$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa File: 53fb2e37-5e98-3242-85b4-dc0598c808e7.roa (raw, json) Hash identifier: XNAIJXdW7Ypzq6vkiPYPY1RLiaNoLky+Fzkjy/PWTWM= Subject key identifier: 1D:87:1B:01:1D:01:9A:C5:20:60:3D:AF:D3:02:74:AB:0D:13:D4:36 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A2C4C311A5C8179F36920 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 3356 IP address blocks: 20.149.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:2c:4c:31:1a:5c:81:79:f3:69:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=d92b7593-9fd6-4a0c-bfc9-b86c97d12dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:08:3a:18:8e:80:9b:69:db:fd:1f:0b:f5: 4e:38:19:c6:34:b9:ef:81:05:d6:8d:51:6b:fc:b0: b8:b9:7b:b6:5f:c7:64:a3:fa:2f:33:90:ba:4b:03: 09:67:62:55:92:5f:25:c5:a3:aa:17:06:e9:b2:6e: 60:7a:66:84:5f:e3:1c:fd:96:3d:cc:9e:60:8e:98: 23:6b:75:a1:bf:31:22:a1:97:4b:ea:ba:8b:58:49: f2:63:cc:20:6e:44:b3:9e:b9:6d:14:70:3f:16:20: 10:01:d5:bb:ce:98:e9:0f:77:6c:f3:cb:16:61:35: d4:97:44:9f:4f:1f:e3:40:36:c1:44:fc:73:45:26: 7d:c1:05:c1:7f:90:1a:cb:65:7c:11:a8:2d:05:46: 62:fe:de:e6:91:df:ca:37:e4:84:05:3a:35:4e:cc: df:43:6d:ea:b5:46:a3:eb:88:d4:86:a5:3f:92:d8: f5:9e:38:a1:b1:20:7b:75:06:7c:f5:36:99:6c:36: 80:b7:95:c2:44:34:2f:73:b0:a5:1c:34:7c:cc:45: c7:0f:cc:2c:b9:2e:9e:9d:a7:ae:be:5e:09:8f:82: 5e:3f:80:af:76:de:d3:d2:23:ae:03:41:04:cc:02: 3a:5c:26:df:7f:a4:ef:aa:1d:81:e6:95:5e:f5:24: b2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:87:1B:01:1D:01:9A:C5:20:60:3D:AF:D3:02:74:AB:0D:13:D4:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:7f:93:97:83:fd:b4:72:90:ad:87:0c:40:ba:50:35:2d:85: c7:f3:2e:83:ec:c6:29:fe:c3:93:49:56:06:2c:a7:d9:cd:19: 1c:51:e3:bb:92:81:59:08:20:12:9b:8d:3e:d9:01:a3:0f:85: ef:6b:1f:da:24:ea:91:18:36:aa:57:87:a2:bd:bb:7a:c9:dd: 01:90:4f:21:1b:ff:1d:01:66:7a:a2:de:4b:a4:88:ff:47:a4: 12:42:ff:1b:81:20:f7:c3:a7:51:87:c1:4d:18:84:a2:fe:ca: 65:23:a6:f7:5a:25:22:bf:20:b7:57:a8:34:a1:3a:c9:0e:43: 8d:a8:3e:38:22:ac:d2:98:02:51:82:4f:77:13:ea:b5:74:24: 9c:41:25:16:2a:71:63:e4:4d:93:fa:24:8f:dc:0c:ec:83:ec: 11:4d:47:9b:d0:82:cc:a6:ad:e5:ac:bf:e4:49:4a:8b:74:cd: d4:fe:23:84:b0:51:ba:b2:ee:4c:1b:da:68:0a:87:29:82:6b: 14:ce:c8:2c:d1:6b:98:90:bc:e3:b4:82:ce:0e:fd:f9:2b:cb: 6c:37:34:f9:b2:bc:78:31:37:94:fc:54:63:7e:cc:d9:be:e4: 13:87:85:f9:6e:de:ed:93:f9:a1:e5:0b:cb:0b:15:34:77:39: 60:58:08:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04aixMMRpcgXnzaSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZDkyYjc1OTMtOWZkNi00YTBjLWJmYzktYjg2Yzk3ZDEyZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBYIOhiOgJtp2/0fC/VOOBnGNLnvgQXWjVFr /LC4uXu2X8dko/ovM5C6SwMJZ2JVkl8lxaOqFwbpsm5gemaEX+Mc/ZY9zJ5gjpgj a3WhvzEioZdL6rqLWEnyY8wgbkSznrltFHA/FiAQAdW7zpjpD3ds88sWYTXUl0Sf Tx/jQDbBRPxzRSZ9wQXBf5Aay2V8EagtBUZi/t7mkd/KN+SEBTo1TszfQ23qtUaj 64jUhqU/ktj1njihsSB7dQZ89TaZbDaAt5XCRDQvc7ClHDR8zEXHD8wsuS6enaeu vl4Jj4JeP4Cvdt7T0iOuA0EEzAI6XCbff6Tvqh2B5pVe9SSyQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2HGwEdAZrFIGA9r9MCdKsNE9Q2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTNmYjJlMzctNWU5OC0z MjQyLTg1YjQtZGMwNTk4YzgwOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZ/k5eD/bRykK2HDEC6UDUthcfzLoPsxin+w5NJVgYsp9nNGRxR47uS gVkIIBKbjT7ZAaMPhe9rH9ok6pEYNqpXh6K9u3rJ3QGQTyEb/x0BZnqi3kukiP9H pBJC/xuBIPfDp1GHwU0YhKL+ymUjpvdaJSK/ILdXqDShOskOQ42oPjgirNKYAlGC T3cT6rV0JJxBJRYqcWPkTZP6JI/cDOyD7BFNR5vQgsymreWsv+RJSot0zdT+I4Sw Ubqy7kwb2mgKhymCaxTOyCzRa5iQvOO0gs4O/fkry2w3NPmyvHgxN5T8VGN+zNm+ 5BOHhflu3u2T+aHlC8sLFTR3OWBYCDc= -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:57 2026 by rpki-client