$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa File: 48d31edc-bef9-3b8a-8019-51240e7e896a.roa (raw, json) Hash identifier: bJMeT7sfLQOsf3X3KhVZFCxAXK/R8IIFyv2XhM7Bg2k= Subject key identifier: E5:46:ED:66:00:4A:73:1E:7C:46:B8:82:46:61:F0:B7:5F:86:5A:79 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E3A2F305E1CE28F88B48A3A80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 203 IP address blocks: 20.154.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:30:5e:1c:e2:8f:88:b4:8a:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=39aaa8a8-6474-463c-a4c4-081888d23e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:a1:62:44:2d:4b:f3:c1:2f:3b:2f:41:3c: d1:92:58:56:c7:24:75:ea:7a:7b:9a:22:25:1d:84: e7:61:7b:bd:2b:5a:b5:93:4d:83:c4:1d:46:0d:81: 29:44:05:70:5f:e2:9d:a7:a2:24:3d:c1:f6:14:7f: d5:94:fe:af:5d:2c:6a:7e:05:aa:e5:48:22:23:3a: 97:e8:63:06:73:1e:b8:d8:41:15:4a:a3:86:85:cc: 51:fa:9b:3d:78:64:d7:f0:79:56:0d:32:68:79:7b: e3:6e:29:60:09:9e:4f:58:41:bd:1a:9f:20:f8:6d: 54:50:8a:79:17:dd:4c:12:23:a5:0f:8b:95:25:1f: a3:21:24:d7:2e:f0:71:46:6e:7a:76:58:75:f7:da: e1:ba:e7:f0:97:92:7b:61:2f:05:dc:65:ab:da:62: da:1f:10:15:17:8a:e2:c3:69:e7:b9:d1:74:ad:0a: 13:44:59:a2:5b:a8:e5:1d:21:f7:53:95:98:47:e7: 69:af:5a:d7:27:04:e8:7a:c1:3d:ad:5f:7c:05:2c: e1:f7:3e:c3:6c:f2:c7:d8:9d:fb:c2:2c:28:ec:81: 38:39:1d:3d:a4:96:d3:59:bb:6c:f3:71:d0:5f:13: 0a:2c:ec:0b:b7:6b:72:7a:5d:77:a5:fc:9d:d1:1b: ce:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:46:ED:66:00:4A:73:1E:7C:46:B8:82:46:61:F0:B7:5F:86:5A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.154.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:6e:a8:a8:d7:7d:17:48:a7:0c:0c:07:ff:62:ca:12:b1:e5: 23:a8:34:99:01:62:a1:e7:ae:8d:d0:c4:20:48:5c:58:e5:95: ff:9d:96:d1:98:ac:ce:1e:97:da:5d:d0:e8:00:b3:46:11:0c: 07:38:c4:55:dd:bf:b2:3b:28:c2:9a:db:bd:27:dd:1b:29:74: da:d3:80:03:02:df:a5:b2:17:cd:b3:5d:a4:ff:29:e0:83:84: 15:5b:72:32:9a:a7:01:d8:7f:f9:d3:46:98:20:c6:a6:b9:75: 4c:bd:5c:fa:50:e8:3e:5b:5e:56:48:58:49:a9:96:52:f7:a0: 19:90:7b:b2:90:19:e0:da:9c:34:8e:b2:38:91:cc:af:b3:58: a5:33:14:d8:40:57:3b:83:5d:4e:e1:1b:44:10:13:28:5f:b6: 72:99:c6:3f:f4:19:a1:f9:94:f3:6b:92:e8:48:3d:45:55:68: 13:6a:4e:18:72:ca:1f:0d:2e:dd:08:61:3e:db:68:31:92:9c: a4:3d:7f:6f:ad:18:41:4e:f3:5f:73:82:9c:28:70:0f:4a:03: 71:88:53:70:65:c5:07:60:c1:aa:8f:6e:8d:13:43:9f:e2:8e: a4:ba:f1:ab:e8:b4:12:85:4b:e3:25:15:44:29:42:9d:0a:0d: 98:71:a0:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LzBeHOKPiLSKOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk MzlhYWE4YTgtNjQ3NC00NjNjLWE0YzQtMDgxODg4ZDIzZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvehYkQtS/PBLzsvQTzRklhWxyR16np7miIl HYTnYXu9K1q1k02DxB1GDYEpRAVwX+Kdp6IkPcH2FH/VlP6vXSxqfgWq5UgiIzqX 6GMGcx642EEVSqOGhcxR+ps9eGTX8HlWDTJoeXvjbilgCZ5PWEG9Gp8g+G1UUIp5 F91MEiOlD4uVJR+jISTXLvBxRm56dlh199rhuufwl5J7YS8F3GWr2mLaHxAVF4ri w2nnudF0rQoTRFmiW6jlHSH3U5WYR+dpr1rXJwToesE9rV98BSzh9z7DbPLH2J37 wiwo7IE4OR09pJbTWbts83HQXxMKLOwLt2tyel13pfyd0RvOOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVG7WYASnMefEa4gkZh8Ldfhlp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDhkMzFlZGMtYmVmOS0z YjhhLTgwMTktNTEyNDBlN2U4OTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJpaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpuqKjXfRdIpwwMB/9iyhKx5SOoNJkBYqHnro3QxCBIXFjllf+dltGY rM4el9pd0OgAs0YRDAc4xFXdv7I7KMKa270n3RspdNrTgAMC36WyF82zXaT/KeCD hBVbcjKapwHYf/nTRpggxqa5dUy9XPpQ6D5bXlZIWEmpllL3oBmQe7KQGeDanDSO sjiRzK+zWKUzFNhAVzuDXU7hG0QQEyhftnKZxj/0GaH5lPNrkuhIPUVVaBNqThhy yh8NLt0IYT7baDGSnKQ9f2+tGEFO819zgpwocA9KA3GIU3BlxQdgwaqPbo0TQ5/i jqS68avotBKFS+MlFUQpQp0KDZhxoG0= -----END CERTIFICATE-----Generated at Fri Jul 24 22:16:19 2026 by rpki-client