$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0971af1f-9e32-3d66-b9a6-b4ef3ee401d5.roa File: 0971af1f-9e32-3d66-b9a6-b4ef3ee401d5.roa (raw, json) Hash identifier: 6iTvw5xKUTgpq3rJiWrsHyU+GsGmBK9FKEZLj8BFYNg= Subject key identifier: F9:66:47:FA:BE:02:DE:C8:C4:43:B2:66:F4:55:1B:38:46:54:87:01 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D7CCFDA3623128E9E82FA5F80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0971af1f-9e32-3d66-b9a6-b4ef3ee401d5.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 202 IP address blocks: 20.139.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:da:36:23:12:8e:9e:82:fa:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=6c4ae37f-0a3d-42fc-b4f4-138eaf8b2cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c0:cc:98:00:6e:e2:7e:98:4e:e6:60:d5:f7: 60:83:84:be:4f:3e:85:f6:ff:07:32:b9:e7:64:b7: 15:8f:92:99:67:a1:2d:03:72:b3:7e:d9:82:97:4a: 3d:b2:df:5f:c8:6a:8c:b9:fc:1d:94:d5:ac:60:30: ea:e9:07:ab:09:8b:68:1b:4a:78:20:f3:9d:9f:2a: ee:47:18:c4:34:62:12:12:76:f9:48:ee:ac:ca:fc: 64:12:3a:fd:c7:a1:65:51:6d:c3:57:83:b4:99:08: 81:48:b3:d7:9d:cc:b2:38:3e:98:eb:ab:0d:42:dd: 1c:1d:1b:8a:67:c9:4a:67:6f:7c:ad:0c:ae:18:ec: 02:24:4e:8c:63:29:41:a5:70:65:4b:2c:26:98:e2: bf:44:ae:12:18:28:a3:44:32:1b:38:97:51:e5:77: 78:9f:8f:0a:d4:a8:77:e8:05:4a:b5:61:c0:76:62: e7:70:b8:c1:44:27:53:b8:c5:ff:6e:f9:1a:12:a5: c7:ab:6a:65:d2:95:5d:b9:6a:1a:28:5d:f5:4d:80: f6:ad:bc:1d:f5:ea:82:35:ac:f3:88:f3:38:1b:52: 55:73:ba:6e:59:70:6c:58:10:e7:a4:13:e6:95:62: 1d:bb:0e:81:70:1c:58:ec:af:f7:92:32:40:1f:16: 2b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:66:47:FA:BE:02:DE:C8:C4:43:B2:66:F4:55:1B:38:46:54:87:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0971af1f-9e32-3d66-b9a6-b4ef3ee401d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:74:51:8b:1c:e6:8b:76:79:97:e2:ab:31:04:d6:b3:da:b5: 16:4d:10:24:77:ac:0a:7e:72:7b:eb:6d:bf:82:f8:b8:55:d8: 28:af:ed:aa:90:14:d3:34:8e:e3:75:ff:a1:8b:f1:19:c0:c2: d9:c4:c8:b1:8f:95:5a:21:05:a1:c4:48:78:16:89:bb:07:10: 01:0f:84:ab:89:ae:77:56:ff:12:1e:fb:7e:19:67:64:92:99: 05:2d:6b:fd:09:b3:7f:ef:a6:3b:aa:43:c1:ac:3c:fc:52:32: 2d:4f:32:11:b4:be:30:5e:2d:ee:c8:bb:35:66:da:69:ce:cb: f5:2a:86:91:4f:c3:5e:71:4b:fd:b6:90:5d:3b:32:91:86:0d: c9:8a:9c:f7:65:95:8e:8e:c5:df:e7:07:83:c5:8f:f2:6d:e4: 18:59:38:89:1b:5b:d7:5d:91:99:bb:42:bc:c0:3a:7f:61:fe: b1:c4:ab:99:78:7b:b6:e0:1d:8c:5a:ec:45:ef:3d:8d:ce:20: 45:6c:45:ee:46:d8:12:28:6e:60:10:b9:a1:b2:7e:96:25:3f: 02:8e:cf:75:a5:5d:91:f0:68:3a:d0:c1:8f:3b:19:20:a3:89: 89:87:1f:89:a0:9a:f7:c0:77:49:6e:fa:ca:5e:d0:35:ef:c4: a6:a9:1f:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9o2IxKOnoL6X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk NmM0YWUzN2YtMGEzZC00MmZjLWI0ZjQtMTM4ZWFmOGIyY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8DMmABu4n6YTuZg1fdgg4S+Tz6F9v8HMrnn ZLcVj5KZZ6EtA3KzftmCl0o9st9fyGqMufwdlNWsYDDq6QerCYtoG0p4IPOdnyru RxjENGISEnb5SO6syvxkEjr9x6FlUW3DV4O0mQiBSLPXncyyOD6Y66sNQt0cHRuK Z8lKZ298rQyuGOwCJE6MYylBpXBlSywmmOK/RK4SGCijRDIbOJdR5Xd4n48K1Kh3 6AVKtWHAdmLncLjBRCdTuMX/bvkaEqXHq2pl0pVduWoaKF31TYD2rbwd9eqCNazz iPM4G1JVc7puWXBsWBDnpBPmlWIduw6BcBxY7K/3kjJAHxYriwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlmR/q+At7IxEOyZvRVGzhGVIcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDk3MWFmMWYtOWUzMi0z ZDY2LWI5YTYtYjRlZjNlZTQwMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV0UYsc5ot2eZfiqzEE1rPatRZNECR3rAp+cnvrbb+C+LhV2Civ7aqQ FNM0juN1/6GL8RnAwtnEyLGPlVohBaHESHgWibsHEAEPhKuJrndW/xIe+34ZZ2SS mQUta/0Js3/vpjuqQ8GsPPxSMi1PMhG0vjBeLe7IuzVm2mnOy/UqhpFPw15xS/22 kF07MpGGDcmKnPdllY6Oxd/nB4PFj/Jt5BhZOIkbW9ddkZm7QrzAOn9h/rHEq5l4 e7bgHYxa7EXvPY3OIEVsRe5G2BIobmAQuaGyfpYlPwKOz3WlXZHwaDrQwY87GSCj iYmHH4mgmvfAd0lu+spe0DXvxKapHyk= -----END CERTIFICATE-----Generated at Sat Apr 18 00:41:03 2026 by rpki-client