$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa File: e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa (raw, json) Hash identifier: MJjytW1xGknFn7dhRNryJxY/YwHZb+ECRdwUOXLa53E= Subject key identifier: 83:3B:5B:D1:DB:C2:94:1F:9B:0E:3D:3C:88:F7:85:8D:0F:96:D5:2A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584DF4DB5FC5F009BB44AD7B0D80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 3356 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:5f:c5:f0:09:bb:44:ad:7b:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=9a3f0dfc-63bf-4baa-b34f-10d59531494f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:83:83:49:00:a4:c9:8d:64:09:0c:ea:be:97: 13:96:94:64:aa:ea:f9:99:3a:89:10:b7:a8:0d:54: e9:03:38:ca:0b:fc:51:88:65:e7:17:7d:3f:87:55: f0:af:ac:fd:14:c5:52:66:be:3f:6d:6c:51:9e:e0: 19:98:dd:d7:0f:a2:87:98:11:71:5d:18:e2:62:63: d0:7d:cf:c3:34:27:82:41:b6:3b:51:89:dc:1e:40: 12:ce:54:f1:60:75:2e:8f:10:d4:dc:bc:5d:13:4a: 96:73:3f:9b:f6:c4:25:da:1f:49:5e:ad:50:69:6f: bd:b1:16:47:6a:e1:cf:c4:95:bc:95:3e:ca:55:13: af:80:79:ab:46:7b:31:09:b1:26:01:d7:4b:7e:f9: 82:a2:9d:e8:13:b0:d6:84:7e:29:40:1a:23:51:f1: 39:b2:12:3b:bb:bb:e4:29:ce:84:9f:b1:a9:cb:d4: c3:cc:c2:52:47:09:91:09:99:e2:d2:89:6c:53:4b: 8b:7f:c0:44:35:66:9c:cb:19:0d:93:a5:13:21:db: 6c:56:a6:42:25:e3:ae:34:51:40:a8:0c:22:74:75: 03:1c:43:9f:76:df:39:03:87:d5:57:e3:28:b8:2a: ba:6d:77:4b:f8:53:0a:12:ce:6b:8e:00:18:1d:b2: d2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3B:5B:D1:DB:C2:94:1F:9B:0E:3D:3C:88:F7:85:8D:0F:96:D5:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ce:22:06:8d:c7:9d:57:17:94:fc:cf:d6:99:42:0b:2e:89: 15:24:0b:38:e5:91:26:06:8d:cc:63:5a:5d:77:60:f0:c2:40: f0:7c:c8:4f:d8:4c:4f:cf:f0:ce:25:54:47:5d:94:ad:d7:66: c5:0a:99:ac:d2:b1:c1:fc:9f:d6:f6:29:62:02:7a:f8:78:c8: 32:db:25:e4:cd:05:64:88:53:ae:c1:ae:50:80:55:e2:7b:0c: be:48:d1:42:5b:cb:9c:06:d4:bb:c0:6e:b7:d5:56:d1:0f:08: 46:fa:af:c6:fe:7c:9b:b8:dc:59:b2:49:90:1e:bd:d3:af:a8: 71:d2:6c:72:d4:56:67:46:22:a2:10:2e:fa:d3:0a:f2:23:6f: 5a:0a:3f:d5:22:eb:9a:b0:e4:af:95:1c:30:3a:64:eb:74:f6: a0:e7:b3:60:30:3c:da:3d:01:42:b0:51:b3:03:c7:92:29:1b: ea:0b:1a:75:0d:33:3a:48:26:6f:fe:ab:cf:bf:6a:23:65:ba: ce:d8:63:ff:c9:38:55:a8:dd:63:0b:11:df:b9:6f:bc:ac:1f: b5:08:1c:a8:81:ac:2a:e0:dc:10:c7:df:c6:d1:30:55:a2:08: 0d:62:a0:65:9a:7e:20:ed:4a:85:90:e6:d8:cc:69:99:81:36: aa:65:ff:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021/F8Am7RK17DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk OWEzZjBkZmMtNjNiZi00YmFhLWIzNGYtMTBkNTk1MzE0OTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYODSQCkyY1kCQzqvpcTlpRkqur5mTqJELeo DVTpAzjKC/xRiGXnF30/h1Xwr6z9FMVSZr4/bWxRnuAZmN3XD6KHmBFxXRjiYmPQ fc/DNCeCQbY7UYncHkASzlTxYHUujxDU3LxdE0qWcz+b9sQl2h9JXq1QaW+9sRZH auHPxJW8lT7KVROvgHmrRnsxCbEmAddLfvmCop3oE7DWhH4pQBojUfE5shI7u7vk Kc6En7Gpy9TDzMJSRwmRCZni0olsU0uLf8BENWacyxkNk6UTIdtsVqZCJeOuNFFA qAwidHUDHEOfdt85A4fVV+MouCq6bXdL+FMKEs5rjgAYHbLSNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIM7W9HbwpQfmw49PIj3hY0PltUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTJkMTdkNzEtZjZmOC0z YmU1LWFkMmQtODgzODE3MTYwOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADOIgaNx51XF5T8z9aZQgsuiRUkCzjlkSYGjcxjWl13YPDCQPB8yE/Y TE/P8M4lVEddlK3XZsUKmazSscH8n9b2KWICevh4yDLbJeTNBWSIU67BrlCAVeJ7 DL5I0UJby5wG1LvAbrfVVtEPCEb6r8b+fJu43FmySZAevdOvqHHSbHLUVmdGIqIQ LvrTCvIjb1oKP9Ui65qw5K+VHDA6ZOt09qDns2AwPNo9AUKwUbMDx5IpG+oLGnUN MzpIJm/+q8+/aiNlus7YY//JOFWo3WMLEd+5b7ysH7UIHKiBrCrg3BDH38bRMFWi CA1ioGWafiDtSoWQ5tjMaZmBNqpl/wA= -----END CERTIFICATE-----Generated at Mon Jun 8 20:10:43 2026 by rpki-client