$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa File: 4f87b28e-b073-3165-93da-edbf13ef0a9d.roa (raw, json) Hash identifier: Ai/m3/wIjfBvU1erKEBxRk39Uz4VA0CiJQJ8A8/DQ3o= Subject key identifier: 67:76:CD:DC:8B:97:01:04:91:F4:73:48:47:C6:E7:B5:0A:6E:FA:20 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D59EA6A18EC7F53C77CD3DEC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 202 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6a:18:ec:7f:53:c7:7c:d3:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=aee90c39-1e9a-4c07-bf18-e9cb9c6f44d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:89:dd:9d:a8:d6:32:1a:96:98:d6:da:ca: 28:b4:53:38:ab:01:ae:59:99:10:d2:a3:e9:b2:27: 0c:6c:ba:9b:3c:cd:f8:ff:2e:64:82:66:61:f8:f5: cc:1d:72:bf:ea:3a:c0:a7:2f:75:b9:6f:06:97:56: 6a:cc:01:bb:24:ce:55:7e:56:9e:8f:aa:b9:7a:c0: 5e:1b:16:e2:b5:68:f8:c9:04:3e:a6:3c:d2:84:6b: 12:2b:cc:57:2e:f7:92:b0:c1:6e:a7:26:7d:01:7c: 27:cf:52:9e:04:39:a0:32:69:c5:4b:96:cc:a2:87: f3:75:2d:04:c4:ae:14:12:dc:54:b8:d2:85:87:91: c5:79:1b:35:a5:1b:d3:2d:79:b0:97:a0:ab:2c:be: 58:40:22:c5:fa:58:f0:65:32:ec:a3:9a:5e:3c:92: 65:32:9c:6e:56:df:17:a4:bd:3e:7c:8c:bf:45:42: f2:cd:9e:ca:39:98:81:9b:0e:f5:61:08:5f:8b:43: 77:b9:ad:82:17:cb:98:bb:98:be:a4:a0:1f:98:39: 6c:67:15:c4:e9:95:1e:28:4a:0c:be:9f:44:71:f6: e6:2b:ef:f2:d5:79:24:b7:19:ab:bc:79:56:31:77: ce:9e:bc:4c:97:6e:ac:bf:09:92:de:28:12:89:f0: 27:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:76:CD:DC:8B:97:01:04:91:F4:73:48:47:C6:E7:B5:0A:6E:FA:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:17:66:62:d2:7e:9a:a0:05:9b:f3:09:76:44:6a:77:8b:16: cd:53:d3:ea:a8:3e:e5:0b:17:ba:a4:dc:79:2c:d9:5b:f9:19: 39:37:b3:c5:7a:79:1b:6d:18:22:d6:60:ee:ec:36:02:74:e3: 4f:ff:c9:66:05:6a:36:59:68:4e:f2:a1:96:2c:8a:10:71:bc: 2b:e9:f8:16:9c:9a:44:83:38:9c:61:ea:22:73:19:6d:92:18: ba:d5:1f:3a:c0:64:2e:6f:75:6f:10:37:81:0c:71:0d:2e:cd: 3a:f2:87:ce:a5:4a:e3:53:0c:7f:c4:bb:cf:d6:9b:06:ce:c4: b4:7a:2b:b1:f1:65:49:bf:d0:05:9c:03:34:af:98:c7:11:54: a5:53:24:f6:97:45:8d:42:03:df:f1:39:22:c9:4d:ec:a3:a5: c3:82:e6:29:6f:58:43:95:26:df:eb:43:06:d5:e5:1d:7d:4b: b1:29:92:1a:9f:26:ec:a5:99:e7:8d:2c:e8:9d:20:2e:bd:24: 0e:97:f1:ce:30:3e:46:ec:e8:8b:a6:1b:f2:0c:fb:16:46:b0: 36:28:8b:a8:25:e4:42:36:91:aa:d0:2c:09:bf:7d:a5:53:1b: b3:e7:f3:a6:52:86:3d:f7:5a:00:a4:91:80:bf:31:6c:38:31: b6:c3:99:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6moY7H9Tx3zT3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YWVlOTBjMzktMWU5YS00YzA3LWJmMTgtZTljYjljNmY0NGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXiJ3Z2o1jIalpjW2sootFM4qwGuWZkQ0qPp sicMbLqbPM34/y5kgmZh+PXMHXK/6jrApy91uW8Gl1ZqzAG7JM5Vflaej6q5esBe GxbitWj4yQQ+pjzShGsSK8xXLveSsMFupyZ9AXwnz1KeBDmgMmnFS5bMoofzdS0E xK4UEtxUuNKFh5HFeRs1pRvTLXmwl6CrLL5YQCLF+ljwZTLso5pePJJlMpxuVt8X pL0+fIy/RULyzZ7KOZiBmw71YQhfi0N3ua2CF8uYu5i+pKAfmDlsZxXE6ZUeKEoM vp9EcfbmK+/y1XkktxmrvHlWMXfOnrxMl26svwmS3igSifAnZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd2zdyLlwEEkfRzSEfG57UKbvogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNGY4N2IyOGUtYjA3My0z MTY1LTkzZGEtZWRiZjEzZWYwYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQXZmLSfpqgBZvzCXZEaneLFs1T0+qoPuULF7qk3Hks2Vv5GTk3s8V6 eRttGCLWYO7sNgJ040//yWYFajZZaE7yoZYsihBxvCvp+BacmkSDOJxh6iJzGW2S GLrVHzrAZC5vdW8QN4EMcQ0uzTryh86lSuNTDH/Eu8/WmwbOxLR6K7HxZUm/0AWc AzSvmMcRVKVTJPaXRY1CA9/xOSLJTeyjpcOC5ilvWEOVJt/rQwbV5R19S7Epkhqf JuylmeeNLOidIC69JA6X8c4wPkbs6IumG/IM+xZGsDYoi6gl5EI2karQLAm/faVT G7Pn86ZShj33WgCkkYC/MWw4MbbDmXQ= -----END CERTIFICATE-----Generated at Sat Apr 18 00:41:05 2026 by rpki-client