$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d5fd34aa-2591-314e-8b27-a7c9695e168c.roa File: d5fd34aa-2591-314e-8b27-a7c9695e168c.roa (raw, json) Hash identifier: wRQ/kVZYUYID+N2Sw6guxIue8eWTWMr6txJ8WsP56Lg= Subject key identifier: C1:05:B1:39:1F:FC:72:B0:92:1B:B3:BC:DB:BF:FD:33:A5:28:39:8E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E18AF0038CF20D98131BF4C10 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d5fd34aa-2591-314e-8b27-a7c9695e168c.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 202 IP address blocks: 20.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:af:00:38:cf:20:d9:81:31:bf:4c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=796d0b45-e78d-45e9-ae8c-73186c649dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:01:be:0f:b5:a3:f2:bf:54:3f:5f:80:35:0a: 1f:51:48:01:6a:79:6e:4d:f9:04:af:a6:30:63:3c: 15:9d:9a:51:42:ee:c0:b1:a1:cb:d9:e2:fe:d1:19: 48:fe:f0:2b:01:8e:29:01:ca:86:d3:48:56:89:bd: 4e:1c:5b:92:81:85:07:dc:59:88:6c:45:99:88:d2: a0:33:20:a3:4c:33:e7:fb:de:4e:77:1a:9c:14:42: de:83:17:9f:e5:c8:85:b9:76:02:4d:d0:9b:c4:5e: 4d:b8:90:36:f8:d2:ff:5e:d0:5c:80:68:60:c3:f0: ac:a0:a7:8c:56:65:24:27:b1:63:af:9b:17:d6:f7: 53:1e:7a:e8:53:ca:18:6c:e9:fb:a3:2b:50:99:29: b1:79:27:6a:f9:fe:04:c4:ad:6c:f6:ec:c0:7d:4d: fc:9b:fe:1d:41:87:c7:54:42:10:1b:b8:04:6b:6d: 71:e0:7f:49:74:74:08:ed:c9:84:d7:63:2c:17:62: 1b:ce:b9:d2:ef:34:e3:03:73:0c:23:c6:4c:2c:25: b8:e6:6e:b6:2d:2a:a8:57:c6:12:c8:d6:39:b9:0f: ea:45:14:49:b5:4f:33:87:23:54:21:81:c5:e6:8a: 3c:fc:70:a8:1e:0a:12:10:60:f2:88:85:58:88:e0: ef:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:05:B1:39:1F:FC:72:B0:92:1B:B3:BC:DB:BF:FD:33:A5:28:39:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d5fd34aa-2591-314e-8b27-a7c9695e168c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:cc:9e:06:90:53:b8:fe:2f:ca:6a:65:69:b0:77:ff:08:ce: d8:8f:68:3a:80:7b:67:b8:f6:0e:a7:aa:bc:d2:c6:0e:88:96: d4:e4:5a:71:3b:a3:64:51:e0:86:73:b9:3a:6b:c6:fa:90:7c: 54:ef:8f:e6:3d:16:80:82:49:5e:f2:b9:49:3e:76:b1:59:b9: c2:7f:d4:58:0b:63:96:f6:c0:ac:b9:36:c7:c2:be:4b:8b:8c: 97:42:93:41:6d:16:4d:5c:ec:0c:18:0a:74:90:1c:31:d6:08: 4b:95:cd:71:80:4d:ac:4b:7e:ef:4c:af:4d:76:76:9f:b1:b6: 56:cb:eb:56:d2:7f:0a:f6:6a:06:09:c5:b6:53:44:4e:56:b4: 96:49:3d:be:7a:b7:fe:eb:ed:fb:c8:dc:2f:b8:eb:1f:b9:2b: 36:4c:05:9c:e7:1a:f6:53:e0:05:25:1c:bc:52:ae:3c:2a:9f: 0e:b2:ff:c6:fa:0e:dc:51:03:f9:0b:80:b6:a6:77:05:5c:cd: f6:a4:30:6f:da:16:1a:ab:6b:82:8c:56:0b:03:c1:d0:ba:24: c2:87:c0:0f:6a:a7:78:aa:83:9e:c2:c6:d0:24:96:03:cd:2a: 6b:08:27:56:a7:a8:85:ea:1b:49:1b:5e:b5:1b:25:26:bc:f8: e1:1d:68:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrwA4zyDZgTG/TBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk Nzk2ZDBiNDUtZTc4ZC00NWU5LWFlOGMtNzMxODZjNjQ5ZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwG+D7Wj8r9UP1+ANQofUUgBanluTfkEr6Yw YzwVnZpRQu7AsaHL2eL+0RlI/vArAY4pAcqG00hWib1OHFuSgYUH3FmIbEWZiNKg MyCjTDPn+95OdxqcFELegxef5ciFuXYCTdCbxF5NuJA2+NL/XtBcgGhgw/CsoKeM VmUkJ7Fjr5sX1vdTHnroU8oYbOn7oytQmSmxeSdq+f4ExK1s9uzAfU38m/4dQYfH VEIQG7gEa21x4H9JdHQI7cmE12MsF2IbzrnS7zTjA3MMI8ZMLCW45m62LSqoV8YS yNY5uQ/qRRRJtU8zhyNUIYHF5oo8/HCoHgoSEGDyiIVYiODv4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEFsTkf/HKwkhuzvNu//TOlKDmOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDVmZDM0YWEtMjU5MS0z MTRlLThiMjctYTdjOTY5NWUxNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETMngaQU7j+L8pqZWmwd/8IztiPaDqAe2e49g6nqrzSxg6IltTkWnE7 o2RR4IZzuTprxvqQfFTvj+Y9FoCCSV7yuUk+drFZucJ/1FgLY5b2wKy5NsfCvkuL jJdCk0FtFk1c7AwYCnSQHDHWCEuVzXGATaxLfu9Mr012dp+xtlbL61bSfwr2agYJ xbZTRE5WtJZJPb56t/7r7fvI3C+46x+5KzZMBZznGvZT4AUlHLxSrjwqnw6y/8b6 DtxRA/kLgLamdwVczfakMG/aFhqra4KMVgsDwdC6JMKHwA9qp3iqg57CxtAklgPN KmsIJ1anqIXqG0kbXrUbJSa8+OEdaJY= -----END CERTIFICATE-----Generated at Sun Jun 14 01:15:43 2026 by rpki-client