$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/fbcfb683-1a6c-31f1-96a1-8ca387179584.roa File: fbcfb683-1a6c-31f1-96a1-8ca387179584.roa (raw, json) Hash identifier: 7+t7E4bc6e3W6ZfS/eKQym0SFIqU9foVZztE8h0cZaY= Subject key identifier: 8A:84:B5:FA:4D:DA:69:53:0B:40:37:00:86:AB:5E:FE:A3:4F:78:3A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA796601178C765D33C46D900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/fbcfb683-1a6c-31f1-96a1-8ca387179584.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3360 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:60:11:78:c7:65:d3:3c:46:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3d71a55b-4ed0-454d-81bc-20b93a206910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b0:b7:df:3a:27:a5:de:2b:17:f1:a0:48:5c: cd:05:a1:2b:16:5d:c9:d2:0c:bd:dc:91:e4:5b:69: 06:6a:96:9a:26:2c:d2:2d:0d:72:fa:6c:56:69:a3: d9:de:bf:70:b5:3e:8e:db:b4:5b:e0:74:40:4c:8b: c1:71:de:f1:65:fd:ff:c4:6a:f4:11:42:59:f0:10: a2:d5:e7:c7:b1:cf:46:44:ff:83:dd:68:20:65:f8: a1:8e:3b:6e:c4:aa:a1:21:33:d9:0c:6a:6a:6f:65: 56:e7:03:40:26:dd:f5:cb:b3:98:35:a2:0e:02:72: 01:d1:8a:61:c2:6d:42:ea:f2:a5:72:f5:d0:37:d7: 3c:50:dc:05:c2:ef:b6:81:bc:49:5c:94:34:d5:25: f0:d1:20:99:12:f9:05:8e:06:7f:d8:0e:cd:e2:3c: dc:4b:77:f4:66:39:22:2b:55:47:18:45:04:c8:c6: 1e:cb:fc:c3:c1:e8:85:eb:63:42:4c:17:1e:2b:52: b8:61:52:a3:61:d4:2b:ed:16:ee:bf:18:a0:6f:8b: c3:d5:95:e0:77:78:54:9d:0e:18:71:21:12:14:19: b6:48:53:f1:1f:15:a9:0c:00:7b:f1:0a:25:d6:b3: 35:1b:34:1e:99:f2:10:e2:58:d3:85:41:e3:ea:1f: 41:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:84:B5:FA:4D:DA:69:53:0B:40:37:00:86:AB:5E:FE:A3:4F:78:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/fbcfb683-1a6c-31f1-96a1-8ca387179584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:7c:1f:67:81:8b:8a:98:7b:8c:84:81:1f:a2:22:2f:0e:81: 11:5a:f4:93:21:7f:49:47:90:c2:f6:b6:c7:50:06:94:6b:bb: 6f:99:98:1a:c7:90:7d:08:9e:53:4f:5d:b3:10:15:b4:c2:c4: b9:d4:c0:52:97:f9:22:22:cb:12:16:13:b5:8c:cc:db:03:c9: 77:36:53:49:46:84:f1:4f:1f:6c:12:34:6e:8a:3f:71:69:b2: 5e:9b:53:f8:28:1e:e6:6f:70:f8:5e:b6:7e:cd:c6:ae:d9:a9: 17:28:84:63:73:b3:bf:db:6c:b8:f4:e9:e8:cb:d2:3d:5a:93: 00:a5:91:11:34:41:4e:ec:77:66:78:23:42:1c:ea:34:23:13: ab:fe:88:bc:7d:87:37:d8:27:0a:db:5e:c4:d6:f1:31:44:91: 1a:2e:c0:8f:09:29:46:92:f8:f9:3c:73:50:da:c7:87:b6:83: 54:6b:8b:8e:b3:9e:c2:7f:11:2e:66:04:ce:8e:11:e0:3c:e3: c5:2d:c8:f5:8b:ba:19:f2:1d:72:da:2f:15:95:29:3c:f7:17: 88:63:56:9c:3d:f9:d2:36:68:78:b2:c6:f2:a3:bd:2a:b8:80: bf:a2:ed:6e:05:86:e7:ba:c8:55:25:5e:8f:5b:5d:da:76:2e: 61:4d:8a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlmAReMdl0zxG2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2Q3MWE1NWItNGVkMC00NTRkLTgxYmMtMjBiOTNhMjA2OTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLC33zonpd4rF/GgSFzNBaErFl3J0gy93JHk W2kGapaaJizSLQ1y+mxWaaPZ3r9wtT6O27Rb4HRATIvBcd7xZf3/xGr0EUJZ8BCi 1efHsc9GRP+D3WggZfihjjtuxKqhITPZDGpqb2VW5wNAJt31y7OYNaIOAnIB0Yph wm1C6vKlcvXQN9c8UNwFwu+2gbxJXJQ01SXw0SCZEvkFjgZ/2A7N4jzcS3f0Zjki K1VHGEUEyMYey/zDweiF62NCTBceK1K4YVKjYdQr7Rbuvxigb4vD1ZXgd3hUnQ4Y cSESFBm2SFPxHxWpDAB78Qol1rM1GzQemfIQ4ljThUHj6h9B8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqEtfpN2mlTC0A3AIarXv6jT3g6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZmJjZmI2ODMtMWE2Yy0z MWYxLTk2YTEtOGNhMzg3MTc5NTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER8H2eBi4qYe4yEgR+iIi8OgRFa9JMhf0lHkML2tsdQBpRru2+ZmBrH kH0InlNPXbMQFbTCxLnUwFKX+SIiyxIWE7WMzNsDyXc2U0lGhPFPH2wSNG6KP3Fp sl6bU/goHuZvcPhetn7Nxq7ZqRcohGNzs7/bbLj06ejL0j1akwClkRE0QU7sd2Z4 I0Ic6jQjE6v+iLx9hzfYJwrbXsTW8TFEkRouwI8JKUaS+Pk8c1Dax4e2g1Rri46z nsJ/ES5mBM6OEeA848UtyPWLuhnyHXLaLxWVKTz3F4hjVpw9+dI2aHiyxvKjvSq4 gL+i7W4Fhue6yFUlXo9bXdp2LmFNilo= -----END CERTIFICATE-----Generated at Wed Jul 29 11:04:05 2026 by rpki-client