$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/47be25e4-1c7a-336c-88b9-469b9f959666.roa File: 47be25e4-1c7a-336c-88b9-469b9f959666.roa (raw, json) Hash identifier: FIOcyWSkZkkOiD/aBNqsDGJX1WQ5Yot5dLv00Smr3lQ= Subject key identifier: 5E:8C:52:68:DB:7C:A3:26:05:AD:20:DE:47:64:26:8E:54:5E:A8:00 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CC611FA508A96EA5EEE4CB500 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/47be25e4-1c7a-336c-88b9-469b9f959666.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 203 IP address blocks: 20.134.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:fa:50:8a:96:ea:5e:ee:4c:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=2a74f4e5-c523-4d34-9f3c-869fe84db8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6f:26:12:ca:12:ca:eb:49:1d:91:5a:d6:e4: 2c:85:0e:59:e4:3e:39:33:22:8d:cc:34:15:92:e5: eb:ea:9e:62:14:7c:87:32:bb:eb:cf:db:67:5c:94: 7a:3f:4d:78:a5:61:27:1d:2a:1a:98:37:71:14:69: f0:64:cf:34:d1:08:78:6e:e8:8d:14:2e:11:e6:e9: d9:13:24:e1:fd:3a:fc:cf:6b:ac:30:76:03:30:16: 57:35:8d:f3:aa:64:01:04:e4:34:8b:98:7f:dc:d9: 3c:20:c2:a2:05:89:ac:7d:bf:9a:d1:04:c7:cf:ce: 46:93:54:9f:2a:39:cf:81:a9:84:4b:a9:07:76:ac: 4d:95:ea:a7:26:48:9a:25:ab:d6:07:3a:14:78:f8: c2:e5:ee:8d:20:51:98:94:e4:bd:dd:6b:00:e0:ae: 61:7f:c6:b7:1d:f0:7d:9e:18:0f:b5:d5:aa:93:d4: 10:38:b8:65:8d:9e:00:fa:87:9c:96:92:10:5a:80: 7f:d1:ed:63:a5:40:83:d3:ab:19:77:8b:ee:74:35: a4:44:5a:7e:64:29:85:1b:e7:98:8d:47:9f:7a:34: 48:99:85:c3:51:07:90:03:a2:32:b4:f3:f7:91:09: a0:8d:4a:0c:86:e8:4d:03:6c:da:34:65:ad:0b:e6: 7c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8C:52:68:DB:7C:A3:26:05:AD:20:DE:47:64:26:8E:54:5E:A8:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/47be25e4-1c7a-336c-88b9-469b9f959666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f0:4e:c3:c7:3d:bb:1f:e7:72:2d:c0:52:85:9a:84:65:b4: f5:ea:84:f3:38:57:28:14:c8:cb:f3:06:48:72:16:74:81:a0: b3:7b:e1:ca:c5:9c:a4:d6:24:49:ee:d9:5f:db:e7:fa:a0:aa: 9e:39:2a:3a:52:b7:45:29:7c:cb:ce:4a:e9:9c:34:89:8e:de: 5f:88:05:10:70:d3:f9:01:4c:bf:08:74:a6:6b:57:93:cf:b1: e8:70:d2:b2:3e:a4:b6:8e:9e:fe:61:86:00:d8:cc:d5:a1:fe: 96:0f:58:cb:e7:51:fa:09:82:2c:32:f4:47:3b:83:a3:16:90: d3:67:71:02:f8:18:ed:5c:14:af:01:01:50:a8:c4:d6:b0:62: c2:07:f0:9e:c3:75:45:25:3d:f1:a6:71:cf:c5:b8:3c:0b:12: 25:b5:05:5c:eb:f8:0f:7c:ff:87:b6:4d:4f:a5:4d:78:6a:25: 37:d6:15:37:a8:8b:91:95:cd:fb:69:96:ec:9e:b2:fe:05:74: a7:31:0a:b3:2e:c5:0a:18:c3:e8:cb:ae:36:e1:1b:01:fc:85: 96:cd:75:d5:8c:b7:06:8f:d3:67:7f:88:16:4b:72:0e:e1:3c: 08:00:d3:17:05:78:ae:fb:46:75:a4:95:65:e0:75:a4:9f:d2: 67:11:1a:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEfpQipbqXu5MtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk MmE3NGY0ZTUtYzUyMy00ZDM0LTlmM2MtODY5ZmU4NGRiOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm8mEsoSyutJHZFa1uQshQ5Z5D45MyKNzDQV kuXr6p5iFHyHMrvrz9tnXJR6P014pWEnHSoamDdxFGnwZM800Qh4buiNFC4R5unZ EyTh/Tr8z2usMHYDMBZXNY3zqmQBBOQ0i5h/3Nk8IMKiBYmsfb+a0QTHz85Gk1Sf KjnPgamES6kHdqxNleqnJkiaJavWBzoUePjC5e6NIFGYlOS93WsA4K5hf8a3HfB9 nhgPtdWqk9QQOLhljZ4A+oeclpIQWoB/0e1jpUCD06sZd4vudDWkRFp+ZCmFG+eY jUefejRImYXDUQeQA6IytPP3kQmgjUoMhuhNA2zaNGWtC+Z8MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6MUmjbfKMmBa0g3kdkJo5UXqgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDdiZTI1ZTQtMWM3YS0z MzZjLTg4YjktNDY5YjlmOTU5NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHwTsPHPbsf53ItwFKFmoRltPXqhPM4VygUyMvzBkhyFnSBoLN74crF nKTWJEnu2V/b5/qgqp45KjpSt0UpfMvOSumcNImO3l+IBRBw0/kBTL8IdKZrV5PP sehw0rI+pLaOnv5hhgDYzNWh/pYPWMvnUfoJgiwy9Ec7g6MWkNNncQL4GO1cFK8B AVCoxNawYsIH8J7DdUUlPfGmcc/FuDwLEiW1BVzr+A98/4e2TU+lTXhqJTfWFTeo i5GVzftpluyesv4FdKcxCrMuxQoYw+jLrjbhGwH8hZbNddWMtwaP02d/iBZLcg7h PAgA0xcFeK77RnWklWXgdaSf0mcRGj0= -----END CERTIFICATE-----Generated at Mon Mar 2 17:59:26 2026 by rpki-client