$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/9a20493f-3df8-39b2-beb5-aafa944c96f1.roa File: 9a20493f-3df8-39b2-beb5-aafa944c96f1.roa (raw, json) Hash identifier: yb9998wtKStL4/BfxXFjeEB5jwcfqNxZ52pWXArEAdo= Subject key identifier: 5A:64:8B:1C:F2:94:43:39:92:D6:65:CA:C5:C0:C5:CC:61:FD:C1:FB Certificate issuer: /CN=ea4790bc-4699-4a2d-8cae-17f809013230 Certificate serial: 010D0C9F4328584D60E4F8563A89832BAA3F8100 Authority key identifier: BB:7E:52:56:B2:3A:0C:40:CC:7F:81:32:9E:48:87:05:56:80:E9:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/9a20493f-3df8-39b2-beb5-aafa944c96f1.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 397550 IP address blocks: 199.231.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:f8:56:3a:89:83:2b:aa:3f:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea4790bc-4699-4a2d-8cae-17f809013230 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=520be71a-ee48-4389-a2bc-c04c1d72fe51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:48:af:b0:d1:cd:f7:16:df:34:e8:21:35:82: 1e:f1:7d:52:c9:8d:d1:f6:0b:0a:cf:65:27:35:26: b0:bf:b8:7b:dd:0e:42:9e:8f:17:d6:12:41:b7:96: 84:e3:40:84:fa:59:e0:d9:e4:4f:18:fc:bb:94:a4: cb:92:ea:a4:62:6c:b3:cb:a5:7a:99:bb:d2:be:89: d7:fa:dc:92:00:64:92:0e:2a:91:a8:cd:24:b0:31: 6d:0e:e8:39:da:b9:f6:d8:04:ce:28:8c:ad:34:c3: 29:b3:ca:31:e4:70:cf:64:c3:10:a9:5e:5e:1d:2e: 0c:9f:72:4b:ac:2e:8d:95:e4:ea:2f:a8:81:63:75: 8a:a9:d6:0b:14:03:d1:77:32:82:ad:8f:8b:f5:e2: bc:08:15:69:70:d4:62:e0:98:39:48:f1:4a:5e:1a: 22:2b:5a:0f:9e:32:7e:cc:50:cb:b9:21:d7:8d:c2: 94:2f:f6:d2:18:92:66:0b:d0:ad:d4:1c:04:ff:64: 0f:ff:e6:2d:dc:a0:12:0b:85:89:d7:7d:39:52:1f: 6c:6a:7c:c9:aa:22:d4:22:2a:af:f8:4a:44:88:6b: d0:89:8c:99:f1:8e:0c:f1:84:53:9b:81:80:9e:bf: 17:cf:43:1b:ed:69:76:a3:18:94:fa:d6:da:ec:4c: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:64:8B:1C:F2:94:43:39:92:D6:65:CA:C5:C0:C5:CC:61:FD:C1:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/9a20493f-3df8-39b2-beb5-aafa944c96f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.crl X509v3 Authority Key Identifier: keyid:BB:7E:52:56:B2:3A:0C:40:CC:7F:81:32:9E:48:87:05:56:80:E9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer sbgp-ipAddrBlock: critical IPv4: 199.231.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e4:8a:00:0f:a3:11:a3:09:aa:69:aa:da:d9:0e:66:9c:a7: e0:63:23:4c:e7:27:fa:a0:fd:22:36:54:8e:f1:c3:ad:c4:b1: 9e:62:da:1b:dd:f8:9b:36:28:16:c8:bd:48:6a:ff:d5:b0:83: 49:a5:98:1f:7f:98:a9:07:dd:06:0d:8b:24:05:d4:f6:b3:11: 17:28:be:76:2c:fb:a7:c4:7a:40:f2:ba:ab:2c:7a:9d:f6:d5: 7c:83:f7:a8:a0:47:4f:79:87:d8:04:64:58:8f:67:51:bc:15: a8:25:5c:29:15:c0:35:eb:37:70:f0:75:21:77:7e:e1:ad:a7: 64:34:f9:a8:17:71:12:33:bb:4c:83:4c:cd:6b:8d:02:43:c5: 05:2f:3e:f6:5d:2b:4b:f7:8a:f6:81:b6:6a:57:2b:66:28:ca: fb:04:1e:99:72:0e:12:72:00:eb:67:56:f5:95:e7:ff:82:f0: 57:3b:00:48:39:30:02:d3:9f:21:e5:d3:0e:4b:65:14:7c:08: c6:7b:10:10:c6:1f:0d:4e:2f:a3:57:d9:43:0f:55:02:8e:38: c9:cb:d2:a2:21:74:92:3d:14:66:e0:e8:cd:a3:59:8b:ac:33: 05:33:17:cf:1b:1b:d4:73:c9:dc:5f:cf:bc:86:e1:47:cc:2c: ca:8b:a4:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5PhWOomDK6o/gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE0NzkwYmMtNDY5OS00YTJkLThjYWUtMTdmODA5MDEz MjMwMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NTIwYmU3MWEtZWU0OC00Mzg5LWEyYmMtYzA0YzFkNzJmZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EivsNHN9xbfNOghNYIe8X1SyY3R9gsKz2Un NSawv7h73Q5Cno8X1hJBt5aE40CE+lng2eRPGPy7lKTLkuqkYmyzy6V6mbvSvonX +tySAGSSDiqRqM0ksDFtDug52rn22ATOKIytNMMps8ox5HDPZMMQqV5eHS4Mn3JL rC6NleTqL6iBY3WKqdYLFAPRdzKCrY+L9eK8CBVpcNRi4Jg5SPFKXhoiK1oPnjJ+ zFDLuSHXjcKUL/bSGJJmC9Ct1BwE/2QP/+Yt3KASC4WJ1305Uh9sanzJqiLUIiqv +EpEiGvQiYyZ8Y4M8YRTm4GAnr8Xz0Mb7Wl2oxiU+tba7EyMvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpkixzylEM5ktZlysXAxcxh/cH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYTQ3 OTBiYy00Njk5LTRhMmQtOGNhZS0xN2Y4MDkwMTMyMzAvOWEyMDQ5M2YtM2RmOC0z OWIyLWJlYjUtYWFmYTk0NGM5NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWE0NzkwYmMtNDY5OS00YTJkLThj YWUtMTdmODA5MDEzMjMwL2VhNDc5MGJjLTQ2OTktNGEyZC04Y2FlLTE3ZjgwOTAx MzIzMC5jcmwwHwYDVR0jBBgwFoAUu35SVrI6DEDMf4EynkiHBVaA6cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYTQ3OTBiYy00Njk5LTRhMmQtOGNhZS0xN2Y4 MDkwMTMyMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnkigAPoxGjCappqtrZDmacp+BjI0znJ/qg/SI2VI7xw63EsZ5i2hvd +Js2KBbIvUhq/9Wwg0mlmB9/mKkH3QYNiyQF1PazERcovnYs+6fEekDyuqssep32 1XyD96igR095h9gEZFiPZ1G8FaglXCkVwDXrN3DwdSF3fuGtp2Q0+agXcRIzu0yD TM1rjQJDxQUvPvZdK0v3ivaBtmpXK2YoyvsEHplyDhJyAOtnVvWV5/+C8Fc7AEg5 MALTnyHl0w5LZRR8CMZ7EBDGHw1OL6NX2UMPVQKOOMnL0qIhdJI9FGbg6M2jWYus MwUzF88bG9Rzydxfz7yG4UfMLMqLpE0= -----END CERTIFICATE-----Generated at Thu Apr 9 02:28:45 2026 by rpki-client