$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa File: da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa (raw, json) Hash identifier: IaDpyUQlPbI4Krw20rEn9X3KGF8nwWUQsx40t9JQNoc= Subject key identifier: 2F:05:7C:0F:16:79:CA:19:AE:F0:DE:98:4D:D1:91:52:5C:A5:90:0B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A59CF94CEA066E140E480 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 203 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:59:cf:94:ce:a0:66:e1:40:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=42e54c4c-26bb-4199-a8c5-600a5b28d6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:b8:2a:c4:74:55:d7:23:1e:da:a4:06:ce: 89:62:f9:b0:ba:61:fe:1a:f3:3f:ea:2c:7a:5f:ca: 3d:16:2e:c7:80:af:2f:59:2a:24:83:2b:25:68:39: 26:4e:ad:60:8c:ee:c5:e0:6b:84:70:0a:4b:bf:f9: 47:52:eb:dc:bb:ba:6c:5c:c5:41:cb:c0:63:54:60: 7d:f0:f3:a9:0b:7d:f1:c8:eb:89:60:7a:d1:bf:a6: 59:04:92:fd:ac:bc:00:6c:f3:52:7d:fc:c9:93:d1: df:28:e9:a1:42:11:b3:f3:c2:da:d8:f6:15:ed:b7: be:3d:95:d1:29:48:f9:f6:4f:cc:68:dd:54:1d:16: fc:03:20:cb:11:b9:49:e6:e9:e7:03:dc:05:b6:7e: 41:b9:bb:9d:bb:95:66:83:5b:b7:e1:a1:53:06:0f: 8d:6d:df:4d:7a:c9:de:32:bd:ab:a1:dc:a0:33:38: 42:c9:f9:5e:f1:d8:86:3e:e5:76:7e:fe:cf:df:61: 42:d5:55:73:f4:44:ac:a7:19:91:c7:dd:0b:fa:33: 51:2b:7d:9e:61:06:ea:ba:a4:c2:4b:54:0a:38:be: 7e:1d:0c:91:10:e2:92:90:ee:e0:17:c0:05:f3:91: 7b:ee:db:71:68:9d:fd:8f:36:6f:65:64:fc:78:b1: e7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:05:7C:0F:16:79:CA:19:AE:F0:DE:98:4D:D1:91:52:5C:A5:90:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:88:1f:e8:b5:bd:79:20:f3:68:04:6f:6e:99:2b:d4:51:46: 99:0f:54:47:ea:f7:44:d0:9c:5a:57:a2:2d:41:c4:0c:a9:85: dd:0c:ab:42:25:b9:19:99:6a:33:de:bb:2e:51:80:30:8c:77: bc:81:89:ea:45:21:4f:14:79:58:f4:b9:e0:5d:51:b3:92:a7: 59:74:47:71:bc:ab:d0:42:0c:e2:1f:ab:67:b3:67:7d:4e:c0: e3:4c:a5:be:a4:68:b3:0d:76:3e:69:ae:e1:cd:99:8e:bc:4c: 5d:cd:07:38:de:5d:55:3b:bf:37:4a:a0:0d:6f:53:9c:3a:b7: 62:ea:8b:17:d1:4c:78:a2:16:38:a9:5c:c7:6e:a8:7d:bd:1e: 74:06:ef:7a:2d:26:3e:5c:53:c8:dc:d0:14:34:56:e6:8a:39: 12:ef:10:dc:d5:3e:29:f1:4d:7b:9d:7b:35:1a:01:d0:80:83: 90:48:cd:c9:62:8c:9d:a7:02:b6:4e:b6:69:f8:6f:dd:c6:9e: 6c:ef:8a:78:93:fe:c2:33:8d:4d:5a:03:09:b1:7a:2d:cd:be: 82:4a:78:78:34:fb:c0:d7:ea:91:04:3b:bd:78:2e:76:0d:49: f2:0a:7b:d0:c2:e4:5f:cc:7e:6e:87:21:35:6d:30:8e:6b:43: 71:03:d6:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alnPlM6gZuFA5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NDJlNTRjNGMtMjZiYi00MTk5LWE4YzUtNjAwYTViMjhkNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRW4KsR0VdcjHtqkBs6JYvmwumH+GvM/6ix6 X8o9Fi7HgK8vWSokgyslaDkmTq1gjO7F4GuEcApLv/lHUuvcu7psXMVBy8BjVGB9 8POpC33xyOuJYHrRv6ZZBJL9rLwAbPNSffzJk9HfKOmhQhGz88La2PYV7be+PZXR KUj59k/MaN1UHRb8AyDLEblJ5unnA9wFtn5Bubudu5Vmg1u34aFTBg+Nbd9Nesne Mr2rodygMzhCyfle8diGPuV2fv7P32FC1VVz9ESspxmRx90L+jNRK32eYQbquqTC S1QKOL5+HQyREOKSkO7gF8AF85F77ttxaJ39jzZvZWT8eLHniwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8FfA8WecoZrvDemE3RkVJcpZALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwYWE1ZjEtNTllNi0z ZmRkLTgyYmItYTA0OTI0MWY2MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWIH+i1vXkg82gEb26ZK9RRRpkPVEfq90TQnFpXoi1BxAyphd0Mq0Il uRmZajPeuy5RgDCMd7yBiepFIU8UeVj0ueBdUbOSp1l0R3G8q9BCDOIfq2ezZ31O wONMpb6kaLMNdj5pruHNmY68TF3NBzjeXVU7vzdKoA1vU5w6t2LqixfRTHiiFjip XMduqH29HnQG73otJj5cU8jc0BQ0VuaKORLvENzVPinxTXudezUaAdCAg5BIzcli jJ2nArZOtmn4b93GnmzviniT/sIzjU1aAwmxei3NvoJKeHg0+8DX6pEEO714LnYN SfIKe9DC5F/Mfm6HITVtMI5rQ3ED1mo= -----END CERTIFICATE-----Generated at Fri Mar 27 02:41:32 2026 by rpki-client