$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa File: cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa (raw, json) Hash identifier: IoEZym1woyo/gShwBfcJTf3xjcnwTT9aq4+vvEjmEUY= Subject key identifier: 6B:88:61:5D:FD:54:D4:9A:18:F8:21:55:E3:A8:17:B3:B6:1A:2C:47 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D8EF57B72235EF35B82106100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 3356 IP address blocks: 20.148.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7b:72:23:5e:f3:5b:82:10:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=352cb054-cc28-42c6-ad09-1b1591f08e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dc:c3:f4:bc:21:e0:3a:23:6c:36:20:f8:d1: c5:5d:c1:8e:4b:2e:af:24:1b:ab:e3:73:19:85:ce: 12:c2:5b:37:11:64:32:b5:28:50:10:74:db:7a:b1: 54:8a:b3:92:90:b2:e0:e4:50:b7:c6:86:40:d9:63: d8:b9:33:8c:50:2f:dc:e2:cb:a0:c3:5a:dc:4f:4a: 13:9a:16:61:bc:d6:ec:ef:51:b3:77:f2:8b:aa:ba: af:36:a0:80:c0:56:df:3b:ec:84:b9:d1:b9:e6:25: cf:66:84:dd:5f:e3:ca:3b:23:90:32:52:59:5b:8a: d7:ca:f4:49:e6:28:28:54:1b:e4:c9:3e:31:ce:2b: e5:89:50:de:e8:b5:83:91:0a:95:6e:20:5b:07:21: ff:d5:ac:c3:a9:28:29:79:fc:21:bf:b8:84:03:7c: 8f:f2:d6:24:82:57:03:cf:12:83:6b:7e:51:97:1c: 26:65:81:c6:f2:23:09:6c:70:5c:48:85:5d:3e:ff: 23:ee:c7:50:3d:d8:29:c9:c4:b2:23:d9:8c:ee:a9: 5c:1d:8d:a4:f6:9c:c1:9e:a4:a4:ad:e9:3c:eb:81: 17:44:9c:a2:40:a9:9f:7e:70:28:52:66:35:65:9f: fd:7f:f6:dc:a1:8c:c7:10:95:c6:55:9d:cf:43:6a: 4b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:88:61:5D:FD:54:D4:9A:18:F8:21:55:E3:A8:17:B3:B6:1A:2C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f3:ff:41:d5:04:40:54:d7:bd:43:fb:91:37:a3:b6:e9:2c: e6:77:25:e7:4d:d1:b9:df:3d:45:34:0a:05:55:a5:7f:ab:db: aa:53:8f:82:20:f9:67:51:09:6d:7f:32:2c:aa:28:e6:d4:82: 72:c3:9a:7a:fa:e6:0a:7a:6a:ff:d1:92:96:88:61:1e:f8:c4: e5:04:1d:8f:06:72:8c:3e:bd:8a:27:9b:07:08:0c:81:6d:65: 96:cd:33:30:99:a3:9c:8b:ee:7c:19:5b:32:53:2d:69:e9:9b: 75:dd:c8:74:f3:7a:55:e4:77:27:21:f8:85:7f:2b:b8:3d:4a: 9d:7e:a9:7d:09:81:67:01:23:44:5c:69:98:90:7f:bb:12:1b: 99:4e:f0:28:6f:00:3c:54:24:af:9f:50:e1:94:a0:ba:97:fc: 95:d3:39:47:ed:6a:52:df:6f:06:f0:cc:f9:81:d5:2b:11:b6: 15:7f:11:b6:15:58:e9:e6:bb:89:dd:fc:a6:df:e2:93:a3:3d: 18:32:8e:f2:9d:47:04:a9:bf:22:51:57:db:91:d0:a5:a9:3a: 3e:f4:80:c6:3b:e2:8e:96:03:d3:82:ec:a7:08:fe:cb:a9:6c: e1:3b:6c:48:03:b0:6b:03:9a:27:8b:f7:16:83:a1:ea:81:4e: 04:1c:e5:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XtyI17zW4IQYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzUyY2IwNTQtY2MyOC00MmM2LWFkMDktMWIxNTkxZjA4ZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9zD9Lwh4DojbDYg+NHFXcGOSy6vJBur43MZ hc4Swls3EWQytShQEHTberFUirOSkLLg5FC3xoZA2WPYuTOMUC/c4sugw1rcT0oT mhZhvNbs71Gzd/KLqrqvNqCAwFbfO+yEudG55iXPZoTdX+PKOyOQMlJZW4rXyvRJ 5igoVBvkyT4xzivliVDe6LWDkQqVbiBbByH/1azDqSgpefwhv7iEA3yP8tYkglcD zxKDa35RlxwmZYHG8iMJbHBcSIVdPv8j7sdQPdgpycSyI9mM7qlcHY2k9pzBnqSk rek864EXRJyiQKmffnAoUmY1ZZ/9f/bcoYzHEJXGVZ3PQ2pLOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuIYV39VNSaGPghVeOoF7O2GixHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvY2Y2YTRmYTAtM2RiMC0z MzU0LTg4ZDktNDhiMDI1ZTBmNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXz/0HVBEBU171D+5E3o7bpLOZ3JedN0bnfPUU0CgVVpX+r26pTj4Ig +WdRCW1/MiyqKObUgnLDmnr65gp6av/RkpaIYR74xOUEHY8Gcow+vYonmwcIDIFt ZZbNMzCZo5yL7nwZWzJTLWnpm3XdyHTzelXkdych+IV/K7g9Sp1+qX0JgWcBI0Rc aZiQf7sSG5lO8ChvADxUJK+fUOGUoLqX/JXTOUftalLfbwbwzPmB1SsRthV/EbYV WOnmu4nd/Kbf4pOjPRgyjvKdRwSpvyJRV9uR0KWpOj70gMY74o6WA9OC7KcI/sup bOE7bEgDsGsDmieL9xaDoeqBTgQc5UM= -----END CERTIFICATE-----Generated at Fri Apr 24 12:09:21 2026 by rpki-client