$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9c1f01c-f483-3a6c-b436-d6ffb3cd7c28.roa File: b9c1f01c-f483-3a6c-b436-d6ffb3cd7c28.roa (raw, json) Hash identifier: rWKorLnoaVd59keary8BXjpcEPaLnyjsEe2I5nphPAc= Subject key identifier: F6:BE:8A:CB:89:C0:18:4A:2E:C8:7F:04:93:C9:57:A2:C3:B6:AB:1B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D8EF57A909BDAAABEF8F289C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9c1f01c-f483-3a6c-b436-d6ffb3cd7c28.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 202 IP address blocks: 20.132.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7a:90:9b:da:aa:be:f8:f2:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=772083ce-7b6f-42b9-82a9-c78567e53b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e6:5c:a7:8d:58:b8:11:f4:68:be:91:60:4c: 67:7f:53:9c:3f:80:7a:ac:15:0e:1d:1a:cf:77:65: 37:76:7d:fa:64:63:37:9b:71:27:90:3c:51:80:8c: 94:12:29:a6:b9:7b:b8:e9:d9:53:21:2e:e6:48:7c: d1:68:cc:36:db:1c:26:fd:e7:d5:b8:6e:1e:61:e5: dd:8e:73:3d:08:8b:45:a8:d3:b1:e2:21:1a:73:44: 88:ec:57:f3:bb:5d:37:4c:4f:6c:40:a5:bf:90:9c: c2:ae:d3:ce:32:c8:4b:ce:d1:a2:90:08:e1:e2:83: e9:f9:0c:4e:a9:da:e9:c4:43:88:47:1f:bd:74:3f: 8c:42:68:4d:b0:0f:9a:f1:1e:c1:fa:55:2b:95:b9: d0:90:d1:a9:c3:79:dd:ec:62:6d:ac:fd:27:7b:fe: d8:aa:80:38:0b:04:c8:49:32:d3:f2:99:05:ad:ba: b5:6f:a9:9c:98:16:ee:5c:7e:b5:0f:d6:57:a6:5b: c1:df:97:c7:62:43:69:33:70:db:66:f2:96:76:e9: a9:61:5d:f2:e1:b2:c2:b1:e5:e9:d8:f3:a6:8c:8a: c6:18:76:4f:e5:1c:0d:08:57:c4:16:52:d1:81:7e: e7:8e:7d:c0:d3:9a:c7:4c:9a:4f:3f:84:22:6e:07: 50:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BE:8A:CB:89:C0:18:4A:2E:C8:7F:04:93:C9:57:A2:C3:B6:AB:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9c1f01c-f483-3a6c-b436-d6ffb3cd7c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e0:8d:36:77:df:39:a0:99:51:c8:dd:fd:6b:4b:d6:02:be: fc:c1:1f:52:ae:75:95:53:5e:dc:74:44:0b:d1:c2:5c:1c:fc: 75:14:d6:de:39:c0:41:38:44:85:f2:2f:ff:84:6d:83:f9:b1: b5:f8:84:fe:5d:f0:5d:b0:f2:d6:0b:a0:11:13:2a:7a:0b:53: 87:2d:47:d6:d6:c6:d1:13:95:cc:86:19:44:ee:2f:60:8d:db: fa:a8:38:01:ee:46:50:0e:a5:e5:b3:aa:fd:78:92:78:7a:4b: bd:4d:fa:51:46:5e:f6:1a:50:5d:7f:1f:fa:a4:d4:c6:64:3f: 5b:f7:1d:ac:91:81:dd:f7:61:2a:47:3f:bc:e2:c9:83:96:1e: b6:b6:42:34:3d:5d:84:52:08:c7:ba:31:01:b6:e5:fa:77:bf: c7:a9:80:6c:42:b5:06:ff:72:4c:59:1f:09:ef:eb:7e:e6:af: b8:c2:5e:c8:e9:bf:82:0d:2a:31:c2:ed:17:54:bb:97:ae:2b: 0a:91:9d:d9:b1:0a:94:76:11:92:0b:c2:72:66:69:8d:54:5b: 00:f4:d9:18:96:7d:5b:c7:25:ca:38:01:95:48:9d:45:c6:cd: e4:91:22:7c:0b:db:da:57:63:03:d5:5d:67:2a:ac:77:40:57: 04:49:07:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XqQm9qqvvjyicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzcyMDgzY2UtN2I2Zi00MmI5LTgyYTktYzc4NTY3ZTUzYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOZcp41YuBH0aL6RYExnf1OcP4B6rBUOHRrP d2U3dn36ZGM3m3EnkDxRgIyUEimmuXu46dlTIS7mSHzRaMw22xwm/efVuG4eYeXd jnM9CItFqNOx4iEac0SI7Ffzu103TE9sQKW/kJzCrtPOMshLztGikAjh4oPp+QxO qdrpxEOIRx+9dD+MQmhNsA+a8R7B+lUrlbnQkNGpw3nd7GJtrP0ne/7YqoA4CwTI STLT8pkFrbq1b6mcmBbuXH61D9ZXplvB35fHYkNpM3DbZvKWdumpYV3y4bLCseXp 2POmjIrGGHZP5RwNCFfEFlLRgX7njn3A05rHTJpPP4QibgdQIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa+isuJwBhKLsh/BJPJV6LDtqsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjljMWYwMWMtZjQ4My0z YTZjLWI0MzYtZDZmZmIzY2Q3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFITmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDgjTZ33zmgmVHI3f1rS9YCvvzBH1KudZVTXtx0RAvRwlwc/HUU1t45 wEE4RIXyL/+EbYP5sbX4hP5d8F2w8tYLoBETKnoLU4ctR9bWxtETlcyGGUTuL2CN 2/qoOAHuRlAOpeWzqv14knh6S71N+lFGXvYaUF1/H/qk1MZkP1v3HayRgd33YSpH P7ziyYOWHra2QjQ9XYRSCMe6MQG25fp3v8epgGxCtQb/ckxZHwnv637mr7jCXsjp v4INKjHC7RdUu5euKwqRndmxCpR2EZILwnJmaY1UWwD02RiWfVvHJco4AZVInUXG zeSRInwL29pXYwPVXWcqrHdAVwRJB4k= -----END CERTIFICATE-----Generated at Wed Apr 22 02:20:08 2026 by rpki-client