$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa File: e0509c46-0481-335e-9abf-5705ae2ce135.roa (raw, json) Hash identifier: 9MLxhmsLJRAndR4BG9omF7xhmmnUJIQMQu94/6h7jHA= Subject key identifier: 75:45:CA:C4:75:74:79:45:D5:98:25:B1:94:3D:4E:FC:28:C2:76:FE Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D8EF57A605A0C9299EA6EB060 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 202 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7a:60:5a:0c:92:99:ea:6e:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9b772f8c-f5c6-4cba-86f8-d09d49dc76c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:af:c1:43:be:3f:47:7a:be:74:05:1c:e5: 45:27:35:3e:87:08:b4:bb:2d:ee:a3:89:5b:53:b7: 46:3a:41:ab:e4:a4:be:da:4a:df:cd:7d:1b:fe:7f: d0:eb:66:02:1a:45:11:5b:6c:2a:76:96:5b:4f:82: 64:22:2a:e5:63:55:63:34:d3:f1:d7:40:92:fb:92: ea:87:6a:9f:21:df:d7:f9:d8:d7:39:43:42:31:07: 0b:f8:ac:09:00:7b:1d:e9:af:21:41:7c:ce:fa:da: 29:43:e9:51:30:83:56:a9:71:04:0d:15:5e:0d:f5: f1:42:9a:03:b8:09:de:a4:1e:8e:00:8e:a7:0c:66: 71:d0:57:43:6e:dc:89:aa:1b:de:53:e3:7c:59:d5: b0:fe:be:83:50:e0:6b:2f:e9:09:6a:33:ca:8b:0d: db:22:f2:b6:bb:09:c9:a2:01:61:20:97:43:1d:25: 54:51:58:c7:f2:b0:b1:90:57:4a:b0:b3:1a:72:d3: ba:aa:ab:25:c4:18:e6:b3:81:46:32:c7:f8:75:20: 5e:01:c6:c9:ad:0b:bc:14:71:38:f6:5b:64:68:63: 74:e9:9d:8f:c6:ef:9d:ae:34:63:f7:cd:66:60:bc: 6e:e1:ea:b2:65:7f:8d:0a:ef:f4:98:6f:2a:f0:19: 90:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:45:CA:C4:75:74:79:45:D5:98:25:B1:94:3D:4E:FC:28:C2:76:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:97:4d:5e:fc:15:ff:7e:a5:9c:ba:4d:ca:c7:7a:92:29:c4: c3:86:52:28:04:ff:12:bc:cf:a0:05:7f:99:30:24:55:fd:47: ec:b0:7c:68:80:74:e1:e4:7b:22:80:72:b0:f2:0b:39:95:dc: e2:b9:a0:a8:a0:15:83:88:70:42:ea:56:75:46:cd:9c:cd:e0: 4d:b7:22:23:55:f4:22:a3:ef:41:b4:b6:1e:cf:6c:ea:99:32: 85:f1:ae:43:a5:dc:62:16:06:13:a2:45:a1:b2:c5:c8:86:1d: 6c:d9:ec:ee:b6:a6:53:15:4c:d9:c9:bd:18:f4:bf:28:47:db: 6d:21:75:09:b8:c2:ee:95:08:53:9a:02:7b:37:12:b8:ca:20: 54:0e:4d:3e:0e:5e:48:8e:62:5b:49:fe:dc:dc:b7:89:c4:1d: ae:fe:f0:01:0b:cd:fe:64:ba:f3:aa:b5:66:c0:1b:75:c9:e7: 4b:08:46:88:36:5a:c1:ca:14:9d:12:a4:3b:23:0e:66:22:c8: bf:ac:4e:7b:af:08:3d:bc:77:51:6b:f3:e0:7b:2d:84:8b:19: d2:20:a0:86:bf:a8:40:29:83:92:78:ab:c2:6b:be:31:25:ca: 2c:51:d9:26:a5:ac:e4:98:8a:45:1c:30:db:1e:a7:9a:27:3c: 2d:4a:7f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XpgWgySmepusGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWI3NzJmOGMtZjVjNi00Y2JhLTg2ZjgtZDA5ZDQ5ZGM3NmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswevwUO+P0d6vnQFHOVFJzU+hwi0uy3uo4lb U7dGOkGr5KS+2krfzX0b/n/Q62YCGkURW2wqdpZbT4JkIirlY1VjNNPx10CS+5Lq h2qfId/X+djXOUNCMQcL+KwJAHsd6a8hQXzO+topQ+lRMINWqXEEDRVeDfXxQpoD uAnepB6OAI6nDGZx0FdDbtyJqhveU+N8WdWw/r6DUOBrL+kJajPKiw3bIvK2uwnJ ogFhIJdDHSVUUVjH8rCxkFdKsLMactO6qqslxBjms4FGMsf4dSBeAcbJrQu8FHE4 9ltkaGN06Z2Pxu+drjRj981mYLxu4eqyZX+NCu/0mG8q8BmQOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVFysR1dHlF1ZglsZQ9Tvwownb+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTA1MDljNDYtMDQ4MS0z MzVlLTlhYmYtNTcwNWFlMmNlMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKXTV78Ff9+pZy6TcrHepIpxMOGUigE/xK8z6AFf5kwJFX9R+ywfGiA dOHkeyKAcrDyCzmV3OK5oKigFYOIcELqVnVGzZzN4E23IiNV9CKj70G0th7PbOqZ MoXxrkOl3GIWBhOiRaGyxciGHWzZ7O62plMVTNnJvRj0vyhH220hdQm4wu6VCFOa Ans3ErjKIFQOTT4OXkiOYltJ/tzct4nEHa7+8AELzf5kuvOqtWbAG3XJ50sIRog2 WsHKFJ0SpDsjDmYiyL+sTnuvCD28d1Fr8+B7LYSLGdIgoIa/qEApg5J4q8JrvjEl yixR2SalrOSYikUcMNsep5onPC1Kf+s= -----END CERTIFICATE-----Generated at Wed Apr 22 02:20:09 2026 by rpki-client