$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa458d0c-b835-3cf5-80ee-a0ec7c96e6cf.roa File: aa458d0c-b835-3cf5-80ee-a0ec7c96e6cf.roa (raw, json) Hash identifier: mOAgLEUYP92MxtDpF3hpP5OGpkhVWUA5Mfeb3xt79qs= Subject key identifier: E2:06:9E:A4:63:6C:E0:73:DE:82:3E:DD:E1:31:9B:0E:8F:58:87:5C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D143D4AE4C2F3846861499980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa458d0c-b835-3cf5-80ee-a0ec7c96e6cf.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 3360 IP address blocks: 20.155.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4a:e4:c2:f3:84:68:61:49:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=c2f69423-f49c-4b15-90fd-f3c58262d846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:bf:96:4b:52:22:ae:9c:f6:15:4b:b1:24: 61:5b:4e:da:5e:2c:ca:0c:84:42:cb:53:f4:af:18: 9b:bd:bb:b9:2b:cd:eb:54:b4:e6:67:6d:29:27:64: 82:b1:89:ae:fb:77:13:52:57:89:de:04:d2:87:dd: b9:99:e1:39:00:52:35:83:dd:14:61:cb:4c:83:9b: 0f:bd:e7:b2:37:80:c7:7e:37:88:62:dd:89:94:9a: b5:e6:2a:2f:42:f1:2b:4a:1c:44:bc:a7:42:e1:fa: ad:f9:2c:69:23:3d:ea:ee:f0:81:9e:21:fc:c5:f6: 06:ab:1f:22:c1:1c:42:c5:a8:68:d7:96:a1:88:e2: d4:7c:ce:4c:0d:de:8a:0c:bf:20:00:e0:c8:8f:19: 65:c4:59:e0:fd:98:98:45:52:e3:48:83:1e:de:2b: 66:11:60:d3:ca:9f:05:f4:d4:ce:a0:85:0d:e7:44: 7e:46:21:0c:e1:61:86:1c:72:53:f7:e1:25:20:c1: 1a:b3:67:e4:85:3e:06:a4:70:3f:55:7b:73:49:9e: c5:e4:b3:91:19:da:27:f0:69:e9:62:b1:64:00:18: 92:15:4f:b1:17:b1:eb:e3:76:dd:7f:48:1a:6e:21: 7d:53:24:19:07:bc:bf:d1:7f:9a:b5:b1:aa:20:db: 57:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:06:9E:A4:63:6C:E0:73:DE:82:3E:DD:E1:31:9B:0E:8F:58:87:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa458d0c-b835-3cf5-80ee-a0ec7c96e6cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.155.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:88:20:34:0c:0b:2c:2b:ca:c6:1e:18:96:7a:42:bc:d6:f5: 10:35:60:26:75:25:41:4c:1b:ac:bb:dc:6e:8c:f3:29:4d:1b: de:ee:a3:97:57:c0:f6:43:f8:05:de:12:22:7a:42:78:c8:27: df:af:31:1e:c9:15:75:0c:21:c8:44:8b:10:ad:e0:4c:3d:06: 0c:3c:d8:37:a8:82:6e:57:5c:44:af:6a:af:21:fa:bf:8b:58: 7b:35:bd:b8:3b:4f:6c:a9:52:62:43:e7:48:cc:e7:38:c6:0f: b5:16:7e:fc:55:2c:5d:be:75:96:9b:23:de:4c:90:9a:de:e9: 6c:ee:bf:1f:c1:01:3a:74:c7:f4:4f:6c:7b:d4:1e:06:17:10: da:45:62:08:fd:65:1a:e6:e3:36:0f:09:c4:93:44:79:f8:19: ae:2f:2a:9e:7c:f0:1d:88:b4:78:21:7e:7c:89:80:22:a6:67: ea:24:15:f8:40:46:e1:55:75:2a:ad:f2:d2:fd:36:bc:94:8e: 6f:58:f8:7e:30:20:c6:8d:ba:56:90:0e:18:56:4c:c5:d5:69: c7:3d:06:58:1a:23:41:43:56:31:97:57:82:56:f0:14:92:f2: c5:71:dd:5d:a6:38:17:4f:7f:81:40:4a:64:ab:c7:d7:9b:6e: 07:39:8b:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUrkwvOEaGFJmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YzJmNjk0MjMtZjQ5Yy00YjE1LTkwZmQtZjNjNTgyNjJkODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpC/lktSIq6c9hVLsSRhW07aXizKDIRCy1P0 rxibvbu5K83rVLTmZ20pJ2SCsYmu+3cTUleJ3gTSh925meE5AFI1g90UYctMg5sP veeyN4DHfjeIYt2JlJq15iovQvErShxEvKdC4fqt+SxpIz3q7vCBniH8xfYGqx8i wRxCxaho15ahiOLUfM5MDd6KDL8gAODIjxllxFng/ZiYRVLjSIMe3itmEWDTyp8F 9NTOoIUN50R+RiEM4WGGHHJT9+ElIMEas2fkhT4GpHA/VXtzSZ7F5LORGdon8Gnp YrFkABiSFU+xF7Hr43bdf0gabiF9UyQZB7y/0X+atbGqINtXcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIGnqRjbOBz3oI+3eExmw6PWIdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWE0NThkMGMtYjgzNS0z Y2Y1LTgwZWUtYTBlYzdjOTZlNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFJtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKIIDQMCywrysYeGJZ6QrzW9RA1YCZ1JUFMG6y73G6M8ylNG97uo5dX wPZD+AXeEiJ6QnjIJ9+vMR7JFXUMIchEixCt4Ew9Bgw82Deogm5XXESvaq8h+r+L WHs1vbg7T2ypUmJD50jM5zjGD7UWfvxVLF2+dZabI95MkJre6Wzuvx/BATp0x/RP bHvUHgYXENpFYgj9ZRrm4zYPCcSTRHn4Ga4vKp588B2ItHghfnyJgCKmZ+okFfhA RuFVdSqt8tL9NryUjm9Y+H4wIMaNulaQDhhWTMXVacc9BlgaI0FDVjGXV4JW8BSS 8sVx3V2mOBdPf4FASmSrx9ebbgc5izg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:46:37 2026 by rpki-client