$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa File: 48d31edc-bef9-3b8a-8019-51240e7e896a.roa (raw, json) Hash identifier: 9z8bfYubTVoijVa5El1fmg8egOO9Jmu54yx/N5/+ofk= Subject key identifier: 80:B2:15:07:06:EF:D9:1F:64:F9:4B:9B:CA:C6:3F:DF:E5:7A:27:DC Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D59EA6B439C34C52EB9FF1B28 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 203 IP address blocks: 20.154.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6b:43:9c:34:c5:2e:b9:ff:1b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=80e8c34f-8204-46db-b1c0-03e8d4e49256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:9a:aa:63:58:e3:44:f6:50:42:34:46:2c: af:9d:f5:de:d5:44:bf:74:b6:90:12:7f:ba:b7:94: af:be:60:a4:fa:cf:b5:7d:7c:aa:3e:88:26:73:87: eb:6e:b4:1c:20:8e:3e:d1:03:93:11:85:06:86:12: 33:22:46:db:9f:25:05:d2:20:5e:75:00:dd:08:dd: 4c:61:52:70:bd:ee:75:26:c8:6a:df:e1:24:f0:64: b9:62:6f:55:f4:b2:2c:58:37:42:ce:c2:0e:36:70: ae:22:9b:63:65:c4:ff:37:f4:b4:ed:72:73:9b:42: b7:55:d3:e4:f9:8a:4a:35:ab:44:33:cf:fa:2d:c2: 2b:a6:bb:2a:63:87:3a:73:f9:0b:48:84:4a:e6:45: 96:e3:6d:c1:a6:6e:e6:9d:67:c1:47:0b:3a:a7:a0: f8:54:e7:46:03:83:27:c5:0d:b9:5d:c8:74:c2:e0: fd:2f:ee:7c:23:7a:33:46:2c:f6:86:ea:f2:59:a2: 67:7b:d4:ca:43:a7:8d:2d:96:e1:3b:fd:33:06:08: ea:f6:e8:30:7b:4e:02:1b:80:c1:72:21:c7:33:0e: 58:ac:da:a5:eb:c0:2f:b7:da:99:cf:bb:a4:9e:c7: fd:07:90:b3:f2:55:d3:c3:4a:b6:9e:16:ad:2a:ba: 3b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B2:15:07:06:EF:D9:1F:64:F9:4B:9B:CA:C6:3F:DF:E5:7A:27:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.154.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:97:74:e8:2c:7a:8e:cf:f3:3f:86:9d:ca:aa:4a:d4:78:76: 4d:08:af:87:3c:22:fb:1b:91:54:7e:9f:10:15:04:93:4d:1c: 3f:21:43:00:69:47:a9:7e:3f:62:32:03:e9:dc:73:08:ab:29: 26:b4:cf:b3:cb:99:76:fa:d1:a8:f1:a0:5e:65:ad:16:d9:55: 2d:88:8f:d7:8f:5b:8f:a4:99:b0:d0:ce:91:8d:08:30:55:16: 44:61:23:c1:e1:1c:b5:b8:76:13:e4:ff:01:ab:34:7f:88:b9: 9f:f1:47:2f:10:1a:12:7d:ba:e0:60:62:5e:e4:73:75:3e:23: bb:ed:b9:d3:0c:a7:71:b9:d7:43:12:46:ba:d1:4b:ae:46:d4: 22:24:73:98:aa:4e:fb:c0:b6:b1:10:78:fb:83:42:69:d5:25: 1d:eb:48:4a:07:f3:97:30:e6:a2:0e:98:b0:84:b5:62:fb:6c: b0:bb:2e:72:40:5b:01:64:c2:8b:20:05:01:19:3b:b9:74:e0: 23:ab:c6:32:42:56:ac:34:12:f2:b1:f8:81:05:38:82:02:67: a9:1d:1d:7b:5c:e1:42:7e:85:11:33:69:6c:a5:7a:81:7d:40: ee:d8:dc:d0:29:66:49:0b:68:d3:f4:fa:91:58:a1:fb:44:72: 1e:16:c9:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mtDnDTFLrn/GygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ODBlOGMzNGYtODIwNC00NmRiLWIxYzAtMDNlOGQ0ZTQ5MjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu76aqmNY40T2UEI0RiyvnfXe1US/dLaQEn+6 t5SvvmCk+s+1fXyqPogmc4frbrQcII4+0QOTEYUGhhIzIkbbnyUF0iBedQDdCN1M YVJwve51Jshq3+Ek8GS5Ym9V9LIsWDdCzsIONnCuIptjZcT/N/S07XJzm0K3VdPk +YpKNatEM8/6LcIrprsqY4c6c/kLSIRK5kWW423Bpm7mnWfBRws6p6D4VOdGA4Mn xQ25Xch0wuD9L+58I3ozRiz2huryWaJne9TKQ6eNLZbhO/0zBgjq9ugwe04CG4DB ciHHMw5YrNql68Avt9qZz7uknsf9B5Cz8lXTw0q2nhatKro7mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICyFQcG79kfZPlLm8rGP9/leifcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDhkMzFlZGMtYmVmOS0z YjhhLTgwMTktNTEyNDBlN2U4OTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJpaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2XdOgseo7P8z+GncqqStR4dk0Ir4c8IvsbkVR+nxAVBJNNHD8hQwBp R6l+P2IyA+nccwirKSa0z7PLmXb60ajxoF5lrRbZVS2Ij9ePW4+kmbDQzpGNCDBV FkRhI8HhHLW4dhPk/wGrNH+IuZ/xRy8QGhJ9uuBgYl7kc3U+I7vtudMMp3G510MS RrrRS65G1CIkc5iqTvvAtrEQePuDQmnVJR3rSEoH85cw5qIOmLCEtWL7bLC7LnJA WwFkwosgBQEZO7l04COrxjJCVqw0EvKx+IEFOIICZ6kdHXtc4UJ+hREzaWyleoF9 QO7Y3NApZkkLaNP0+pFYoftEch4WyfY= -----END CERTIFICATE-----Generated at Fri Apr 17 19:53:08 2026 by rpki-client