$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa File: 20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa (raw, json) Hash identifier: 6tEPPPIah8cx+EsMtVrUpv0Fufde+DhFbwc5LebbVq0= Subject key identifier: F7:81:D8:53:89:EA:79:AA:14:6F:C1:C9:1F:ED:33:B6:30:EE:95:AE Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584D65150D1F058FCDF4E57C8D80 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 36329 IP address blocks: 64.58.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:0d:1f:05:8f:cd:f4:e5:7c:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=53f24251-7263-4fb6-a8e6-abfb3ce0449d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:00:60:8e:fe:60:dc:f1:7d:f0:fc:a5:a1:9f: b2:ff:41:24:de:6c:a2:71:8b:e1:4b:19:6a:37:c5: 67:9a:04:9e:69:87:b2:40:f4:a5:00:f2:a4:86:91: d0:ab:90:8a:55:59:82:28:5b:c3:0a:87:ed:0c:32: 0f:b6:65:e5:98:ea:99:26:e4:11:fd:38:6a:7a:0c: 01:0b:4c:fa:ef:ce:0d:fd:25:04:f9:ea:89:f8:9e: 48:66:00:c5:36:93:6c:15:9c:3f:01:91:d5:ea:12: 61:ec:7f:7f:7c:94:31:6f:af:1f:e7:94:4c:b0:b1: a8:b3:f5:e3:97:26:6b:f4:1d:fa:b8:11:2c:f9:1d: ab:d0:c4:84:ff:60:cd:52:34:ec:7e:53:a3:60:41: af:7e:01:0e:c6:c3:62:d9:3f:b7:92:2c:ba:3b:b1: 13:cf:01:e4:94:c5:af:f4:63:ea:f7:95:3a:c5:70: a9:57:14:c4:8b:20:76:5c:cc:e5:1d:33:0c:bc:1e: 59:20:06:eb:cd:45:25:4e:fd:b6:7d:87:50:cf:df: 4f:16:a6:f9:5d:d6:99:70:fb:07:ff:79:9d:2a:8b: 02:51:07:38:c6:b0:4d:17:4d:85:e0:0b:f5:a2:36: 6f:a3:84:04:11:a3:26:b8:ac:d8:44:63:e1:6b:0a: 77:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:81:D8:53:89:EA:79:AA:14:6F:C1:C9:1F:ED:33:B6:30:EE:95:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 64.58.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c6:be:df:8c:29:18:7b:c7:e2:ef:15:48:5f:44:2e:8c:dd: 39:52:56:3c:93:a6:76:f4:5a:b5:a6:c3:8f:10:ed:cb:3d:17: 7b:ec:2b:88:80:e3:1b:9d:43:6c:2d:95:ea:da:d8:d4:23:c6: 08:98:dc:8c:6f:6c:e3:02:d5:ec:2f:c8:88:1b:d4:38:67:30: 9f:4e:f3:4d:9d:8c:77:03:12:72:c7:b1:6a:af:3f:d1:44:79: 81:ba:b6:12:57:57:3d:54:dd:2a:21:a7:ca:e1:01:1a:d8:b2: 40:2f:dd:fe:1d:b5:bf:96:9c:7c:10:c3:b9:9e:74:79:f8:18: d8:e5:90:18:3b:4c:63:6b:06:f9:c7:1f:9a:bf:dd:c1:eb:0a: 51:77:af:7c:8f:6c:37:56:5e:1a:5d:ab:0e:1e:10:eb:3b:47: 4c:75:6a:f1:c6:2b:07:55:3e:bf:59:bc:70:d6:d6:06:8d:bf: 9f:95:45:1f:98:8c:de:45:95:cb:18:71:9e:51:25:90:53:24: 93:d3:97:6e:bd:a5:3f:0c:1f:c8:7c:a3:1f:61:66:2e:bd:36: 1d:bf:ce:ab:af:19:59:b1:61:4e:a1:46:01:da:64:0a:7d:b9: 07:29:73:df:42:05:fe:0a:2e:d7:ca:6d:82:ff:25:6c:64:6f: 06:7f:e4:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQ0fBY/N9OV8jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NTNmMjQyNTEtNzI2My00ZmI2LWE4ZTYtYWJmYjNjZTA0NDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwBgjv5g3PF98PyloZ+y/0Ek3myicYvhSxlq N8VnmgSeaYeyQPSlAPKkhpHQq5CKVVmCKFvDCoftDDIPtmXlmOqZJuQR/ThqegwB C0z6784N/SUE+eqJ+J5IZgDFNpNsFZw/AZHV6hJh7H9/fJQxb68f55RMsLGos/Xj lyZr9B36uBEs+R2r0MSE/2DNUjTsflOjYEGvfgEOxsNi2T+3kiy6O7ETzwHklMWv 9GPq95U6xXCpVxTEiyB2XMzlHTMMvB5ZIAbrzUUlTv22fYdQz99PFqb5XdaZcPsH /3mdKosCUQc4xrBNF02F4Av1ojZvo4QEEaMmuKzYRGPhawp3ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeB2FOJ6nmqFG/ByR/tM7Yw7pWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvMjBlMjE1MjMtNzg2Ny0z ZTZkLWJkMmEtZjRiYTU1NThjZWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArGvt+MKRh7x+LvFUhfRC6M3TlSVjyTpnb0WrWmw48Q7cs9F3vsK4iA 4xudQ2wtlera2NQjxgiY3IxvbOMC1ewvyIgb1DhnMJ9O802djHcDEnLHsWqvP9FE eYG6thJXVz1U3Sohp8rhARrYskAv3f4dtb+WnHwQw7medHn4GNjlkBg7TGNrBvnH H5q/3cHrClF3r3yPbDdWXhpdqw4eEOs7R0x1avHGKwdVPr9ZvHDW1gaNv5+VRR+Y jN5FlcsYcZ5RJZBTJJPTl269pT8MH8h8ox9hZi69Nh2/zquvGVmxYU6hRgHaZAp9 uQcpc99CBf4KLtfKbYL/JWxkbwZ/5Eg= -----END CERTIFICATE-----Generated at Fri Apr 17 19:30:50 2026 by rpki-client