e: ca:a3:f7:42:83:aa:0b:95:f6:30:a3:79:04:b4:9b:bd:c5:77: 98:e4:9e:ed:1a:95:97:0c:1f:f8:37:68:f0:6d:ce:52:9d:16: 2f:1e:8c:b2:ab:31:1c:c5:b5:3b:bf:5e:11:e8:98:eb:ea:7d: ec:77:ac:b7:f8:82:cb:13:54:87:b6:f2:52:79:d5:71:ca:10: e6:1b:18:b7:99:77:07:2c:5d:36:4c:6c:a4:dc:f8:59:88:22: d6:29:5e:dd:28:3d:67:bd:30:2a:e1:9a:63:63:1e:96:6a:ff: ec:4c:b5:b8:3d:6c:06:ef:7e:f0:44:35:c0:09:31:8c:d6:02: 51:fd:bf:65:51:ff:f1:72:33:4d:a9:8a:f8:6f:39:fc:19:97: 66:14:c5:7c:70:18:5e:0d:53:20:c2:49:db:b6:01:9a:0e:38: cf:a3:40:f7:d3:b2:56:9d:7f:13:27:87:ec:45:34:86:03:85: c1:db:f1:87:e9:e4:af:27:53:94:df:fc:ac:28:59:7c:6c:8a: cd:7f:25:97:e2:7b:09:db:29:08:5e:e7:97:f7:8c:c0:c7:eb: 87:54:a3:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrupdQr4z59hPZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk Mzc3MWIzZjMtN2VlYy00YzNiLTliZDYtNGI2Mzc1ZGMxMDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDZtXueEZZnNrKCtjqm+RslLi2NSiwSmVwvo T22zSL4X1RKFNXXlufQ82GgDaBWWWLTJ7CLfUvwjX+BNTXWhKZOs6iZity/o360Q y22dmmg53aEWig+XEeC3NwGUxatVx+rLDM2nbM57yEmoHAP857aqY3ZWXyoRwGR7 3nAeF0l5rTZiT2Ns1w+H3ptvecuwgIqdsoajveYMyEmjY4eRCeaiMvBAb7W3WE/t bC8PaiBCaJe5vLo8ct9tkmnqw6HZfsxkoaH/68SAOwEctbBZF/llG+quPoxv/hOA kcxWXR2YEwDJua37my29CpiyexScCOPrH9c+sPNqT5pcG6tuDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMEy6/djfMcheNd2Hkw9g7DaFTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzgxNDUzYjctMWU2ZS0z YzZmLWI3YmUtZWRhNjczZTE4MjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIefiv4obhp0g8+W4Ulm50DiWlD7zoxk9GP+BjI+8HGT+nOvTsqj90KD qguV9jCjeQS0m73Fd5jknu0alZcMH/g3aPBtzlKdFi8ejLKrMRzFtTu/XhHomOvq fex3rLf4gssTVIe28lJ51XHKEOYbGLeZdwcsXTZMbKTc+FmIItYpXt0oPWe9MCrh mmNjHpZq/+xMtbg9bAbvfvBENcAJMYzWAlH9v2VR//FyM02pivhvOfwZl2YUxXxw GF4NUyDCSdu2AZoOOM+jQPfTsladfxMnh+xFNIYDhcHb8Yfp5K8nU5Tf/KwoWXxs is1/JZfiewnbKQhe55f3jMDH64dUo6o= -----END CERTIFICATE-----Generated at Mon Jun 8 20:10:44 2026 by rpki-client