$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa File: 0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa (raw, json) Hash identifier: 3EExfh5iYmSSTQsD7onKD7RnKV1e03Mi0/44fZrZtwU= Subject key identifier: 8C:52:39:E8:7B:0A:35:69:E6:52:41:98:28:6D:45:B5:91:D0:27:C3 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D8EF57B66B83269A1E1B8D300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 4237 IP address blocks: 20.148.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7b:66:b8:32:69:a1:e1:b8:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=39fe79ee-ecb6-42f9-93ab-b69c50fde08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:86:33:52:6b:f5:a2:98:1a:fe:fe:4d:1d:aa: b6:ec:cd:c4:12:fb:87:fe:a2:94:e9:90:d1:20:29: 2d:fc:a0:ab:34:c0:ab:9a:ad:10:cb:77:c4:c2:15: 9c:f1:58:70:da:7c:75:73:c6:f3:04:d4:03:7b:5f: 7c:3a:d9:fe:69:9e:82:ed:6c:c0:23:cb:6b:2c:f3: 17:57:79:57:ec:7a:b2:36:e0:f7:c8:ee:59:65:27: e3:25:4b:8f:8f:d2:a7:74:54:6c:e2:33:56:f9:d1: 59:29:87:cf:dc:86:19:74:93:57:47:0d:b1:ca:81: b4:ae:a0:7d:df:50:bb:f2:63:70:74:59:17:04:0e: d6:44:59:c7:ec:0a:f8:81:9d:f5:a9:27:fe:fa:87: 6b:81:0b:16:5b:eb:2d:f5:c9:f7:63:bb:f7:10:be: 48:e6:d8:2b:b7:40:ea:26:84:46:84:b5:56:28:9d: 6e:82:26:43:36:de:a7:56:ef:96:d1:7c:66:21:06: 68:5d:99:36:75:fe:0b:53:25:0e:be:05:ac:21:1a: e7:3e:4c:61:d1:0c:4b:d7:b6:8b:36:b9:a2:63:e5: 78:35:be:15:f3:be:8f:e3:28:77:f8:03:92:d4:a6: 3e:76:7e:e8:f1:62:c0:0e:fb:bd:67:18:17:31:95: ee:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:52:39:E8:7B:0A:35:69:E6:52:41:98:28:6D:45:B5:91:D0:27:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:cc:b5:72:f2:57:4e:ce:4d:46:2b:5d:34:f2:63:ae:db:7d: d0:86:31:c1:40:ee:6d:52:41:bd:1d:fe:a4:92:59:59:15:8f: 0f:08:ad:b0:f2:03:98:c5:dd:d5:83:c8:86:e3:01:ac:c2:51: ec:59:ce:6b:d4:c1:91:22:a8:3d:d0:ff:ae:f7:e1:e6:30:90: 6f:0e:43:24:56:8a:34:41:8d:f2:96:9a:0d:f3:73:dd:01:be: db:9c:69:5f:79:70:46:cb:90:07:45:cc:81:0d:af:41:b0:fc: 89:2d:12:64:f3:31:e3:6e:1a:64:7a:a7:6e:ba:24:64:69:b7: 10:eb:b6:75:ac:69:b9:75:e6:b6:de:19:53:c6:77:b6:cf:40: 18:ab:b8:d1:05:bb:6d:dc:9f:63:6f:0b:c9:a6:48:f4:db:25: 40:c1:ff:87:88:f9:f6:bc:9d:3d:14:98:4d:cf:2a:ff:65:d3: d4:58:f0:9e:16:82:83:23:eb:15:75:c2:c0:e5:b4:d5:2c:ed: dc:26:d5:a1:f8:d3:97:26:f4:ab:82:dd:f6:ec:64:ff:ec:b6: 4a:da:14:b3:2d:9c:b4:9a:d1:1f:86:6e:9b:09:d3:2c:ca:89: 55:8a:1e:1a:4d:73:3f:10:d7:7c:3d:47:84:4b:f5:4a:be:f6: b4:3b:ec:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XtmuDJpoeG40wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzlmZTc5ZWUtZWNiNi00MmY5LTkzYWItYjY5YzUwZmRlMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoYzUmv1opga/v5NHaq27M3EEvuH/qKU6ZDR ICkt/KCrNMCrmq0Qy3fEwhWc8Vhw2nx1c8bzBNQDe198Otn+aZ6C7WzAI8trLPMX V3lX7HqyNuD3yO5ZZSfjJUuPj9KndFRs4jNW+dFZKYfP3IYZdJNXRw2xyoG0rqB9 31C78mNwdFkXBA7WRFnH7Ar4gZ31qSf++odrgQsWW+st9cn3Y7v3EL5I5tgrt0Dq JoRGhLVWKJ1ugiZDNt6nVu+W0XxmIQZoXZk2df4LUyUOvgWsIRrnPkxh0QxL17aL NrmiY+V4Nb4V876P4yh3+AOS1KY+dn7o8WLADvu9ZxgXMZXuLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxSOeh7CjVp5lJBmChtRbWR0CfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGVjYjIyNzctZDRlMy0z M2U5LWEzMzgtNTQ3MDhlM2YwYzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETMtXLyV07OTUYrXTTyY67bfdCGMcFA7m1SQb0d/qSSWVkVjw8IrbDy A5jF3dWDyIbjAazCUexZzmvUwZEiqD3Q/6734eYwkG8OQyRWijRBjfKWmg3zc90B vtucaV95cEbLkAdFzIENr0Gw/IktEmTzMeNuGmR6p266JGRptxDrtnWsabl15rbe GVPGd7bPQBiruNEFu23cn2NvC8mmSPTbJUDB/4eI+fa8nT0UmE3PKv9l09RY8J4W goMj6xV1wsDltNUs7dwm1aH405cm9KuC3fbsZP/stkraFLMtnLSa0R+GbpsJ0yzK iVWKHhpNcz8Q13w9R4RL9Uq+9rQ77M4= -----END CERTIFICATE-----Generated at Wed May 13 19:42:49 2026 by rpki-client