$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7d5319c9-f87c-38d7-bd67-c66deeb46063.roa File: 7d5319c9-f87c-38d7-bd67-c66deeb46063.roa (raw, json) Hash identifier: QSyQ3ONP/6cauNiCG6rYuRJK4zi7i+VUNXDnTtE6JAY= Subject key identifier: FF:E2:6B:FF:B8:82:3A:AD:EC:31:EA:DA:C2:C5:0F:86:05:2C:CF:4D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D55BA499BF2E3CBE1A7D2B880 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7d5319c9-f87c-38d7-bd67-c66deeb46063.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 3360 IP address blocks: 20.134.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:49:9b:f2:e3:cb:e1:a7:d2:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=e87e1cf7-0b3d-4929-96c9-55a9d2cd31fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4d:69:72:d8:e1:fb:d7:ff:c2:c0:55:32:18: 50:f3:b5:0b:08:58:4e:70:72:33:d8:82:7f:59:e3: 3d:5f:7e:b3:29:c5:9a:56:ef:99:6a:cd:24:ca:32: 6d:46:91:a2:49:8f:6e:97:9c:3e:4e:bc:75:e2:1b: f2:e9:d6:2c:3b:6d:61:b7:61:81:48:38:0f:be:36: ff:db:1c:0b:30:7e:66:8e:70:84:35:a1:97:db:c0: 84:c0:08:d7:98:2b:f7:bd:e4:8e:da:f8:d3:90:db: d1:d9:61:06:56:64:40:fa:3b:a2:13:1a:16:2f:5b: 18:7b:f3:1d:61:37:be:f3:79:49:78:c5:73:8a:23: cd:ed:31:26:ee:d2:62:ed:0d:94:11:46:36:16:df: 31:a6:04:e6:ad:96:64:b6:be:fd:cb:55:6f:da:8e: 28:db:fe:13:2c:da:9c:39:4e:09:b3:16:9c:1c:fe: 8e:5e:54:22:ed:7e:1b:c1:a4:03:07:0d:5b:47:b5: 9f:ce:1f:74:b8:ad:ad:b4:39:0c:1d:7b:2c:67:7c: 5e:cf:f9:27:50:de:d7:9e:5a:e6:a6:2b:d7:c4:7b: cd:13:c2:94:33:15:81:36:38:05:34:3e:bb:c7:36: 4b:63:f3:0b:e1:3b:49:b5:90:92:5c:1e:81:b7:04: 1d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E2:6B:FF:B8:82:3A:AD:EC:31:EA:DA:C2:C5:0F:86:05:2C:CF:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7d5319c9-f87c-38d7-bd67-c66deeb46063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2f:0d:79:1e:67:f0:36:86:22:18:fd:3c:be:d2:3e:f0:f7: 7f:54:d2:4c:72:d2:76:87:2a:a8:65:6d:47:ee:52:d8:41:2c: ae:84:cb:91:15:87:8a:7a:59:00:80:ff:65:62:40:80:28:83: 45:10:6c:16:f0:ed:17:ce:1a:71:43:a0:a1:92:6f:5f:d0:6d: ff:ef:be:38:2b:37:7b:4e:29:2d:23:87:13:21:fe:ea:57:6f: 75:41:af:8b:2c:8d:fc:0c:1f:0d:cf:94:1c:90:26:b7:f8:ca: 4a:e0:3b:61:6f:c7:16:66:8d:67:37:03:18:d9:10:5d:71:ec: 7b:b4:34:ec:24:8a:75:dc:cd:74:eb:c2:1a:49:ea:67:f2:63: 09:ee:cd:b3:c0:fc:46:b9:15:bd:2b:13:ee:61:36:a1:10:c4: d1:f3:94:cb:fc:e1:ac:79:85:5c:aa:47:5a:2c:7a:ea:ad:78: 42:dd:76:3c:73:88:c9:d5:8e:79:c3:dc:85:54:ad:bc:4b:fc: 52:d5:ea:c9:f8:88:e9:f2:56:18:31:c5:4e:f7:45:3a:51:54: f4:92:47:45:4f:ca:84:0e:99:af:64:a4:86:14:9c:b3:90:3d: 2e:ee:f7:db:4b:65:75:8a:d9:97:a8:4a:b8:b5:80:2e:bb:0d: b8:c1:47:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vukmb8uPL4afSuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZTg3ZTFjZjctMGIzZC00OTI5LTk2YzktNTVhOWQyY2QzMWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU1pctjh+9f/wsBVMhhQ87ULCFhOcHIz2IJ/ WeM9X36zKcWaVu+Zas0kyjJtRpGiSY9ul5w+Trx14hvy6dYsO21ht2GBSDgPvjb/ 2xwLMH5mjnCENaGX28CEwAjXmCv3veSO2vjTkNvR2WEGVmRA+juiExoWL1sYe/Md YTe+83lJeMVziiPN7TEm7tJi7Q2UEUY2Ft8xpgTmrZZktr79y1Vv2o4o2/4TLNqc OU4JsxacHP6OXlQi7X4bwaQDBw1bR7Wfzh90uK2ttDkMHXssZ3xez/knUN7Xnlrm pivXxHvNE8KUMxWBNjgFND67xzZLY/ML4TtJtZCSXB6BtwQdkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/ia/+4gjqt7DHq2sLFD4YFLM9NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2Q1MzE5YzktZjg3Yy0z OGQ3LWJkNjctYzY2ZGVlYjQ2MDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4vDXkeZ/A2hiIY/Ty+0j7w939U0kxy0naHKqhlbUfuUthBLK6Ey5EV h4p6WQCA/2ViQIAog0UQbBbw7RfOGnFDoKGSb1/Qbf/vvjgrN3tOKS0jhxMh/upX b3VBr4ssjfwMHw3PlByQJrf4ykrgO2FvxxZmjWc3AxjZEF1x7Hu0NOwkinXczXTr whpJ6mfyYwnuzbPA/Ea5Fb0rE+5hNqEQxNHzlMv84ax5hVyqR1oseuqteELddjxz iMnVjnnD3IVUrbxL/FLV6sn4iOnyVhgxxU73RTpRVPSSR0VPyoQOma9kpIYUnLOQ PS7u99tLZXWK2ZeoSri1gC67DbjBRw0= -----END CERTIFICATE-----Generated at Fri Apr 17 20:58:10 2026 by rpki-client