$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa File: 9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa (raw, json) Hash identifier: wkhXW/VlbbH0bSEaxfqbB0Syl14KS/+mnASH0MTY5Zs= Subject key identifier: 7C:7A:36:D9:87:74:63:8D:5B:00:E6:CF:CB:78:41:03:C6:65:B4:81 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D143D4A3CB71A88AF6E053A00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 203 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4a:3c:b7:1a:88:af:6e:05:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=ff31c7cc-4acd-4eee-9f4e-4cb9728a3a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fe:95:d3:ad:09:41:cc:27:3c:fe:3b:f0:18: 5e:eb:a0:22:64:b0:10:8b:78:9d:2e:d2:01:8d:dc: 41:5b:fc:63:38:45:f1:08:6a:79:ff:9d:86:ed:f1: 67:46:d9:32:3d:fa:46:ff:3a:61:c2:36:37:74:fe: c7:7f:d7:c8:31:09:a9:ea:10:03:d6:40:6d:4b:05: 21:ec:4d:90:58:e3:43:95:ca:87:ed:63:0f:42:ef: 06:44:c6:1f:13:2c:5a:74:e3:6b:5c:a2:88:c4:36: 86:b6:c9:7a:3f:fd:a1:a7:62:4b:96:95:ad:f3:62: cf:1d:78:af:84:12:4d:3f:71:0d:e8:da:b7:15:36: 1d:52:53:85:8b:81:c1:65:e6:b3:fc:48:11:78:8f: c8:28:52:4c:f9:83:de:d6:0f:af:7b:b9:6f:4c:78: ed:10:ac:4a:84:b2:4e:8d:8b:a2:08:f5:ae:9a:0e: dd:56:34:50:f0:e8:ae:21:93:a6:1f:e8:e9:79:4d: 68:4f:ff:86:35:f2:3e:8b:6a:33:ed:55:12:b7:b7: 27:e1:56:87:c2:da:99:4d:28:31:7e:d7:45:64:f7: 92:0b:42:9a:ff:e9:30:0d:bb:67:7a:0d:1b:ee:e3: b1:b4:28:27:f4:15:29:0c:d2:8e:13:bc:bf:83:30: f7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7A:36:D9:87:74:63:8D:5B:00:E6:CF:CB:78:41:03:C6:65:B4:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:91:55:28:28:37:e5:56:e9:6c:5c:7b:c0:13:33:9d:f7:8a: ad:42:a9:7e:82:7d:08:82:54:e4:a3:42:d0:40:b0:59:65:73: 5b:37:22:e8:d5:46:ed:91:38:2e:d9:fb:23:71:3a:92:18:30: 6e:46:56:c0:ec:bb:99:ac:06:0d:0e:95:42:24:67:96:ac:4f: 0a:1f:30:0b:fe:4b:3f:a4:5c:94:c5:99:fc:67:c9:df:5c:90: db:6e:18:27:a4:3d:94:37:0a:d2:72:7c:65:41:b1:ad:db:76: 38:6e:f5:6c:68:82:ac:18:f0:a0:8d:5f:51:00:b9:4d:d9:d2: 93:a1:9e:f6:28:39:d9:a4:f1:c0:f9:b3:62:01:74:ed:2a:d3: 73:ee:e1:0f:da:ca:2a:c9:a9:d7:3a:4b:99:36:09:69:6e:22: 5d:83:f2:fa:53:f5:e4:2b:e2:98:f2:cc:a7:8a:4e:71:c8:97: e9:7d:8a:20:45:e0:27:c6:0b:e5:d6:03:ad:29:d1:bf:0e:14: 1a:cf:18:29:df:3f:ab:ac:d4:b3:ac:eb:0f:b6:10:c1:ed:98: d4:21:f4:26:a1:75:68:84:8b:31:c1:7c:f8:5a:5f:c3:e1:b1: 8d:3a:98:0c:1d:9a:d7:14:03:c3:11:c9:0a:fe:bf:48:48:18: b3:40:ff:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUo8txqIr24FOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmYzMWM3Y2MtNGFjZC00ZWVlLTlmNGUtNGNiOTcyOGEzYTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv6V060JQcwnPP478Bhe66AiZLAQi3idLtIB jdxBW/xjOEXxCGp5/52G7fFnRtkyPfpG/zphwjY3dP7Hf9fIMQmp6hAD1kBtSwUh 7E2QWONDlcqH7WMPQu8GRMYfEyxadONrXKKIxDaGtsl6P/2hp2JLlpWt82LPHXiv hBJNP3EN6Nq3FTYdUlOFi4HBZeaz/EgReI/IKFJM+YPe1g+ve7lvTHjtEKxKhLJO jYuiCPWumg7dVjRQ8OiuIZOmH+jpeU1oT/+GNfI+i2oz7VUSt7cn4VaHwtqZTSgx ftdFZPeSC0Ka/+kwDbtneg0b7uOxtCgn9BUpDNKOE7y/gzD39wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHx6NtmHdGONWwDmz8t4QQPGZbSBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWE2N2IwYmUtOWI4NS0z ODFmLThmOGItODBmM2E0YjkzYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6RVSgoN+VW6Wxce8ATM533iq1CqX6CfQiCVOSjQtBAsFllc1s3IujV Ru2ROC7Z+yNxOpIYMG5GVsDsu5msBg0OlUIkZ5asTwofMAv+Sz+kXJTFmfxnyd9c kNtuGCekPZQ3CtJyfGVBsa3bdjhu9WxogqwY8KCNX1EAuU3Z0pOhnvYoOdmk8cD5 s2IBdO0q03Pu4Q/ayirJqdc6S5k2CWluIl2D8vpT9eQr4pjyzKeKTnHIl+l9iiBF 4CfGC+XWA60p0b8OFBrPGCnfP6us1LOs6w+2EMHtmNQh9CahdWiEizHBfPhaX8Ph sY06mAwdmtcUA8MRyQr+v0hIGLNA/ws= -----END CERTIFICATE-----Generated at Tue Mar 10 05:39:52 2026 by rpki-client