$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa File: 895b35f2-676a-36ad-9bd6-7860fc097fbf.roa (raw, json) Hash identifier: eECMjAf/mA9vXiF+SMxkagl+Ub3zRbFfCKjbG1qxtFc= Subject key identifier: 64:11:82:23:CB:B2:F2:71:AD:9A:E3:82:FD:88:89:C3:72:BB:72:9A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CDB0220CBF576A3FF6ED99CC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa Signing time: Sat 14 Feb 2026 02:00:32 +0000 ROA not before: Sat 14 Feb 2026 02:00:32 +0000 ROA not after: Fri 15 May 2026 01:00:32 +0000 asID: 203 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:db:02:20:cb:f5:76:a3:ff:6e:d9:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 14 02:00:32 2026 GMT Not After : May 15 01:00:32 2026 GMT Subject: CN=b10b3fc2-728b-4888-ab3b-8366f00074fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:09:f5:e6:b8:50:0a:52:e7:6f:64:6b:9c: ac:af:65:93:7b:76:11:a1:b7:1a:65:eb:5c:4a:b2: 5a:4b:2d:c2:cb:b6:c3:a1:6a:ad:1f:ea:19:38:07: 27:e5:8a:7c:6d:b3:e2:a4:58:06:38:af:bb:b3:76: f4:e8:95:db:78:cd:0f:7c:da:e3:d6:c1:f1:57:54: bf:7b:64:ee:01:97:3e:df:2c:79:8c:00:b5:5e:0c: 91:19:fc:48:39:54:77:32:e0:ab:a6:34:4b:9d:fe: 2a:92:9d:95:c6:65:bb:8b:f5:9f:cb:0d:78:6f:2b: a9:6d:0e:7e:fc:ec:2d:6a:d2:22:6d:f1:c8:ec:dd: 96:2d:e9:32:7d:08:22:db:dd:eb:30:b2:f8:fd:76: 5a:9f:47:28:7b:a6:59:1d:50:cd:be:78:b2:39:f9: 9d:6e:a5:93:6b:c9:1d:be:32:d4:c7:fd:7d:96:b9: 7c:ba:9e:5c:e3:d1:34:76:b5:c0:29:f9:91:12:4e: e3:95:4b:45:1d:39:3d:73:0e:95:be:db:91:6e:d9: 4b:a5:ea:05:e4:98:04:87:25:f4:52:4c:a6:5b:54: 11:f4:55:f5:d5:77:11:0f:56:7b:3d:34:3a:53:79: a1:70:df:55:e0:6e:ab:e7:4b:9e:ac:b8:03:33:6c: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:11:82:23:CB:B2:F2:71:AD:9A:E3:82:FD:88:89:C3:72:BB:72:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:da:9b:e7:68:0c:85:1d:ff:28:70:bb:68:e8:5e:2e:92:9d: 1e:b3:e5:d6:fd:e3:e8:f7:eb:ba:69:00:89:54:dd:d2:0a:4a: 04:89:86:ae:5d:5d:ea:d9:81:7b:4b:44:c0:d9:eb:23:94:24: d5:ee:d5:57:ac:47:36:b2:88:be:dc:c0:69:c7:3e:42:89:e7: 38:55:57:8a:51:3e:e0:94:86:28:96:2b:4e:82:22:81:8b:c5: 2c:92:e8:99:4f:00:f3:56:16:26:84:3b:62:28:8f:1f:54:71: 5e:74:83:10:9d:04:39:08:42:47:1e:c2:33:dc:8d:1a:3b:10: 6e:d9:5a:4c:3d:b5:38:3b:e1:41:8c:e4:64:0e:41:f0:e8:29: 90:54:cb:65:3f:7b:72:e8:6a:51:e9:b2:3f:ca:d5:1c:27:9c: 4e:e6:b0:f6:61:30:1f:60:b5:f0:14:49:74:12:d1:c0:70:f9: 07:72:78:2b:85:b8:9c:9a:4d:e3:be:64:63:34:f9:1c:fa:41: 06:4d:3b:fd:1e:d4:05:87:1d:03:d2:fc:d5:1a:63:f7:79:d4: 5c:f2:b1:e1:55:e8:fc:23:90:51:6f:d1:ac:71:f2:7c:3f:a7: bd:c3:37:51:ab:bd:c9:38:7e:db:66:51:7e:06:e5:c5:fd:e9: 4d:ed:53:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAiDL9Xaj/27ZnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk YjEwYjNmYzItNzI4Yi00ODg4LWFiM2ItODM2NmYwMDA3NGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEMJ9ea4UApS529ka5ysr2WTe3YRobcaZetc SrJaSy3Cy7bDoWqtH+oZOAcn5Yp8bbPipFgGOK+7s3b06JXbeM0PfNrj1sHxV1S/ e2TuAZc+3yx5jAC1XgyRGfxIOVR3MuCrpjRLnf4qkp2VxmW7i/Wfyw14byupbQ5+ /OwtatIibfHI7N2WLekyfQgi293rMLL4/XZan0coe6ZZHVDNvniyOfmdbqWTa8kd vjLUx/19lrl8up5c49E0drXAKfmREk7jlUtFHTk9cw6VvtuRbtlLpeoF5JgEhyX0 UkymW1QR9FX11XcRD1Z7PTQ6U3mhcN9V4G6r50uerLgDM2xd/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQRgiPLsvJxrZrjgv2IicNyu3KaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODk1YjM1ZjItNjc2YS0z NmFkLTliZDYtNzg2MGZjMDk3ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTam+doDIUd/yhwu2joXi6SnR6z5db94+j367ppAIlU3dIKSgSJhq5d XerZgXtLRMDZ6yOUJNXu1VesRzayiL7cwGnHPkKJ5zhVV4pRPuCUhiiWK06CIoGL xSyS6JlPAPNWFiaEO2Iojx9UcV50gxCdBDkIQkcewjPcjRo7EG7ZWkw9tTg74UGM 5GQOQfDoKZBUy2U/e3LoalHpsj/K1RwnnE7msPZhMB9gtfAUSXQS0cBw+QdyeCuF uJyaTeO+ZGM0+Rz6QQZNO/0e1AWHHQPS/NUaY/d51FzyseFV6PwjkFFv0axx8nw/ p73DN1Grvck4fttmUX4G5cX96U3tU3c= -----END CERTIFICATE-----Generated at Mon Mar 2 17:17:09 2026 by rpki-client