$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa File: 66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa (raw, json) Hash identifier: rL+D7CnslyIQCYkxX4kbERyNwj1XcMEv5ieOw0jenk4= Subject key identifier: 16:7A:40:F2:E3:00:AE:43:B4:A8:04:D9:66:39:A7:1A:44:3A:17:53 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CF5879D65C5072A467FEB0860 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 3356 IP address blocks: 20.137.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:9d:65:c5:07:2a:46:7f:eb:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=a9a1930c-2dfa-4dba-a717-370f4f34c682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:02:f4:18:c9:c7:01:27:5a:94:24:0d:ec:78: cf:04:b9:a6:92:bc:de:8f:53:e7:1b:b5:bc:05:c5: 7f:00:47:63:d6:d1:44:07:02:d0:c0:7e:b5:09:ba: 90:f3:d9:12:0c:a2:9c:29:25:2b:d9:7b:82:04:72: 33:bb:25:fc:b9:d1:71:d0:c7:e1:ae:f9:08:d4:aa: e6:ea:09:64:fc:60:04:4c:a9:ff:61:52:32:62:8e: f1:f5:1a:16:a6:c8:30:54:c3:6a:37:9a:65:bb:d3: 86:9b:2b:a2:20:1e:b7:2a:08:76:f6:a6:ac:d3:4c: 2b:f0:b6:93:96:3e:54:be:04:dd:1e:0f:c4:3f:f8: c4:ae:65:fb:bb:b0:85:b3:25:af:ae:0b:3b:b2:61: f1:fe:b4:d6:90:0b:47:03:f5:42:f7:02:9b:dd:3a: a6:74:59:b9:1e:b3:61:2e:ce:0f:3c:fa:94:12:b3: 50:b2:83:94:bd:95:dc:41:0b:1f:07:7c:ef:50:cd: f8:29:3d:0e:e8:b8:31:6e:cc:04:9f:c1:b0:7c:e8: 72:05:fa:28:33:23:e8:86:35:29:03:59:43:22:76: 81:1f:a1:8d:6c:74:ef:94:6f:03:44:4c:31:f1:33: 78:cc:c7:ed:e9:0c:cb:3b:31:a6:49:3e:7d:6c:bd: 9b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7A:40:F2:E3:00:AE:43:B4:A8:04:D9:66:39:A7:1A:44:3A:17:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:1f:57:1f:dd:4d:01:db:3c:45:1f:83:51:51:f3:f0:fd:47: 41:d5:1d:f4:e8:7a:59:a8:22:4e:b1:2d:af:bc:9c:6b:3d:c0: 7d:b8:74:b4:ed:e8:7a:1c:ee:e1:67:3e:44:b3:13:61:bd:4d: 03:03:c9:72:9c:0e:60:65:d6:c6:79:19:f2:e3:7a:a1:d9:05: 51:d4:1b:90:08:74:9f:0a:58:01:20:00:fd:f5:1d:34:8c:6b: 3f:f5:fc:49:8a:93:0e:fc:92:48:54:d8:41:7e:a1:8b:a7:8f: 96:4f:7a:6b:da:7c:ac:5e:4e:d4:b9:de:9f:86:9c:8a:4c:d8: e6:fe:fd:7b:a9:ff:48:05:9b:ca:7a:c3:08:3a:3c:a2:27:61: 43:05:bf:72:ba:0e:0c:46:f3:a6:0b:c3:46:b1:af:41:5a:10: 2d:39:46:43:6f:16:31:9c:1f:8e:76:bd:32:59:83:e0:f7:50: ba:a5:47:5d:07:c2:e8:02:77:24:a6:b7:33:ff:d0:ec:c2:9d: f0:17:c3:ec:ac:a0:6a:a8:71:97:92:2e:4a:b5:c1:16:81:cf: 6a:b8:b3:80:0c:36:60:9c:69:36:dd:f1:e7:ac:11:d3:2f:37: 7d:c7:c9:23:c2:83:b1:73:31:63:a4:a5:4f:ea:89:a0:3b:8c: f6:9e:ff:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h51lxQcqRn/rCGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk YTlhMTkzMGMtMmRmYS00ZGJhLWE3MTctMzcwZjRmMzRjNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgL0GMnHASdalCQN7HjPBLmmkrzej1PnG7W8 BcV/AEdj1tFEBwLQwH61CbqQ89kSDKKcKSUr2XuCBHIzuyX8udFx0MfhrvkI1Krm 6glk/GAETKn/YVIyYo7x9RoWpsgwVMNqN5plu9OGmyuiIB63Kgh29qas00wr8LaT lj5UvgTdHg/EP/jErmX7u7CFsyWvrgs7smHx/rTWkAtHA/VC9wKb3TqmdFm5HrNh Ls4PPPqUErNQsoOUvZXcQQsfB3zvUM34KT0O6LgxbswEn8GwfOhyBfooMyPohjUp A1lDInaBH6GNbHTvlG8DREwx8TN4zMft6QzLOzGmST59bL2bZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZ6QPLjAK5DtKgE2WY5pxpEOhdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjZhM2M5MzQtYThhZS0z OWM2LTllMDctOTU3OTRiNjNiOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFInwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYfVx/dTQHbPEUfg1FR8/D9R0HVHfToelmoIk6xLa+8nGs9wH24dLTt 6Hoc7uFnPkSzE2G9TQMDyXKcDmBl1sZ5GfLjeqHZBVHUG5AIdJ8KWAEgAP31HTSM az/1/EmKkw78kkhU2EF+oYunj5ZPemvafKxeTtS53p+GnIpM2Ob+/Xup/0gFm8p6 wwg6PKInYUMFv3K6DgxG86YLw0axr0FaEC05RkNvFjGcH452vTJZg+D3ULqlR10H wugCdySmtzP/0OzCnfAXw+ysoGqocZeSLkq1wRaBz2q4s4AMNmCcaTbd8eesEdMv N33HySPCg7FzMWOkpU/qiaA7jPae/84= -----END CERTIFICATE-----Generated at Mon Mar 2 15:39:00 2026 by rpki-client