$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b52783db-6e4d-373b-ae95-1528b234da8f.roa File: b52783db-6e4d-373b-ae95-1528b234da8f.roa (raw, json) Hash identifier: N1YS+KDy59llyN7PCIAkSkC/rQ5KebF8KtRJTWIy8BQ= Subject key identifier: BA:CC:39:66:3E:63:C9:D7:09:0A:7A:8E:3F:6B:31:A5:83:49:01:F6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D8EF57A6C4C8F5C0DC697DB00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b52783db-6e4d-373b-ae95-1528b234da8f.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 203 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7a:6c:4c:8f:5c:0d:c6:97:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d8ca181d-4a05-41f8-9fd6-00de9bb33ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:08:4f:5d:1d:68:88:9d:34:ae:2f:76:5b:22: eb:9c:09:38:5c:1e:f1:c9:96:58:24:26:64:4f:11: e6:e2:a8:42:16:20:b5:6b:1b:76:10:42:bf:72:16: 8e:9a:9b:0b:75:01:34:55:13:80:58:f9:ce:2a:3d: a7:de:9e:0f:29:49:36:55:c8:94:49:c7:e6:23:d9: 6b:da:df:13:bb:ca:fb:5a:5c:da:b8:85:1d:dc:4b: ac:7f:9f:0a:8d:4e:87:31:b7:d9:d1:69:01:c3:fe: 59:96:27:41:20:ca:0b:c5:11:ce:82:45:81:73:80: f7:c9:4f:a0:4e:0c:1b:78:6c:be:6c:0e:70:8b:02: 64:53:62:2b:4e:db:d6:9b:fb:95:ac:73:c2:ab:db: 29:63:c4:34:2f:ac:2d:b5:25:70:99:97:d3:4c:59: a9:f3:a9:ce:d5:b1:d2:b8:37:c7:01:63:1a:1a:f8: a1:fa:9d:39:46:2d:fe:70:1a:72:2c:99:39:72:ad: 95:43:4d:25:d7:9f:70:f7:ad:b5:ea:f6:9c:e8:2d: b7:ce:3b:56:22:4e:99:a3:ee:7d:14:4f:77:d3:65: a1:ec:0c:93:81:2c:dd:5e:d8:eb:bf:f0:0c:f2:a2: 33:77:45:82:30:d3:d3:4a:37:25:bc:65:cc:09:bf: 57:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CC:39:66:3E:63:C9:D7:09:0A:7A:8E:3F:6B:31:A5:83:49:01:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b52783db-6e4d-373b-ae95-1528b234da8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:63:ba:20:bc:7a:4a:a3:a9:48:06:60:2d:8e:f7:75:a1:81: e1:40:ba:54:7b:ce:5e:36:66:ca:65:0f:e0:f8:3a:18:72:f9: e3:a2:54:d8:d6:05:9a:66:31:38:73:90:e2:5b:16:61:9f:63: 06:ad:cb:c9:2d:c7:68:30:2c:89:c2:2e:a9:cc:2e:e1:86:e9: 89:ec:ab:68:76:ec:a5:24:12:e2:9f:cb:6d:44:4b:bf:12:2b: fd:8e:f1:17:e7:87:30:fa:e6:35:87:4f:83:82:95:9d:13:b8: 93:8a:cb:da:ae:8d:17:e3:eb:34:f0:0e:82:16:9a:b9:02:25: 94:b9:82:eb:ea:24:af:57:2f:f4:f0:f9:8c:ad:af:99:08:cb: f6:b8:a3:f7:47:ce:c0:b7:3c:41:ef:5f:ec:64:e7:1a:7d:ec: 52:70:fe:4f:58:f6:f0:56:13:04:0a:4b:a5:cc:0b:7d:6e:6d: cb:c4:32:09:ff:55:74:44:53:96:13:f1:f2:02:3e:c6:d6:19: 07:94:56:b2:94:5f:4f:d1:d2:8f:4d:e2:cb:53:f8:03:ae:ab: b3:b1:2a:50:5e:3e:39:3e:3a:ca:1f:e5:22:ed:72:c7:99:2e: 80:6d:a9:10:f6:2e:21:e2:ea:e8:24:fc:9d:e6:c3:38:70:06: 4e:b4:cb:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XpsTI9cDcaX2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDhjYTE4MWQtNGEwNS00MWY4LTlmZDYtMDBkZTliYjMzYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ghPXR1oiJ00ri92WyLrnAk4XB7xyZZYJCZk TxHm4qhCFiC1axt2EEK/chaOmpsLdQE0VROAWPnOKj2n3p4PKUk2VciUScfmI9lr 2t8Tu8r7WlzauIUd3Eusf58KjU6HMbfZ0WkBw/5ZlidBIMoLxRHOgkWBc4D3yU+g TgwbeGy+bA5wiwJkU2IrTtvWm/uVrHPCq9spY8Q0L6wttSVwmZfTTFmp86nO1bHS uDfHAWMaGvih+p05Ri3+cBpyLJk5cq2VQ00l159w96216vac6C23zjtWIk6Zo+59 FE9302Wh7AyTgSzdXtjrv/AM8qIzd0WCMNPTSjclvGXMCb9X7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrMOWY+Y8nXCQp6jj9rMaWDSQH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjUyNzgzZGItNmU0ZC0z NzNiLWFlOTUtMTUyOGIyMzRkYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdjuiC8ekqjqUgGYC2O93WhgeFAulR7zl42ZsplD+D4Ohhy+eOiVNjW BZpmMThzkOJbFmGfYwaty8ktx2gwLInCLqnMLuGG6Ynsq2h27KUkEuKfy21ES78S K/2O8RfnhzD65jWHT4OClZ0TuJOKy9qujRfj6zTwDoIWmrkCJZS5guvqJK9XL/Tw +Yytr5kIy/a4o/dHzsC3PEHvX+xk5xp97FJw/k9Y9vBWEwQKS6XMC31ubcvEMgn/ VXREU5YT8fICPsbWGQeUVrKUX0/R0o9N4stT+AOuq7OxKlBePjk+Osof5SLtcseZ LoBtqRD2LiHi6ugk/J3mwzhwBk60yyg= -----END CERTIFICATE-----Generated at Fri Apr 24 12:12:16 2026 by rpki-client