$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2a223d8a-8020-37ab-ada4-266cfb37ac8a.roa File: 2a223d8a-8020-37ab-ada4-266cfb37ac8a.roa (raw, json) Hash identifier: KrKI+1tijxtcCJZEGxn/ngGE17LeNGCsGteGU2pTKFo= Subject key identifier: 5A:B4:0B:FC:B3:71:E1:25:90:D1:EE:B0:CE:7D:A8:30:95:B4:B7:8B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D86955C4CBD974E555940ED20 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2a223d8a-8020-37ab-ada4-266cfb37ac8a.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 4237 IP address blocks: 20.148.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:5c:4c:bd:97:4e:55:59:40:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=b217398d-c0cf-43d0-8269-8fb32ad4672d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:90:0a:62:32:97:f7:d7:77:c6:27:4a:23:03: 77:e6:0c:87:16:31:4f:85:df:00:bf:66:07:e3:d4: 91:95:33:99:e7:c4:d2:89:e9:45:27:a6:e0:cd:4f: c8:3e:53:ae:44:0f:dd:64:f5:ec:88:ef:74:04:95: b1:1f:9b:59:26:19:6c:13:0d:33:3e:11:84:ee:ed: f8:a2:69:80:2e:f1:fc:13:18:81:2e:1e:58:f3:e4: 86:85:31:3c:c2:5d:a3:19:e4:71:13:d2:bb:1a:fe: f9:b1:01:3c:a4:fd:1a:9e:e9:eb:50:92:ba:25:d3: 69:7f:05:76:18:1f:93:17:28:15:bc:6d:35:85:47: 08:31:25:d1:e2:82:bf:a6:63:8f:4e:8b:46:dd:b4: 07:3c:76:39:0a:d2:a1:94:d7:97:87:95:85:ab:66: f9:bb:06:32:00:5b:3e:14:90:a1:8e:50:07:bf:fb: b5:34:e8:f6:94:9e:75:fb:c7:f8:89:03:dd:67:c5: 8b:ef:0e:cc:cf:12:82:5a:50:55:e6:e9:52:96:09: cd:0e:ea:aa:65:d7:20:8f:5a:ea:52:6f:2f:2d:84: 47:e3:36:5d:d0:b7:a2:8b:56:28:ba:cf:a3:ac:1f: fb:33:bc:1d:f3:61:95:33:9f:5d:e5:b4:72:97:b4: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B4:0B:FC:B3:71:E1:25:90:D1:EE:B0:CE:7D:A8:30:95:B4:B7:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2a223d8a-8020-37ab-ada4-266cfb37ac8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:8f:ed:36:36:a4:e2:e5:a8:12:df:db:d9:1b:d4:01:25:4c: d5:15:1f:8d:95:47:d9:5c:46:bf:f6:2d:58:a7:a3:13:d0:10: 0b:6c:21:8c:4f:d9:b8:d8:9f:c9:f9:73:ce:29:d6:0c:e7:00: 78:88:2c:c1:f4:0c:6e:a7:47:c1:ab:24:5d:79:42:ed:c4:b4: e8:21:ff:7f:44:aa:4a:ee:5d:45:5f:d5:d4:ab:5e:31:e4:9b: 5d:e4:e6:d8:06:fa:c6:35:ee:46:eb:12:9e:46:ae:1a:5e:11: 96:a7:3f:6b:e1:32:a8:17:77:b5:02:1f:37:49:56:9e:15:92: a1:50:30:61:6f:77:a2:6e:6b:42:f5:05:a6:b5:84:b1:9e:f8: c7:f8:7a:e4:a5:2e:5c:83:12:c5:3e:f7:42:b8:d8:bd:35:8c: 8a:e3:52:6b:64:52:4c:16:4c:a1:4f:24:58:8f:64:26:92:7a: ea:52:92:93:c1:7a:dd:5b:d8:52:0a:e3:8b:63:43:99:b3:5c: 64:87:f9:38:3f:17:70:cc:ce:de:cc:97:9b:fe:6d:d7:76:7b: 76:25:4f:d6:2e:4d:b8:c2:8e:14:02:78:12:69:20:f5:33:b7: d2:6a:50:39:78:2e:b0:e4:70:ef:56:3d:49:55:fb:af:19:ca: b3:7a:eb:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVxMvZdOVVlA7SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YjIxNzM5OGQtYzBjZi00M2QwLTgyNjktOGZiMzJhZDQ2NzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJAKYjKX99d3xidKIwN35gyHFjFPhd8Av2YH 49SRlTOZ58TSielFJ6bgzU/IPlOuRA/dZPXsiO90BJWxH5tZJhlsEw0zPhGE7u34 ommALvH8ExiBLh5Y8+SGhTE8wl2jGeRxE9K7Gv75sQE8pP0anunrUJK6JdNpfwV2 GB+TFygVvG01hUcIMSXR4oK/pmOPTotG3bQHPHY5CtKhlNeXh5WFq2b5uwYyAFs+ FJChjlAHv/u1NOj2lJ51+8f4iQPdZ8WL7w7MzxKCWlBV5ulSlgnNDuqqZdcgj1rq Um8vLYRH4zZd0Leii1Yous+jrB/7M7wd82GVM59d5bRyl7Q+EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq0C/yzceElkNHusM59qDCVtLeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMmEyMjNkOGEtODAyMC0z N2FiLWFkYTQtMjY2Y2ZiMzdhYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyP7TY2pOLlqBLf29kb1AElTNUVH42VR9lcRr/2LVinoxPQEAtsIYxP 2bjYn8n5c84p1gznAHiILMH0DG6nR8GrJF15Qu3EtOgh/39EqkruXUVf1dSrXjHk m13k5tgG+sY17kbrEp5GrhpeEZanP2vhMqgXd7UCHzdJVp4VkqFQMGFvd6Jua0L1 Baa1hLGe+Mf4euSlLlyDEsU+90K42L01jIrjUmtkUkwWTKFPJFiPZCaSeupSkpPB et1b2FIK44tjQ5mzXGSH+Tg/F3DMzt7Ml5v+bdd2e3YlT9YuTbjCjhQCeBJpIPUz t9JqUDl4LrDkcO9WPUlV+68ZyrN665o= -----END CERTIFICATE-----Generated at Sat Apr 18 00:41:04 2026 by rpki-client