$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa File: 3b274f1e-b389-388a-a8fd-f2216056bc4e.roa (raw, json) Hash identifier: Khr7MDDbDnqRjz4sdYpClR/ZGRKNTNd2ZjxhmcsXbRo= Subject key identifier: 14:1D:1E:76:1A:43:D5:D7:36:9D:2A:76:C4:16:92:E1:B9:D0:13:8E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D59EA6AC1879A5AD6E0FEBD80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 203 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6a:c1:87:9a:5a:d6:e0:fe:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=2c6a2376-55fd-4555-95a9-dea34eb9ffb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:c4:6b:21:28:29:b4:d8:2f:83:e0:a1:eb: 88:4e:5c:bc:94:8e:56:38:4c:89:f5:b4:1e:3d:72: 95:48:a6:17:87:dd:34:bb:13:15:6d:dc:2d:90:c8: e8:57:11:ad:65:d3:2f:51:a2:65:07:e9:4c:48:68: 2f:95:27:89:04:89:ec:ed:c6:a5:3c:d8:61:69:a6: f9:35:1f:85:ab:e3:37:dd:9b:14:cc:d1:5b:ca:0f: 08:53:99:49:20:c7:6e:ef:04:a8:8f:6f:13:c3:be: 9b:4e:75:14:9f:6d:93:ab:3c:4f:9f:8d:84:11:5c: 26:b9:02:91:9f:a8:99:ec:44:a8:de:25:24:29:3b: 44:fd:b8:36:34:1a:6a:2c:41:41:b1:27:7d:a1:ee: bb:96:50:c2:82:71:19:e1:bb:10:cc:7a:dc:25:35: 0e:53:85:2e:89:bf:ce:4b:bf:ba:0b:fe:ad:cd:22: 8f:b5:89:06:0a:23:e2:ee:a3:97:bd:d6:6e:9b:cb: ea:ef:95:9d:a4:08:df:16:b9:cd:a3:66:7a:5d:17: 28:0c:73:1a:9a:3b:41:19:7c:c5:da:a8:74:25:42: 71:70:67:4f:bc:6c:e9:63:98:ce:04:4a:aa:2c:8e: 7d:b2:e3:a0:aa:7d:8b:6c:8e:01:dd:b6:ab:bf:42: d5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1D:1E:76:1A:43:D5:D7:36:9D:2A:76:C4:16:92:E1:B9:D0:13:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f9:8b:aa:b7:cf:f8:28:9d:cd:53:52:c9:86:c6:46:4e:15: 4b:bb:83:86:57:a4:1a:0c:e1:12:7a:c4:23:7f:5c:c8:d7:ea: 12:05:b2:2d:91:dd:39:56:90:18:36:af:9a:44:fd:e8:ef:1c: e9:c4:0b:06:d0:05:87:ad:18:79:4b:3b:18:52:92:ce:38:88: a2:f0:b7:e9:ac:04:2c:de:fb:9a:70:12:db:bf:07:94:ff:d4: 4b:c2:5d:2c:7f:48:31:5d:2e:99:f1:02:ac:c1:ec:3a:ca:db: 52:4a:9d:c4:87:3f:b2:39:14:8a:1f:f4:42:c3:1b:d2:4c:b2: 62:a7:99:16:b7:d6:a4:7a:60:2c:c2:2c:98:a2:73:03:e9:16: 5f:52:7b:e8:8a:ee:96:a0:4d:73:c0:ac:b9:23:c4:70:d8:68: 43:25:17:2a:40:3c:90:fe:f0:58:57:b1:53:ac:a1:56:6f:88: 5a:6c:41:1e:5f:98:cf:1f:84:42:25:ef:83:2d:3d:c2:fd:15: b6:cc:a5:fc:62:63:4f:3f:63:17:bb:1b:22:68:00:6a:37:47: 2c:d7:cc:08:f8:b7:cc:f8:a2:2f:31:8e:1a:99:ea:38:e3:32: 99:10:cc:46:05:5b:ae:92:a3:41:00:9f:93:98:98:52:d9:8c: 27:8f:ff:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mrBh5pa1uD+vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MmM2YTIzNzYtNTVmZC00NTU1LTk1YTktZGVhMzRlYjlmZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt93EayEoKbTYL4PgoeuITly8lI5WOEyJ9bQe PXKVSKYXh900uxMVbdwtkMjoVxGtZdMvUaJlB+lMSGgvlSeJBIns7calPNhhaab5 NR+Fq+M33ZsUzNFbyg8IU5lJIMdu7wSoj28Tw76bTnUUn22TqzxPn42EEVwmuQKR n6iZ7ESo3iUkKTtE/bg2NBpqLEFBsSd9oe67llDCgnEZ4bsQzHrcJTUOU4Uuib/O S7+6C/6tzSKPtYkGCiPi7qOXvdZum8vq75WdpAjfFrnNo2Z6XRcoDHMamjtBGXzF 2qh0JUJxcGdPvGzpY5jOBEqqLI59suOgqn2LbI4B3barv0LVRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQdHnYaQ9XXNp0qdsQWkuG50BOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2IyNzRmMWUtYjM4OS0z ODhhLWE4ZmQtZjIyMTYwNTZiYzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP5i6q3z/gonc1TUsmGxkZOFUu7g4ZXpBoM4RJ6xCN/XMjX6hIFsi2R 3TlWkBg2r5pE/ejvHOnECwbQBYetGHlLOxhSks44iKLwt+msBCze+5pwEtu/B5T/ 1EvCXSx/SDFdLpnxAqzB7DrK21JKncSHP7I5FIof9ELDG9JMsmKnmRa31qR6YCzC LJiicwPpFl9Se+iK7pagTXPArLkjxHDYaEMlFypAPJD+8FhXsVOsoVZviFpsQR5f mM8fhEIl74MtPcL9FbbMpfxiY08/Yxe7GyJoAGo3RyzXzAj4t8z4oi8xjhqZ6jjj MpkQzEYFW66So0EAn5OYmFLZjCeP/9g= -----END CERTIFICATE-----Generated at Fri Apr 17 20:45:16 2026 by rpki-client