$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa File: 3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa (raw, json) Hash identifier: n1RAmxOUjwMCW02YYmh7o4HLyv++VnAjbAmdRTkd08I= Subject key identifier: 93:B6:AB:BF:06:F7:D7:F4:6D:FC:82:EF:63:77:3C:4B:D4:BE:47:44 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E18AEE64F1F1F8EEBDFACC9C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 3356 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:e6:4f:1f:1f:8e:eb:df:ac:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=c2651642-23d8-497f-9c38-01f9e2a058d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:26:58:06:d0:8a:e4:8c:90:c7:d2:72:a0: a6:54:42:ac:f9:45:d0:e6:a8:56:7c:9f:e0:4d:c9: e7:cc:bf:db:37:60:c6:8f:aa:0d:a7:6d:3e:5d:ce: 96:fb:c5:34:62:95:b8:95:35:39:3d:13:25:9f:ac: dc:79:4c:40:ae:c3:ce:8c:3c:70:f7:ed:2f:6a:f9: a0:f1:50:e1:cd:de:f7:32:cd:00:c9:ce:44:b7:b5: 13:0e:4f:78:ec:5a:69:a5:cb:53:3e:28:32:f0:0c: 98:32:b1:5e:bf:a8:b9:51:49:e9:23:77:21:c8:0a: 1d:f3:9a:c4:4c:3e:0d:e1:9b:c3:32:2f:26:f0:66: b5:fb:f4:8c:62:85:70:3e:cf:29:f1:37:e0:d1:13: 08:10:3c:b7:f2:44:8e:15:20:3a:92:db:33:2a:7d: 1a:58:80:cc:d9:49:a1:21:14:1f:d1:5f:3b:f9:02: dd:de:f1:c0:22:0a:1c:c8:4d:77:07:17:6c:b7:73: 7d:de:4d:bb:fe:70:7e:4b:83:fc:c9:73:f4:cf:dc: 5e:7b:3e:60:32:e8:9d:29:6e:b1:ea:db:d6:d5:a4: 4f:d7:89:36:50:e9:9c:98:0f:38:05:3d:bf:1e:2d: 7b:61:d2:73:75:e5:a6:4b:7c:a0:57:54:00:77:eb: 31:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B6:AB:BF:06:F7:D7:F4:6D:FC:82:EF:63:77:3C:4B:D4:BE:47:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:31:41:c0:ed:7e:f6:58:ab:b0:9e:1a:ac:92:8f:18:24:00: 16:47:22:7f:fa:9b:10:b4:77:18:e0:d8:24:ee:70:5e:8c:ee: 9f:03:85:69:79:47:f2:2d:a5:7f:4c:9c:db:18:18:c2:35:51: 12:1c:71:2c:4d:2f:92:76:c7:e3:c3:a7:5d:2b:e1:4c:59:f4: af:16:d0:2c:b4:2d:a1:24:74:cc:92:da:28:d8:a8:b6:81:07: 1c:a4:36:0e:93:97:b6:a0:28:d1:9d:72:90:13:cc:54:11:3f: 87:40:1a:a2:a9:d3:b5:36:f2:a4:eb:62:d3:ce:ea:d0:30:37: ef:d8:5f:f4:f7:3e:e1:b2:dd:09:1d:94:a6:13:73:23:e5:8a: 96:0c:f7:73:db:78:09:b9:27:9e:77:d3:5b:93:ab:52:0b:36: 12:b1:98:d0:bd:10:df:6f:74:19:38:ba:7e:96:43:2c:07:89: 5e:66:6e:98:63:cf:ca:a7:e0:8a:8c:16:f5:34:71:15:dc:61: 36:64:20:6b:58:6f:00:9d:18:17:9a:8c:67:58:42:d5:53:47: be:13:00:ae:87:d9:fc:e3:4f:d4:25:60:49:7b:e8:e3:1f:c9: 87:20:0f:e5:0e:b5:49:26:be:82:ca:fd:b6:87:91:a4:f5:e8: d5:34:3a:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YruZPHx+O69+sycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk YzI2NTE2NDItMjNkOC00OTdmLTljMzgtMDFmOWUyYTA1OGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFkmWAbQiuSMkMfScqCmVEKs+UXQ5qhWfJ/g TcnnzL/bN2DGj6oNp20+Xc6W+8U0YpW4lTU5PRMln6zceUxArsPOjDxw9+0vavmg 8VDhzd73Ms0Ayc5Et7UTDk947FpppctTPigy8AyYMrFev6i5UUnpI3chyAod85rE TD4N4ZvDMi8m8Ga1+/SMYoVwPs8p8Tfg0RMIEDy38kSOFSA6ktszKn0aWIDM2Umh IRQf0V87+QLd3vHAIgocyE13Bxdst3N93k27/nB+S4P8yXP0z9xeez5gMuidKW6x 6tvW1aRP14k2UOmcmA84BT2/Hi17YdJzdeWmS3ygV1QAd+sxqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJO2q78G99f0bfyC72N3PEvUvkdEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2JmMDg5NjktMWEyYS0z MDk5LThmNjgtYWQxZjRjMGY3ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8xQcDtfvZYq7CeGqySjxgkABZHIn/6mxC0dxjg2CTucF6M7p8DhWl5 R/ItpX9MnNsYGMI1URIccSxNL5J2x+PDp10r4UxZ9K8W0Cy0LaEkdMyS2ijYqLaB BxykNg6Tl7agKNGdcpATzFQRP4dAGqKp07U28qTrYtPO6tAwN+/YX/T3PuGy3Qkd lKYTcyPlipYM93PbeAm5J55301uTq1ILNhKxmNC9EN9vdBk4un6WQywHiV5mbphj z8qn4IqMFvU0cRXcYTZkIGtYbwCdGBeajGdYQtVTR74TAK6H2fzjT9QlYEl76OMf yYcgD+UOtUkmvoLK/baHkaT16NU0OqI= -----END CERTIFICATE-----Generated at Mon Jun 8 20:10:09 2026 by rpki-client