$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36004745-694e-3446-88c5-0d0217e06d6f.roa File: 36004745-694e-3446-88c5-0d0217e06d6f.roa (raw, json) Hash identifier: s4nGazerMhQcYA8aK2l1wAV710qcMYBeqBp5K5Jhweo= Subject key identifier: 88:CA:F0:83:8C:7E:0A:2C:C4:1C:F3:C8:AA:19:8E:58:C3:2E:71:88 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D8EF57B955D0DD9956467E7C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36004745-694e-3446-88c5-0d0217e06d6f.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 3356 IP address blocks: 20.148.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7b:95:5d:0d:d9:95:64:67:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=e39d7ffc-0f60-4475-938a-5e52a0f0a383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:69:d1:1c:b4:d2:27:27:4d:f6:8b:2f:c6:fd: a8:18:89:32:6f:2d:e7:17:41:9b:94:06:40:35:12: a9:2f:fc:27:93:14:21:fb:60:9a:82:c8:91:a3:a9: 59:11:f2:da:c8:e0:fb:10:7e:60:0c:aa:32:b1:67: d4:bd:03:ad:95:75:e7:6a:85:f6:9b:9e:a1:6c:ad: e7:6f:46:f0:0f:0e:4d:8b:9c:46:d0:94:2e:8b:66: bc:dc:26:e7:fa:97:05:e9:0e:40:42:e7:40:56:16: fb:d0:f0:07:c8:d1:2a:1a:df:d5:03:25:f1:f6:56: e1:62:ba:81:1f:39:4c:ea:c5:2a:53:64:c5:d5:5f: 38:a3:8d:37:fc:9f:8c:46:1d:95:15:60:83:ad:64: e9:a8:f6:ab:36:23:cf:50:c3:f7:ee:9a:f6:3f:1c: 8e:10:86:bd:3f:b7:73:63:8b:43:d2:80:c2:6e:10: 9c:6e:82:c5:5c:7c:8a:ed:64:89:a1:e1:d8:db:0e: 80:08:98:e1:61:64:05:0e:d6:2b:63:ed:26:4c:35: b1:39:8e:72:a3:34:eb:b3:a4:57:1e:b8:e2:da:99: 28:b0:a5:5a:e2:4f:e2:56:96:0f:3f:7d:42:ac:5f: e1:e1:01:9c:e5:0d:44:b8:42:10:1e:5f:26:94:58: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CA:F0:83:8C:7E:0A:2C:C4:1C:F3:C8:AA:19:8E:58:C3:2E:71:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36004745-694e-3446-88c5-0d0217e06d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f3:79:da:2f:75:f1:35:2a:2b:e9:43:42:f7:e5:8d:e5:73: af:25:ba:ca:39:36:45:22:26:5e:bf:84:f2:7e:66:16:d5:82: b1:46:a8:75:4d:01:ed:90:19:e3:8f:c1:c1:0c:08:06:e2:3c: c3:12:92:33:e5:26:9f:4a:a4:d2:f3:9a:dd:e1:17:12:30:35: c1:71:71:a1:f7:a2:ad:e8:70:43:d8:d1:ab:01:f4:dd:51:99: cc:00:c0:2a:61:89:cd:ac:b1:42:cc:f4:6f:4e:19:c2:1d:3e: de:72:14:45:a2:4a:c1:0d:6b:80:68:67:4a:aa:ab:45:c1:f0: 43:fd:73:e4:fb:0e:4b:d0:15:19:08:08:31:10:ec:59:15:2f: 97:c5:5e:3b:b6:4d:d7:0e:aa:57:ef:7e:ca:22:52:7d:01:81: e9:6b:ef:cc:c4:59:32:56:6f:ee:d2:a4:33:65:04:f7:88:3c: 84:0b:da:ef:62:e9:c4:6d:23:26:a0:58:0a:a3:db:4c:d5:d8: 4f:8a:36:ad:3b:d4:7a:2c:e1:73:5f:b7:a3:b1:fa:81:72:39: 53:57:da:cf:2e:62:92:9d:99:77:1c:dc:4c:f1:14:d8:8e:61: c3:b6:9f:22:b3:b9:b4:96:58:e3:42:0e:68:17:cd:ff:29:a9: 6c:29:39:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XuVXQ3ZlWRn58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZTM5ZDdmZmMtMGY2MC00NDc1LTkzOGEtNWU1MmEwZjBhMzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mnRHLTSJydN9osvxv2oGIkyby3nF0GblAZA NRKpL/wnkxQh+2CagsiRo6lZEfLayOD7EH5gDKoysWfUvQOtlXXnaoX2m56hbK3n b0bwDw5Ni5xG0JQui2a83Cbn+pcF6Q5AQudAVhb70PAHyNEqGt/VAyXx9lbhYrqB HzlM6sUqU2TF1V84o403/J+MRh2VFWCDrWTpqParNiPPUMP37pr2PxyOEIa9P7dz Y4tD0oDCbhCcboLFXHyK7WSJoeHY2w6ACJjhYWQFDtYrY+0mTDWxOY5yozTrs6RX Hrji2pkosKVa4k/iVpYPP31CrF/h4QGc5Q1EuEIQHl8mlFjR7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjK8IOMfgosxBzzyKoZjljDLnGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzYwMDQ3NDUtNjk0ZS0z NDQ2LTg4YzUtMGQwMjE3ZTA2ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvzedovdfE1KivpQ0L35Y3lc68luso5NkUiJl6/hPJ+ZhbVgrFGqHVN Ae2QGeOPwcEMCAbiPMMSkjPlJp9KpNLzmt3hFxIwNcFxcaH3oq3ocEPY0asB9N1R mcwAwCphic2ssULM9G9OGcIdPt5yFEWiSsENa4BoZ0qqq0XB8EP9c+T7DkvQFRkI CDEQ7FkVL5fFXju2TdcOqlfvfsoiUn0Bgelr78zEWTJWb+7SpDNlBPeIPIQL2u9i 6cRtIyagWAqj20zV2E+KNq071Hos4XNft6Ox+oFyOVNX2s8uYpKdmXcc3EzxFNiO YcO2nyKzubSWWONCDmgXzf8pqWwpOQs= -----END CERTIFICATE-----Generated at Fri Apr 24 12:12:35 2026 by rpki-client