$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa File: 20885ce4-5a76-39c3-86d6-c90d2b265830.roa (raw, json) Hash identifier: P42nEXCyslShsJuQ6HMDfZrGyw8ca43yvI6Fo/NllQE= Subject key identifier: 8E:DB:9E:CA:C5:8C:5A:35:64:55:CD:4C:E1:B0:CF:57:57:FE:C2:52 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584DAC45791BA37B9CBA93744700 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 394285 IP address blocks: 174.137.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:79:1b:a3:7b:9c:ba:93:74:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=7be66d4d-fcc6-45ed-b9ac-b9515dfa4c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d7:ca:c4:a8:5a:9a:95:02:0d:06:db:80:f3: d0:18:3b:e3:5d:8f:25:3a:e9:02:c2:d9:1e:e5:50: 8f:6b:d3:ab:ee:11:50:ac:b5:41:2e:e8:b1:f6:36: 5d:67:85:d4:d3:ba:dd:9a:1e:5f:04:a9:80:75:c0: f8:ff:a3:e6:4b:d0:bc:43:14:e8:be:bd:0b:19:1a: 50:62:11:a6:5e:4e:69:40:ae:b8:0c:2e:92:71:f3: 31:2c:0d:b0:36:e9:03:cd:2a:bd:f0:92:77:75:51: 34:3b:3f:f5:e0:87:39:73:5a:20:c5:47:02:09:a2: 5d:b9:42:b8:65:6a:f3:f3:44:a7:7f:cf:c6:74:a6: c6:7e:52:7a:4f:0e:37:ee:11:95:9f:1e:21:0c:12: 7c:db:7a:2a:99:88:bd:01:fc:83:ec:e1:26:95:7e: 43:18:26:7d:3e:90:30:6a:9c:ef:70:82:ee:52:5b: e2:2b:0c:44:a2:67:ae:71:a0:04:97:e8:83:77:67: e5:ae:be:41:f2:ae:6a:64:9e:0c:68:61:58:51:4a: 45:36:45:ec:69:15:59:cf:47:46:c6:98:b0:7c:cd: 0f:f9:f7:09:8b:7f:5f:92:e5:96:e6:74:46:d8:28: 25:1d:32:f9:db:5c:f8:1a:1c:d2:77:87:67:72:8c: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DB:9E:CA:C5:8C:5A:35:64:55:CD:4C:E1:B0:CF:57:57:FE:C2:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5b:50:98:bf:07:d5:42:5c:66:5c:df:7d:7a:2e:b9:f3:f0: 7e:9d:98:43:d8:9a:7c:d7:82:42:6b:30:a9:50:68:c0:0c:b7: 4c:67:8b:c0:7d:ad:b2:e9:3a:c5:34:27:f0:ab:42:5e:93:23: fa:75:62:00:c4:d1:1e:96:c3:12:7c:3c:ab:d6:56:f8:3c:8d: d1:ea:d9:42:51:3d:4b:b4:a1:69:33:16:57:e1:e0:b7:60:91: 5b:cc:b8:b6:d3:7c:61:c7:12:df:c4:7c:15:ae:f3:62:89:27: 52:c3:b9:f7:0d:1b:69:cb:5e:a3:dd:b2:43:d1:9b:c1:17:81: a5:b0:6e:f3:4f:04:97:cb:22:67:dd:69:b0:dc:49:16:03:77: e3:5e:a2:b2:dd:45:2f:e9:0d:ac:98:e6:48:66:d3:e1:3e:a8: 1e:81:df:f3:bb:61:b2:4d:db:fc:84:da:63:83:61:a8:68:42: f1:54:1f:43:23:82:8b:81:4c:14:d3:30:ad:5e:f9:5e:6f:33: d9:a9:8f:25:03:65:2f:b6:70:3e:e6:04:8a:2d:a7:9a:e1:c7: e3:31:b0:b5:57:47:86:27:c6:99:39:ec:50:f8:c6:15:f0:0e: 61:b2:9f:1e:8b:bf:fb:57:78:8e:2f:55:b8:77:b1:00:3c:32: 92:61:92:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXkbo3ucupN0RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk N2JlNjZkNGQtZmNjNi00NWVkLWI5YWMtYjk1MTVkZmE0YzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdfKxKhampUCDQbbgPPQGDvjXY8lOukCwtke 5VCPa9Or7hFQrLVBLuix9jZdZ4XU07rdmh5fBKmAdcD4/6PmS9C8QxTovr0LGRpQ YhGmXk5pQK64DC6ScfMxLA2wNukDzSq98JJ3dVE0Oz/14Ic5c1ogxUcCCaJduUK4 ZWrz80Snf8/GdKbGflJ6Tw437hGVnx4hDBJ823oqmYi9AfyD7OEmlX5DGCZ9PpAw apzvcILuUlviKwxEomeucaAEl+iDd2flrr5B8q5qZJ4MaGFYUUpFNkXsaRVZz0dG xpiwfM0P+fcJi39fkuWW5nRG2CglHTL521z4GhzSd4dncow1TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7bnsrFjFo1ZFXNTOGwz1dX/sJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMjA4ODVjZTQtNWE3Ni0z OWMzLTg2ZDYtYzkwZDJiMjY1ODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArolkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxbUJi/B9VCXGZc3316Lrnz8H6dmEPYmnzXgkJrMKlQaMAMt0xni8B9 rbLpOsU0J/CrQl6TI/p1YgDE0R6WwxJ8PKvWVvg8jdHq2UJRPUu0oWkzFlfh4Ldg kVvMuLbTfGHHEt/EfBWu82KJJ1LDufcNG2nLXqPdskPRm8EXgaWwbvNPBJfLImfd abDcSRYDd+NeorLdRS/pDayY5khm0+E+qB6B3/O7YbJN2/yE2mODYahoQvFUH0Mj gouBTBTTMK1e+V5vM9mpjyUDZS+2cD7mBIotp5rhx+MxsLVXR4Ynxpk57FD4xhXw DmGynx6Lv/tXeI4vVbh3sQA8MpJhkpg= -----END CERTIFICATE-----Generated at Fri May 1 17:05:05 2026 by rpki-client