$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa File: 74c04573-b423-34d6-a92c-a33a7e85298a.roa (raw, json) Hash identifier: 2mGInMWb4ywbAP8hd9m6HgEzViOXCcEH2ZV7rk3Yh0M= Subject key identifier: FD:D4:6A:05:1D:A3:00:98:D9:17:AD:A0:A5:00:F1:3B:52:0F:94:D8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D59EA6B0A2BCCF4CF71447100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 203 IP address blocks: 20.139.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6b:0a:2b:cc:f4:cf:71:44:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=0e3fe846-3db3-4a90-b0d3-82b48eb55b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e2:90:24:0c:de:85:df:55:68:5d:9a:96:df: b1:ae:e2:63:a8:26:f4:6f:82:6c:52:f6:77:cb:7d: f1:1d:d8:dc:f2:4f:9f:7f:4e:5e:7b:7d:07:17:78: a5:6b:42:f3:25:a1:4a:7f:42:73:31:8a:64:ae:57: 3d:bf:e5:0d:cd:46:61:6c:8e:bd:1f:95:c9:30:2f: 7b:be:04:dd:8e:4e:48:99:ab:5a:d9:9a:7c:e7:43: 00:55:65:d6:9a:bc:d4:7a:ba:cc:19:b9:c9:6f:53: 0c:3a:ce:f3:65:34:9b:1f:e9:45:bb:11:38:dd:28: dc:90:75:f8:ce:27:74:86:56:68:31:80:c5:ed:d6: 0d:51:41:1d:f7:f2:a3:41:fb:e9:ab:6d:44:ed:63: 76:c6:8d:a5:ce:ad:77:02:ff:7c:77:26:1c:6f:fb: 4c:da:2e:c9:dd:7b:75:3d:15:b7:df:ac:8e:67:13: ff:05:88:39:f9:a2:40:96:f6:50:06:52:dc:d6:19: 1e:a9:0c:f0:d9:fe:e9:06:d7:96:11:a8:fc:69:20: 65:37:7a:c6:9a:9d:00:02:ec:88:58:30:41:34:fd: 33:36:1f:52:70:17:ea:3e:09:82:cc:cb:eb:0e:da: 08:1a:db:bd:a8:40:95:e6:24:eb:24:80:2e:c5:cc: fb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D4:6A:05:1D:A3:00:98:D9:17:AD:A0:A5:00:F1:3B:52:0F:94:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c0:06:0c:f5:bf:93:e9:8f:3b:de:21:6f:38:08:a5:09:be: b6:28:2a:91:64:8b:50:80:2d:fb:d9:18:f4:2c:5b:49:f9:d2: bc:18:c3:90:48:9f:bf:22:22:c6:de:bf:88:f7:bb:9d:e6:24: 35:39:d8:f5:03:43:bb:81:4f:cc:c8:58:b1:59:af:a6:ac:1a: d1:09:bc:4a:44:53:32:c2:4e:b6:f6:96:50:63:65:6e:f6:67: 4f:1d:a0:9a:32:28:3c:02:7c:8a:66:2f:a7:d5:39:7e:56:b4: 18:f7:08:c2:2e:9e:22:58:29:bc:59:78:04:ce:2c:55:b4:c6: ae:30:95:5a:00:6c:92:ce:f5:8a:93:89:bc:58:07:05:81:4b: e7:0d:98:a6:28:28:ac:87:de:1c:a2:c6:b8:ef:4f:65:72:c1: 4e:ff:f7:a2:2a:a2:99:32:7f:60:c9:de:d7:6b:71:b0:55:6b: 4d:6a:89:b6:65:34:50:7b:19:fa:8b:73:a6:6a:07:3c:0c:80: 3d:74:ca:24:a6:d4:32:f4:9e:58:22:76:2c:ff:61:d5:38:f9: 11:d0:12:43:e2:f8:7f:83:65:d7:d5:61:40:76:c9:94:07:66: fc:4a:02:37:7f:f1:57:13:5c:63:37:16:0d:32:85:d6:82:a9: 04:17:d3:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6msKK8z0z3FEcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MGUzZmU4NDYtM2RiMy00YTkwLWIwZDMtODJiNDhlYjU1YjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uKQJAzehd9VaF2alt+xruJjqCb0b4JsUvZ3 y33xHdjc8k+ff05ee30HF3ila0LzJaFKf0JzMYpkrlc9v+UNzUZhbI69H5XJMC97 vgTdjk5Imata2Zp850MAVWXWmrzUerrMGbnJb1MMOs7zZTSbH+lFuxE43SjckHX4 zid0hlZoMYDF7dYNUUEd9/KjQfvpq21E7WN2xo2lzq13Av98dyYcb/tM2i7J3Xt1 PRW336yOZxP/BYg5+aJAlvZQBlLc1hkeqQzw2f7pBteWEaj8aSBlN3rGmp0AAuyI WDBBNP0zNh9ScBfqPgmCzMvrDtoIGtu9qECV5iTrJIAuxcz7hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3UagUdowCY2RetoKUA8TtSD5TYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzRjMDQ1NzMtYjQyMy0z NGQ2LWE5MmMtYTMzYTdlODUyOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvABgz1v5PpjzveIW84CKUJvrYoKpFki1CALfvZGPQsW0n50rwYw5BI n78iIsbev4j3u53mJDU52PUDQ7uBT8zIWLFZr6asGtEJvEpEUzLCTrb2llBjZW72 Z08doJoyKDwCfIpmL6fVOX5WtBj3CMIuniJYKbxZeATOLFW0xq4wlVoAbJLO9YqT ibxYBwWBS+cNmKYoKKyH3hyixrjvT2VywU7/96Iqopkyf2DJ3tdrcbBVa01qibZl NFB7GfqLc6ZqBzwMgD10yiSm1DL0nlgidiz/YdU4+RHQEkPi+H+DZdfVYUB2yZQH ZvxKAjd/8VcTXGM3Fg0yhdaCqQQX0zI= -----END CERTIFICATE-----Generated at Sat Apr 18 01:54:03 2026 by rpki-client