$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/466bf24b-ea61-3af0-af6c-375c6412d1c1.roa File: 466bf24b-ea61-3af0-af6c-375c6412d1c1.roa (raw, json) Hash identifier: DMJLukucUzM0yiS/LYGn7cv6C9re2v9MBDBS4xqZLMU= Subject key identifier: E5:DB:70:E0:0E:5B:96:E2:9C:16:98:03:F8:47:28:58:E8:14:C1:F5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CAE572FA6AF44A1CD82254780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/466bf24b-ea61-3af0-af6c-375c6412d1c1.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 203 IP address blocks: 20.132.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:2f:a6:af:44:a1:cd:82:25:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=90c2b684-32df-4185-9da2-949d8486e962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:02:57:13:79:4f:4a:b5:3d:0c:45:9d:69: 06:38:4e:a5:dd:cd:2c:3a:51:a0:92:b6:b4:1c:43: ed:2d:ba:81:18:05:e5:9b:92:bc:21:69:b5:8b:d3: 4c:ed:f5:ff:0c:19:a4:f0:c1:42:d9:ed:87:26:5b: 06:ba:53:9b:15:26:cd:6d:94:48:22:cb:6f:c8:ff: 9f:a4:0a:67:87:f3:45:83:7b:28:a4:fc:39:c0:5f: 19:c2:ca:a9:27:09:8d:af:66:43:6f:d8:6d:87:fc: 2f:e9:28:84:c2:a7:70:b9:57:04:af:4b:5c:a3:01: 81:7d:07:57:91:fb:14:32:b8:df:04:fd:2e:41:de: 8d:c9:32:55:76:aa:61:82:5d:ec:2e:49:9c:c5:7b: e9:53:4a:58:79:73:53:4b:cf:4c:6d:a7:8c:bf:a8: e1:e5:74:b7:f8:a5:1f:70:bf:22:42:49:c5:ef:64: a3:7c:8c:86:8a:f9:fc:8e:2a:27:99:48:bb:9a:63: ac:10:68:c1:fb:48:39:4b:a4:20:dd:dc:a8:e1:a1: 44:74:a4:a5:4d:25:3b:62:7d:6b:a4:b3:67:b4:2a: 19:fc:a4:40:58:54:4a:45:09:7e:de:81:a1:2f:33: 73:9e:bf:ca:2a:19:8d:38:ce:0f:fd:9d:6c:39:b0: 64:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DB:70:E0:0E:5B:96:E2:9C:16:98:03:F8:47:28:58:E8:14:C1:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/466bf24b-ea61-3af0-af6c-375c6412d1c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:94:a7:b3:fb:af:8a:14:4f:db:7e:63:9d:33:75:b7:0e:47: be:8e:f3:7e:e2:e6:c6:fb:7c:7d:10:11:59:fc:9e:1c:4b:c7: 22:c0:0d:3e:9f:0b:cb:0a:c0:1c:8d:26:3e:df:ce:6b:b8:44: e2:08:aa:46:f5:99:e8:38:2d:53:f2:ff:96:2c:a5:df:61:aa: 8a:ca:87:db:e5:83:b3:46:2b:8c:ea:40:45:e8:e3:cf:74:95: 8d:3e:42:d5:35:ba:a3:ee:a1:0d:8f:ae:62:75:50:94:79:ba: 74:97:83:66:eb:08:3f:84:1e:c6:7e:ba:6a:57:e5:94:6b:c8: 7a:04:40:6a:3d:63:21:55:27:69:3b:59:5d:13:48:7b:9b:eb: 63:1d:df:e4:05:ec:4f:93:bc:60:b0:06:1e:40:90:57:be:4e: b8:ec:a5:bc:ac:5d:f5:67:54:af:da:41:0f:7d:64:db:6e:69: 2a:b0:a7:e1:c0:b4:4b:0e:2f:0b:80:a2:d5:e0:52:42:b4:07: a4:57:2c:e2:cf:07:1c:9c:c7:eb:b8:be:34:30:69:ab:df:db: 0c:1c:bd:a9:20:ca:4a:17:2b:b4:1f:46:97:95:8e:b7:61:8c: e2:a8:ce:fe:6a:06:85:82:9c:bf:d5:66:5d:06:a7:f1:e8:07: 55:13:c9:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVy+mr0ShzYIlR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTBjMmI2ODQtMzJkZi00MTg1LTlkYTItOTQ5ZDg0ODZlOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZECVxN5T0q1PQxFnWkGOE6l3c0sOlGgkra0 HEPtLbqBGAXlm5K8IWm1i9NM7fX/DBmk8MFC2e2HJlsGulObFSbNbZRIIstvyP+f pApnh/NFg3sopPw5wF8ZwsqpJwmNr2ZDb9hth/wv6SiEwqdwuVcEr0tcowGBfQdX kfsUMrjfBP0uQd6NyTJVdqphgl3sLkmcxXvpU0pYeXNTS89MbaeMv6jh5XS3+KUf cL8iQknF72SjfIyGivn8jionmUi7mmOsEGjB+0g5S6Qg3dyo4aFEdKSlTSU7Yn1r pLNntCoZ/KRAWFRKRQl+3oGhLzNznr/KKhmNOM4P/Z1sObBkYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXbcOAOW5binBaYA/hHKFjoFMH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDY2YmYyNGItZWE2MS0z YWYwLWFmNmMtMzc1YzY0MTJkMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSUp7P7r4oUT9t+Y50zdbcOR76O837i5sb7fH0QEVn8nhxLxyLADT6f C8sKwByNJj7fzmu4ROIIqkb1meg4LVPy/5Yspd9hqorKh9vlg7NGK4zqQEXo4890 lY0+QtU1uqPuoQ2PrmJ1UJR5unSXg2brCD+EHsZ+umpX5ZRryHoEQGo9YyFVJ2k7 WV0TSHub62Md3+QF7E+TvGCwBh5AkFe+TrjspbysXfVnVK/aQQ99ZNtuaSqwp+HA tEsOLwuAotXgUkK0B6RXLOLPBxycx+u4vjQwaavf2wwcvakgykoXK7QfRpeVjrdh jOKozv5qBoWCnL/VZl0Gp/HoB1UTybw= -----END CERTIFICATE-----Generated at Tue Mar 3 06:57:44 2026 by rpki-client