$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa File: 0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa (raw, json) Hash identifier: bPkLZbbdhTQnlSs3YemX6Mo5FSSfEn/BrDzrLGV68pI= Subject key identifier: 36:0E:40:85:AE:C5:E6:02:63:9C:C4:D2:D5:7F:AC:0A:D7:32:FB:7D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D59EA6ADB068A151A21C19900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 3356 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6a:db:06:8a:15:1a:21:c1:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=e315e54c-e76b-401d-ad60-88863f39ff3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:61:9c:e0:9c:bb:45:c7:16:f3:9f:c8:7a:6d: 5e:43:69:98:ca:ab:81:6d:14:b6:f6:1f:69:bd:4b: 03:98:86:61:a2:6e:7e:d5:56:15:58:ad:61:27:27: 03:45:0b:c0:5a:ea:dd:10:9b:3d:74:c9:1e:d9:a4: d8:f1:17:4d:40:c5:8f:d4:43:b8:a3:8e:f8:21:8c: 6d:a6:d9:99:5d:10:fa:81:2e:06:52:a1:a0:22:ef: 53:d4:fd:0a:cf:41:77:5e:5d:54:4f:7f:8f:88:69: 52:8c:da:44:f7:f3:0d:f5:fb:56:04:54:0a:33:e8: 51:99:43:3e:6b:7e:1a:12:7b:92:7f:56:4e:10:47: 7d:71:d8:7c:c5:26:ae:91:b3:53:83:e8:0e:32:bb: 10:1a:7a:24:02:6d:d0:09:2f:4a:c3:f8:f5:8c:78: 83:0d:ae:6c:94:15:d4:0d:75:30:bf:ee:a5:7a:6b: 8f:47:5c:6f:54:a4:3f:b7:b1:aa:df:45:a5:f5:7f: dc:ec:a2:36:22:21:4e:fc:85:3f:72:39:26:9b:39: 4b:07:60:2a:8c:c1:e4:1a:f5:54:fc:7e:9e:16:f9: 7d:b0:d8:ce:5a:6d:ca:07:05:94:e7:8d:68:92:ed: d7:f2:7b:26:f4:fe:9a:26:55:27:ec:7b:14:8f:d4: 44:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0E:40:85:AE:C5:E6:02:63:9C:C4:D2:D5:7F:AC:0A:D7:32:FB:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ad:e0:91:97:a0:1d:af:23:55:13:58:f1:78:31:18:fe:81: 3a:81:97:f5:45:f6:af:c4:b1:69:79:e9:30:35:ab:e3:e0:dc: f6:fa:13:0a:cc:f9:1a:da:06:72:8b:6e:d7:7d:ac:88:0e:84: 0b:6d:69:32:19:ee:22:d3:bb:1b:4d:bc:db:1a:29:0e:a0:a2: 52:0b:21:b6:34:ef:c1:29:52:0d:9f:b9:dc:a2:9f:28:93:52: c7:b9:e1:41:23:65:5a:44:c2:24:51:90:95:16:1a:ca:66:d4: cb:c9:1b:2e:d2:33:ec:ae:b9:81:4a:14:10:d3:ce:ce:af:af: 74:0f:4d:cd:d1:3b:73:eb:2c:9a:fa:1b:fe:3d:23:4b:b5:57: c9:26:85:18:e2:8d:67:2d:39:ba:96:da:72:d1:86:61:f4:1a: 49:57:79:c7:e3:10:40:70:aa:67:3d:26:50:87:4c:ed:45:3b: ac:ae:78:e5:a2:bb:f5:ff:f9:cf:2f:53:98:72:1c:0e:bb:e4: 7a:3a:8e:b0:54:08:10:3b:12:d6:98:6c:8b:f1:96:25:ff:99: 5e:97:c0:8c:98:f0:e8:55:1d:a4:78:cb:85:91:40:32:de:ad: 8e:66:72:a6:65:d5:7d:c7:09:56:e1:4f:5d:b7:6d:3c:3d:6e: 6d:c6:90:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mrbBooVGiHBmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZTMxNWU1NGMtZTc2Yi00MDFkLWFkNjAtODg4NjNmMzlmZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2Gc4Jy7RccW85/Iem1eQ2mYyquBbRS29h9p vUsDmIZhom5+1VYVWK1hJycDRQvAWurdEJs9dMke2aTY8RdNQMWP1EO4o474IYxt ptmZXRD6gS4GUqGgIu9T1P0Kz0F3Xl1UT3+PiGlSjNpE9/MN9ftWBFQKM+hRmUM+ a34aEnuSf1ZOEEd9cdh8xSaukbNTg+gOMrsQGnokAm3QCS9Kw/j1jHiDDa5slBXU DXUwv+6lemuPR1xvVKQ/t7Gq30Wl9X/c7KI2IiFO/IU/cjkmmzlLB2AqjMHkGvVU /H6eFvl9sNjOWm3KBwWU541oku3X8nsm9P6aJlUn7HsUj9RE2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYOQIWuxeYCY5zE0tV/rArXMvt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGFjMGE5ZWYtNjY1ZS0z MjRjLWI3MGQtZTU2ZjViZDNhOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCt4JGXoB2vI1UTWPF4MRj+gTqBl/VF9q/EsWl56TA1q+Pg3Pb6EwrM +RraBnKLbtd9rIgOhAttaTIZ7iLTuxtNvNsaKQ6golILIbY078EpUg2fudyinyiT Use54UEjZVpEwiRRkJUWGspm1MvJGy7SM+yuuYFKFBDTzs6vr3QPTc3RO3PrLJr6 G/49I0u1V8kmhRjijWctObqW2nLRhmH0GklXecfjEEBwqmc9JlCHTO1FO6yueOWi u/X/+c8vU5hyHA675Ho6jrBUCBA7EtaYbIvxliX/mV6XwIyY8OhVHaR4y4WRQDLe rY5mcqZl1X3HCVbhT123bTw9bm3GkMU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:31:00 2026 by rpki-client