$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa File: 9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa (raw, json) Hash identifier: +agBvMidsv8Mob4cxaTCgQeC5LM8lNBCB4iqEo7pCkc= Subject key identifier: 00:B8:55:30:1D:8F:DB:7D:86:FE:73:D4:D4:E3:ED:8B:74:38:2E:9F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D59EA6A01A129D862DA41DBC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 203 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6a:01:a1:29:d8:62:da:41:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=796a5ed3-d3ef-403a-b6e9-74fc3aa92195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d7:1e:cc:0f:75:f1:ca:09:7d:d7:0e:2b:9b: 7d:02:bd:a9:50:eb:f3:65:27:f2:9a:c6:82:1d:7c: ea:64:5f:11:16:6e:f7:bb:c8:74:8f:7f:54:ff:93: b1:09:76:db:40:09:61:5b:75:ad:32:ab:1e:94:c5: 43:7d:43:61:97:97:6a:34:fc:27:d2:47:b8:42:01: bf:85:d0:00:f7:22:45:a2:60:2a:f6:02:62:02:82: 53:e5:68:0d:f6:5d:0b:18:cd:b6:b7:15:00:4c:a7: f0:cc:dc:0e:e1:ca:bc:c9:25:ee:b3:f1:65:02:79: 2d:3e:d2:18:1b:e1:c7:94:06:86:fd:9b:19:ee:9a: 06:87:3c:d8:de:8f:06:53:26:55:e7:fa:57:74:9f: ec:a3:51:ca:d5:97:92:28:03:e6:f1:c8:70:49:22: cb:80:fe:9f:da:a6:b5:13:a7:aa:05:ca:f5:a0:ad: 83:fe:2c:78:a7:38:b4:0a:5d:e8:1f:c4:3a:f5:36: 5c:6e:5a:c3:87:fe:e4:82:32:43:23:b5:0c:16:c7: 36:b0:73:a4:91:1a:f6:34:1b:1a:f4:dd:e5:d1:a9: d2:41:dd:60:c7:34:e4:7b:3f:6b:4d:cb:bf:78:77: 59:60:4d:95:b4:76:97:b2:12:fa:b3:6e:6b:e0:79: d9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B8:55:30:1D:8F:DB:7D:86:FE:73:D4:D4:E3:ED:8B:74:38:2E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ed:b0:25:ab:c0:fa:34:35:2d:42:14:92:b6:ac:8a:14:db: 93:03:78:0f:69:87:2d:53:cf:e6:c8:94:b3:12:bf:f1:f0:34: bb:bf:21:79:1c:c0:b4:01:d9:f0:90:01:0f:5f:5c:50:3d:e7: c1:ca:cd:ce:d0:6a:80:f2:22:7c:58:7b:4b:23:b0:43:17:a5: 70:45:ee:2e:fa:3f:99:41:b6:97:c9:f3:ec:6b:96:29:69:92: c6:f0:ab:7b:68:f5:51:67:33:e0:ee:51:b0:d3:ab:dc:a0:e6: 35:81:5f:bd:bb:e2:3e:c5:04:23:b6:e4:e1:9d:95:7c:2d:d4: fd:ce:9a:75:e7:59:a4:d9:91:de:ca:37:54:5b:27:0a:bc:93: 0e:ea:03:e0:b0:f8:fb:a2:aa:45:a1:4b:06:ba:84:6f:c2:0e: 82:e6:ef:46:f3:07:57:2d:7d:4e:36:be:99:2e:17:77:84:bc: 18:17:d9:e9:01:cd:6c:1e:a8:19:96:37:2a:e4:c5:0a:2b:fd: 71:66:e0:98:f3:8b:7d:2a:90:67:5d:07:85:77:72:c5:26:55: 6f:6d:e8:09:b2:30:ff:56:34:18:3e:85:a5:b1:53:c0:78:0d: 25:3d:10:86:3c:23:1a:40:40:71:5b:b6:1a:a4:d9:be:5d:94: 00:7a:0d:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6moBoSnYYtpB28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk Nzk2YTVlZDMtZDNlZi00MDNhLWI2ZTktNzRmYzNhYTkyMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNcezA918coJfdcOK5t9Ar2pUOvzZSfymsaC HXzqZF8RFm73u8h0j39U/5OxCXbbQAlhW3WtMqselMVDfUNhl5dqNPwn0ke4QgG/ hdAA9yJFomAq9gJiAoJT5WgN9l0LGM22txUATKfwzNwO4cq8ySXus/FlAnktPtIY G+HHlAaG/ZsZ7poGhzzY3o8GUyZV5/pXdJ/so1HK1ZeSKAPm8chwSSLLgP6f2qa1 E6eqBcr1oK2D/ix4pzi0Cl3oH8Q69TZcblrDh/7kgjJDI7UMFsc2sHOkkRr2NBsa 9N3l0anSQd1gxzTkez9rTcu/eHdZYE2VtHaXshL6s25r4HnZLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC4VTAdj9t9hv5z1NTj7Yt0OC6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWRkMGVkZDktNjIzNS0z ZDIzLWI3YTMtNmY5NzA4ZGY2NWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDtsCWrwPo0NS1CFJK2rIoU25MDeA9phy1Tz+bIlLMSv/HwNLu/IXkc wLQB2fCQAQ9fXFA958HKzc7QaoDyInxYe0sjsEMXpXBF7i76P5lBtpfJ8+xrlilp ksbwq3to9VFnM+DuUbDTq9yg5jWBX7274j7FBCO25OGdlXwt1P3OmnXnWaTZkd7K N1RbJwq8kw7qA+Cw+PuiqkWhSwa6hG/CDoLm70bzB1ctfU42vpkuF3eEvBgX2ekB zWweqBmWNyrkxQor/XFm4Jjzi30qkGddB4V3csUmVW9t6AmyMP9WNBg+haWxU8B4 DSU9EIY8IxpAQHFbthqk2b5dlAB6DYg= -----END CERTIFICATE-----Generated at Fri Apr 17 23:04:13 2026 by rpki-client