$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55b2bc86-f62b-3040-8b74-1f9fa8878ce6.roa File: 55b2bc86-f62b-3040-8b74-1f9fa8878ce6.roa (raw, json) Hash identifier: s/qbn0X8GZ4pJlAR0GkSOufOyW6WBofPaj9hc+HqoC8= Subject key identifier: A7:9F:C6:73:48:B2:4A:A9:30:FC:4C:60:9F:86:4F:DF:2C:BC:81:15 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E0D8421C28B4BDC9D723B7900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55b2bc86-f62b-3040-8b74-1f9fa8878ce6.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 3356 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:21:c2:8b:4b:dc:9d:72:3b:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=bf0e1cf3-13c1-407f-b73d-ecd7d759dc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:51:65:90:07:6f:0d:1f:7a:79:e7:51:8b:d8: 0e:e6:67:2e:b5:fb:2c:bd:85:5f:c6:a9:03:75:a5: ca:16:13:e3:e0:1e:c7:b1:25:70:90:a9:38:2e:aa: c4:cf:82:2c:fd:ec:6e:f4:3f:55:6c:da:f7:8a:c8: f8:2c:bb:c8:f4:08:82:14:46:b0:15:13:48:60:45: 15:55:f3:3d:f6:1a:0c:45:2c:fd:87:d2:ac:b2:48: 4b:d7:67:08:e7:eb:8c:71:e0:6c:98:c9:23:6b:cd: 35:80:2d:3c:c4:28:d3:53:1e:f9:78:7d:6b:12:a9: fb:b4:9c:aa:34:a7:e2:25:43:50:2f:94:ff:fe:23: 78:7f:02:6b:38:1c:e9:c6:af:96:f3:83:e9:ba:ef: 47:9b:a1:89:b9:06:8b:8b:2f:b4:fe:a3:16:41:4e: 1b:f1:13:aa:aa:a6:b0:ae:97:bc:cb:b2:30:64:6a: 12:31:68:df:98:cb:76:47:8d:40:a9:81:4b:a6:3b: aa:6b:3b:38:09:d5:dc:73:94:d8:f7:fe:b6:92:28: 6d:4a:bc:02:fe:d3:bb:1d:a1:4d:de:af:ba:cb:fd: 20:07:d5:e0:41:52:98:37:9e:15:1f:fd:dd:16:17: 67:63:e8:d7:fb:40:49:57:50:2a:eb:95:3c:67:74: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9F:C6:73:48:B2:4A:A9:30:FC:4C:60:9F:86:4F:DF:2C:BC:81:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55b2bc86-f62b-3040-8b74-1f9fa8878ce6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:79:de:cb:2a:4c:c2:06:99:33:2e:b5:67:29:11:6f:c9:39: 12:a0:9d:0d:27:80:7c:62:96:f6:08:df:60:f7:3e:9c:96:d6: c0:03:10:45:58:6f:85:e6:3b:4f:68:24:81:fd:b8:20:ea:58: 29:48:20:d4:5d:8f:86:f3:9f:da:80:21:c2:63:9f:90:43:90: b8:74:ed:d4:e2:1b:71:7e:3b:96:16:9e:1f:3e:d4:05:37:36: dd:1d:12:df:5b:4f:e9:cb:43:f3:46:f1:ae:89:0f:a2:f2:2c: a3:8e:ba:bf:e2:dc:5a:c3:3d:03:03:77:fe:cb:c0:fe:9e:e1: 92:7b:01:db:e5:0b:bc:9f:cc:9f:c3:cd:ce:0c:4c:3d:17:2e: 72:ff:04:fe:3e:b3:7a:7c:f0:76:5d:d5:eb:cb:b0:c7:61:47: 67:cb:a2:b3:25:32:c1:ee:62:5e:a3:3e:e9:e1:e9:56:e3:27: cb:28:4e:2f:92:c4:86:77:7d:a4:c9:69:06:41:d9:54:7c:82: f8:bb:76:e0:b5:e1:0a:48:eb:21:2e:56:cf:22:38:b9:9a:b3: 05:4f:7e:d1:a5:6c:4b:06:71:13:75:e0:55:07:9b:78:4c:79: 57:90:c0:7b:ca:90:f2:3c:ec:94:81:e8:83:3a:28:da:d8:38: a7:4f:a3:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCHCi0vcnXI7eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk YmYwZTFjZjMtMTNjMS00MDdmLWI3M2QtZWNkN2Q3NTlkYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVFlkAdvDR96eedRi9gO5mcutfssvYVfxqkD daXKFhPj4B7HsSVwkKk4LqrEz4Is/exu9D9VbNr3isj4LLvI9AiCFEawFRNIYEUV VfM99hoMRSz9h9KsskhL12cI5+uMceBsmMkja801gC08xCjTUx75eH1rEqn7tJyq NKfiJUNQL5T//iN4fwJrOBzpxq+W84Ppuu9Hm6GJuQaLiy+0/qMWQU4b8ROqqqaw rpe8y7IwZGoSMWjfmMt2R41AqYFLpjuqazs4CdXcc5TY9/62kihtSrwC/tO7HaFN 3q+6y/0gB9XgQVKYN54VH/3dFhdnY+jX+0BJV1Aq65U8Z3QJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKefxnNIskqpMPxMYJ+GT98svIEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTViMmJjODYtZjYyYi0z MDQwLThiNzQtMWY5ZmE4ODc4Y2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh53ssqTMIGmTMutWcpEW/JORKgnQ0ngHxilvYI32D3PpyW1sADEEVY b4XmO09oJIH9uCDqWClIINRdj4bzn9qAIcJjn5BDkLh07dTiG3F+O5YWnh8+1AU3 Nt0dEt9bT+nLQ/NG8a6JD6LyLKOOur/i3FrDPQMDd/7LwP6e4ZJ7AdvlC7yfzJ/D zc4MTD0XLnL/BP4+s3p88HZd1evLsMdhR2fLorMlMsHuYl6jPunh6VbjJ8soTi+S xIZ3faTJaQZB2VR8gvi7duC14QpI6yEuVs8iOLmaswVPftGlbEsGcRN14FUHm3hM eVeQwHvKkPI87JSB6IM6KNrYOKdPo1Y= -----END CERTIFICATE-----Generated at Mon Jun 8 20:11:20 2026 by rpki-client