$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa File: a6d04891-47ad-353a-8897-df25d664bb32.roa (raw, json) Hash identifier: rihbsHhm5msSdWpArEvLDLP/XAN9NjOi5U31uXMExPY= Subject key identifier: D3:79:7C:2C:AF:70:84:CF:00:BC:0A:3A:BC:84:47:C8:A7:37:B5:69 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DF4DB5FDD3AC33E35D543FF80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 203 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:5f:dd:3a:c3:3e:35:d5:43:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=665f7bf7-af81-4be6-bde2-8166127ec8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:26:e4:de:c7:17:73:2d:73:3d:bc:85:93:72: 8a:fb:2d:07:14:83:2b:cd:d7:4a:c4:77:ef:b6:2e: e4:e2:80:a0:e5:6e:0e:c5:e7:82:d5:9a:24:d7:d8: 5f:50:1f:16:70:d7:59:5b:17:0d:9b:0f:58:29:43: 28:05:7b:c2:dc:2f:19:d1:41:a0:d5:9a:99:f9:23: 49:a9:43:56:df:2e:20:d9:a0:4b:a7:89:3e:17:61: fd:6c:97:b1:92:e9:9d:d6:13:63:56:b1:0a:c8:62: c3:ab:af:06:64:1b:81:76:73:9e:8d:35:bb:3d:c0: c2:bc:d9:15:a0:19:fa:e7:a9:cd:85:a2:a4:00:95: c7:81:9c:16:fc:e0:05:47:39:68:b6:67:bd:cc:d4: ef:4f:99:c8:69:e8:76:4d:3a:75:25:31:d3:e3:14: 6a:15:60:94:00:7e:b8:93:97:72:4c:05:42:47:82: 86:e0:ba:67:76:da:3f:eb:07:67:13:8f:bf:b3:8e: ec:df:e7:13:b0:74:28:51:e5:bd:5b:64:75:2a:7f: fc:41:5d:24:46:f6:30:16:3f:7b:21:57:c6:70:b5: 47:8f:98:b8:f5:6b:08:4f:02:f0:38:3b:7e:02:0d: 9b:45:ff:a4:4e:a3:04:81:4d:3f:77:39:8c:70:f7: 93:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:79:7C:2C:AF:70:84:CF:00:BC:0A:3A:BC:84:47:C8:A7:37:B5:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:34:66:84:33:27:6c:42:d0:5e:f4:9f:4b:0a:6d:67:6e:b6: cd:92:35:5a:e7:77:c8:5a:ef:37:8d:3f:de:de:91:24:47:0b: a8:86:2f:1f:b3:6a:f9:c8:81:a2:31:92:bd:c0:98:fa:91:08: b3:8f:b6:60:8f:0c:e0:89:bc:f9:db:89:82:76:7c:d3:d3:cc: c9:1c:7e:f9:de:ca:47:17:b1:48:d5:3c:9b:4d:b5:52:33:98: a8:b6:d7:d0:5c:46:49:be:3c:66:16:29:55:43:63:7a:ad:f9: 51:fe:0b:81:74:7e:cf:3b:6a:01:bb:2f:15:db:68:b4:d0:0d: 0f:74:42:1c:78:42:fb:8b:a1:7c:fb:0e:d3:73:16:b0:78:c8: d8:ad:19:64:9d:b3:01:40:92:45:37:8f:0c:5b:4a:89:19:6e: 6a:c3:5d:2e:b1:39:25:8e:94:0a:96:a3:0d:6b:dc:5f:f5:9f: f8:b8:76:49:0b:a1:4f:ee:c5:26:4c:0b:70:c7:36:97:91:5b: 2a:65:36:69:bd:18:90:23:29:a5:8f:35:87:00:ca:cb:38:e8: f9:b0:57:3b:8c:70:61:ba:58:70:76:d2:4c:9e:5e:b5:c8:c4: a5:57:05:c7:2b:b1:2f:dd:09:cb:9a:b4:16:a4:8b:e7:95:07: 23:29:e3:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021/dOsM+NdVD/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NjY1ZjdiZjctYWY4MS00YmU2LWJkZTItODE2NjEyN2VjOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCbk3scXcy1zPbyFk3KK+y0HFIMrzddKxHfv ti7k4oCg5W4OxeeC1Zok19hfUB8WcNdZWxcNmw9YKUMoBXvC3C8Z0UGg1ZqZ+SNJ qUNW3y4g2aBLp4k+F2H9bJexkumd1hNjVrEKyGLDq68GZBuBdnOejTW7PcDCvNkV oBn656nNhaKkAJXHgZwW/OAFRzlotme9zNTvT5nIaeh2TTp1JTHT4xRqFWCUAH64 k5dyTAVCR4KG4Lpndto/6wdnE4+/s47s3+cTsHQoUeW9W2R1Kn/8QV0kRvYwFj97 IVfGcLVHj5i49WsITwLwODt+Ag2bRf+kTqMEgU0/dzmMcPeTewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNN5fCyvcITPALwKOryER8inN7VpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTZkMDQ4OTEtNDdhZC0z NTNhLTg4OTctZGYyNWQ2NjRiYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD80ZoQzJ2xC0F70n0sKbWduts2SNVrnd8ha7zeNP97ekSRHC6iGLx+z avnIgaIxkr3AmPqRCLOPtmCPDOCJvPnbiYJ2fNPTzMkcfvneykcXsUjVPJtNtVIz mKi219BcRkm+PGYWKVVDY3qt+VH+C4F0fs87agG7LxXbaLTQDQ90Qhx4QvuLoXz7 DtNzFrB4yNitGWSdswFAkkU3jwxbSokZbmrDXS6xOSWOlAqWow1r3F/1n/i4dkkL oU/uxSZMC3DHNpeRWyplNmm9GJAjKaWPNYcAyss46PmwVzuMcGG6WHB20kyeXrXI xKVXBccrsS/dCcuatBaki+eVByMp4+c= -----END CERTIFICATE-----Generated at Mon Jun 8 17:57:03 2026 by rpki-client