$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa File: b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa (raw, json) Hash identifier: UM6T6YRbYo2jeunXaTtZih6HaLYNBrN53bhxFPJNqe4= Subject key identifier: 68:CF:04:E6:2B:50:5C:9A:0D:C9:8E:9F:3B:E3:C1:12:99:5C:AF:60 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D59EA6AE6E950FDD7C5036DA8 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 3356 IP address blocks: 20.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6a:e6:e9:50:fd:d7:c5:03:6d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=e8bddcf3-992e-44f3-abe3-38877b88d139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:c3:18:75:00:37:8a:cf:2a:0c:56:16:ec: cd:36:68:33:c0:53:4b:56:7d:74:61:f5:d4:53:2a: cf:09:c8:99:12:ba:73:cc:b5:55:42:39:17:01:9f: 04:45:d8:d6:5d:67:19:30:69:af:fa:25:c2:c3:b9: fb:9d:8f:c8:88:a0:c1:1f:5d:cb:ca:c3:86:e4:ff: ea:83:c0:e4:b5:80:35:90:8c:cf:5d:1e:5a:8c:48: 12:61:94:d5:a5:62:d7:f9:40:c8:f8:bd:56:79:aa: 06:31:f4:b3:9b:65:74:b4:ca:09:e0:fd:de:01:2e: 30:37:50:05:2d:c9:eb:b1:f7:01:0e:ce:80:89:41: 47:b5:97:76:30:ed:33:6e:c4:ad:23:1a:40:7f:fd: c7:06:6d:bd:62:34:27:b5:f6:5f:38:93:69:d5:22: d4:53:10:ba:0b:9a:75:33:9f:c8:28:79:67:24:b2: 84:94:29:d9:df:65:26:2b:01:d3:3f:f8:83:3d:13: 55:bc:83:36:95:b8:ed:11:54:f0:88:95:71:8f:ea: b0:02:19:b5:c6:72:df:02:5d:9f:9e:bf:13:4d:36: 09:43:d2:8e:85:0e:09:6e:08:69:3f:b3:b9:59:be: 32:9e:6b:fc:84:12:81:99:47:89:db:6f:ed:6c:2f: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CF:04:E6:2B:50:5C:9A:0D:C9:8E:9F:3B:E3:C1:12:99:5C:AF:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:52:f5:09:78:2d:86:61:24:77:e9:30:f0:c4:7c:ee:a5:4c: 0a:be:40:87:9a:38:26:e2:ea:1f:4c:e8:4d:da:5f:71:2a:26: 4b:d8:16:5d:4d:5a:bc:d9:81:ad:49:93:0b:4e:64:be:4c:9a: b2:13:d1:de:bf:c3:3a:e3:28:12:3e:92:92:af:7b:26:0c:13: 82:90:a5:ef:da:14:59:55:ac:16:14:fa:d4:a9:05:2c:ca:c1: 50:4e:0c:33:39:cc:83:a1:55:aa:f3:6f:17:9f:55:5b:3c:d0: a3:cb:9f:ae:67:89:35:e4:98:5b:9e:3a:4a:67:71:73:e4:f1: a1:1b:6e:69:94:10:5f:ba:77:31:e4:5c:27:29:87:87:a4:32: 55:72:97:8c:7a:7e:12:79:a6:e8:f1:be:cc:a6:f6:81:09:fa: d4:8c:8c:64:56:cf:0f:6b:1b:48:c0:b6:c2:bb:d5:3d:a4:26: 09:72:91:29:cf:9d:e8:4b:6b:a4:a5:a5:4c:2f:e0:4d:a7:20: ac:42:5e:5c:69:cb:57:5c:12:2f:ba:e5:f9:9c:bc:fe:04:2d: 9e:f9:27:a7:95:53:c1:dc:fa:3f:f2:c3:e8:c5:25:35:2b:3c: 45:78:16:40:27:8c:db:4d:93:98:ac:ab:64:c5:d8:62:f3:7c: d5:e3:3d:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mrm6VD918UDbagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZThiZGRjZjMtOTkyZS00NGYzLWFiZTMtMzg4NzdiODhkMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKTDGHUAN4rPKgxWFuzNNmgzwFNLVn10YfXU UyrPCciZErpzzLVVQjkXAZ8ERdjWXWcZMGmv+iXCw7n7nY/IiKDBH13LysOG5P/q g8DktYA1kIzPXR5ajEgSYZTVpWLX+UDI+L1WeaoGMfSzm2V0tMoJ4P3eAS4wN1AF LcnrsfcBDs6AiUFHtZd2MO0zbsStIxpAf/3HBm29YjQntfZfOJNp1SLUUxC6C5p1 M5/IKHlnJLKElCnZ32UmKwHTP/iDPRNVvIM2lbjtEVTwiJVxj+qwAhm1xnLfAl2f nr8TTTYJQ9KOhQ4JbghpP7O5Wb4ynmv8hBKBmUeJ22/tbC9VtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjPBOYrUFyaDcmOnzvjwRKZXK9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjJlY2Y1MjUtOGM4ZS0z MWFmLWI0ZTAtMGJmYzI3MmEzM2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtS9Ql4LYZhJHfpMPDEfO6lTAq+QIeaOCbi6h9M6E3aX3EqJkvYFl1N WrzZga1JkwtOZL5MmrIT0d6/wzrjKBI+kpKveyYME4KQpe/aFFlVrBYU+tSpBSzK wVBODDM5zIOhVarzbxefVVs80KPLn65niTXkmFueOkpncXPk8aEbbmmUEF+6dzHk XCcph4ekMlVyl4x6fhJ5pujxvsym9oEJ+tSMjGRWzw9rG0jAtsK71T2kJglykSnP nehLa6SlpUwv4E2nIKxCXlxpy1dcEi+65fmcvP4ELZ75J6eVU8Hc+j/yw+jFJTUr PEV4FkAnjNtNk5isq2TF2GLzfNXjPSg= -----END CERTIFICATE-----Generated at Fri Apr 17 22:48:20 2026 by rpki-client