$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa File: cea2d881-3d76-3a80-94b9-42e2473af64d.roa (raw, json) Hash identifier: mmMUArOEW9zMsJPil/t2+iEqqLciao3DAFAfjPC9ge8= Subject key identifier: 46:85:EE:28:66:E8:82:0E:E0:75:25:95:BF:D9:38:B0:A6:F1:D4:99 Certificate issuer: /CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Certificate serial: 010D0C9F4328584D3F64EBA9ADEEAD99EB639000 Authority key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 33387 IP address blocks: 63.141.224.0/19 maxlen: 24 74.91.16.0/20 maxlen: 24 107.150.32.0/19 maxlen: 24 142.54.160.0/19 maxlen: 24 192.151.144.0/20 maxlen: 24 192.187.96.0/19 maxlen: 24 198.204.224.0/19 maxlen: 24 199.168.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:eb:a9:ad:ee:ad:99:eb:63:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=8243fcba-9525-4736-93f6-57bf3f0c2b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3a:f5:c0:00:28:02:fb:5f:ca:1c:1f:c5:74: 4a:47:80:cd:0e:34:5a:26:6a:33:cc:39:3e:dd:c5: 5b:aa:40:52:9e:1d:6a:3c:17:1e:32:95:74:0f:a9: c9:e8:62:f0:54:d8:60:a6:6e:f5:94:ca:7a:e1:51: 9c:ff:44:bf:1e:d5:f8:a2:92:34:39:f6:c7:d9:3e: 15:41:52:5c:1e:52:70:e8:77:68:30:f6:da:d6:32: 63:77:63:90:92:bc:27:4f:08:3c:c6:55:64:dd:a8: 7a:23:82:17:77:32:86:66:87:7d:e2:1c:79:0d:3f: 1c:55:19:53:e8:d0:e1:85:8f:f0:0b:26:6c:02:37: 96:f0:0e:85:52:00:37:11:9d:6c:7a:d6:a4:68:06: c0:af:bb:d9:1e:d5:23:e0:1d:13:6d:c1:b9:76:a4: b6:ec:a2:de:62:50:d9:8d:74:c1:48:ef:37:b6:79: a4:8c:19:1a:6b:5b:a5:1b:86:72:53:87:9c:ad:f8: 87:aa:7a:eb:98:d7:f4:ca:cf:62:ab:d2:00:eb:25: 96:16:b3:0f:fc:b0:d8:e7:b9:fe:cc:77:31:77:98: da:14:88:27:37:ee:b6:c9:71:16:a6:29:0e:ac:e0: 84:fa:05:ef:69:08:0c:80:d5:88:a7:e1:c1:57:4d: 2b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:85:EE:28:66:E8:82:0E:E0:75:25:95:BF:D9:38:B0:A6:F1:D4:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl X509v3 Authority Key Identifier: keyid:54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer sbgp-ipAddrBlock: critical IPv4: 63.141.224.0/19 74.91.16.0/20 107.150.32.0/19 142.54.160.0/19 192.151.144.0/20 192.187.96.0/19 198.204.224.0/19 199.168.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:8c:0d:7c:fc:da:56:e3:ce:e8:66:8d:c7:f0:16:27:e4:1e: 6f:c8:a7:45:4e:1a:2a:e4:91:f9:21:b3:37:73:24:bc:f9:42: 65:ff:44:16:f7:b1:9b:37:5b:63:a0:3d:3c:dc:e4:79:f9:50: 71:39:7d:19:b6:ed:29:fb:c7:fa:6a:9c:94:af:7e:ca:90:e2: 6f:6f:1e:20:25:96:47:5c:ab:4c:9d:f7:fb:f1:ba:7e:4b:a3: 75:a4:9c:c9:ad:4c:a7:32:db:20:31:9c:6c:c1:04:c4:36:e2: d4:77:1f:ed:05:6a:d8:f5:54:67:2a:f7:77:39:32:2f:9b:04: 8b:9c:c2:af:cd:cd:8b:47:c3:3b:b9:8d:9a:13:39:3b:57:d6: b3:7b:28:81:fc:35:32:1a:27:78:f4:19:58:a4:70:cc:71:6c: 6e:23:85:8f:b8:59:70:c2:f7:73:ba:fa:c1:c5:1b:af:9b:49: 72:69:a6:ea:44:b6:ec:c6:e5:93:d4:4c:2b:78:a9:fb:84:49: ba:50:01:bd:e2:3c:98:39:fe:54:22:fc:b2:98:7e:00:40:d0: 80:75:35:91:5e:8f:e8:09:11:a2:63:d0:12:dc:91:8a:3f:18: c2:53:c3:02:d8:98:e1:3e:d2:11:5f:1d:9c:84:e2:f6:6a:6e: 64:3e:14:dd -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE0/ZOupre6tmetjkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBjNGFmNzktY2RjZi00NjQwLWFiNGUtZjBmMzM2NDhj YzU1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ODI0M2ZjYmEtOTUyNS00NzM2LTkzZjYtNTdiZjNmMGMyYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDr1wAAoAvtfyhwfxXRKR4DNDjRaJmozzDk+ 3cVbqkBSnh1qPBceMpV0D6nJ6GLwVNhgpm71lMp64VGc/0S/HtX4opI0OfbH2T4V QVJcHlJw6HdoMPba1jJjd2OQkrwnTwg8xlVk3ah6I4IXdzKGZod94hx5DT8cVRlT 6NDhhY/wCyZsAjeW8A6FUgA3EZ1setakaAbAr7vZHtUj4B0TbcG5dqS27KLeYlDZ jXTBSO83tnmkjBkaa1ulG4ZyU4ecrfiHqnrrmNf0ys9iq9IA6yWWFrMP/LDY57n+ zHcxd5jaFIgnN+62yXEWpikOrOCE+gXvaQgMgNWIp+HBV00r5QIDAQABo4IDfzCC A3swHQYDVR0OBBYEFEaF7ihm6IIO4HUllb/ZOLCm8dSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMGM0 YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0OGNjNTUvY2VhMmQ4ODEtM2Q3Ni0z YTgwLTk0YjktNDJlMjQ3M2FmNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjBjNGFmNzktY2RjZi00NjQwLWFi NGUtZjBmMzM2NDhjYzU1LzIwYzRhZjc5LWNkY2YtNDY0MC1hYjRlLWYwZjMzNjQ4 Y2M1NS5jcmwwHwYDVR0jBBgwFoAUVJshF3K5Lew9XWKBCmzP96diQ00wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYz MzY0OGNjNTUuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQFP43gAwQE SlsQAwQFa5YgAwQFjjagAwQEwJeQAwQFwLtgAwQFxszgAwQDx6hgMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AFaMDXz82lbjzuhmjcfwFifkHm/Ip0VOGirkkfkhszdzJLz5QmX/RBb3sZs3W2Og PTzc5Hn5UHE5fRm27Sn7x/pqnJSvfsqQ4m9vHiAllkdcq0yd9/vxun5Lo3WknMmt TKcy2yAxnGzBBMQ24tR3H+0Fatj1VGcq93c5Mi+bBIucwq/NzYtHwzu5jZoTOTtX 1rN7KIH8NTIaJ3j0GVikcMxxbG4jhY+4WXDC93O6+sHFG6+bSXJppupEtuzG5ZPU TCt4qfuESbpQAb3iPJg5/lQi/LKYfgBA0IB1NZFej+gJEaJj0BLckYo/GMJTwwLY mOE+0hFfHZyE4vZqbmQ+FN0= -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:03 2026 by rpki-client