$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa File: b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa (raw, json) Hash identifier: BdTip5nC20+fXgG0fngqkGXu0LRl3lNdh0hSC/VK9SQ= Subject key identifier: 16:17:4F:B0:6A:2F:EC:E1:71:41:CE:C1:23:14:4D:FB:0F:E1:54:CD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D55BA49A7E28D72744F806E00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 3360 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:49:a7:e2:8d:72:74:4f:80:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=077f4720-f14c-4f8f-a168-5b52341aa308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3f:e4:c4:b3:f0:d9:8f:58:27:77:19:d3:09: a8:b6:b0:73:bd:47:26:6f:0b:6c:4d:55:f1:10:ac: 0f:94:dc:8b:b9:d3:a6:5e:b4:41:17:6d:2a:a1:75: f6:88:c3:c4:06:45:85:88:ad:1c:a7:8d:9f:df:18: 4c:db:1a:3a:a0:2a:da:b8:28:52:66:b1:f4:1b:3d: 8c:b1:00:57:03:91:33:c0:f8:cf:72:fd:59:27:c9: 64:03:7e:88:ca:1d:d9:90:dc:41:10:ad:81:d8:d3: 50:67:71:60:91:3f:6a:56:fe:29:5b:36:80:e1:27: d1:05:68:f5:cc:39:b7:fd:16:d3:9b:bc:f6:73:c7: 1f:4f:c8:5d:61:ed:ab:58:e7:4a:d7:20:ab:ff:60: 3c:cf:5b:b7:2e:85:60:f2:9d:7a:20:e7:98:ec:2a: 0a:27:e9:43:45:14:d6:b1:88:07:e4:7d:2f:dc:af: c6:14:f8:59:a3:02:72:40:52:99:b0:9d:f1:f1:6d: 27:6a:b8:09:88:28:dc:db:73:1d:8f:66:c6:fc:d4: d7:63:59:67:69:63:bc:5a:5f:bd:de:44:ec:d2:82: 2a:e7:81:b1:5e:d9:93:ae:f1:f7:d2:1d:23:57:7a: 7b:ac:f0:5a:13:c2:8c:b8:12:17:8d:3a:91:1d:bc: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:17:4F:B0:6A:2F:EC:E1:71:41:CE:C1:23:14:4D:FB:0F:E1:54:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5e:8f:ab:b3:ae:15:64:92:27:8c:52:12:e1:fa:2b:00:83: 37:a8:bd:39:ce:60:40:bd:d3:4a:3a:cb:a8:f8:07:f6:53:60: b4:04:6e:9b:5a:08:71:2e:c6:9a:b2:db:6f:49:63:2d:1f:23: 47:9e:e0:bf:60:2c:95:59:3a:70:df:c5:3d:8b:de:6d:3d:52: 48:83:1f:01:3f:22:4c:05:6b:37:83:79:7c:b5:da:2c:09:60: f4:ba:d5:b5:ed:8e:60:63:e9:dd:95:fc:db:db:42:76:09:34: 83:a6:d9:ba:2c:01:ba:7b:61:f5:5d:59:42:05:18:6a:36:79: eb:5e:9a:dd:a5:ba:cc:58:62:c8:3d:28:1a:a6:89:80:5b:4c: 1a:e1:04:de:a3:b6:17:52:4e:ed:2f:be:fd:ef:d2:16:59:e8: 23:83:c7:ef:e2:32:d1:3e:57:54:1c:b0:d0:56:82:63:ba:3f: bb:ff:08:97:17:32:dd:87:93:c4:a4:81:8a:8d:4b:4c:09:08: 46:ac:ca:d9:25:f3:57:c9:3c:7f:d3:fd:0d:e0:e9:ec:dc:27: fe:84:f5:2d:0f:49:36:46:fb:a3:8b:d4:4b:3e:79:4c:e3:58: 99:f6:34:ab:20:eb:95:c4:0d:1e:e8:ec:d9:7d:48:58:b8:bb: 17:f9:1c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vukmn4o1ydE+AbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MDc3ZjQ3MjAtZjE0Yy00ZjhmLWExNjgtNWI1MjM0MWFhMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz/kxLPw2Y9YJ3cZ0wmotrBzvUcmbwtsTVXx EKwPlNyLudOmXrRBF20qoXX2iMPEBkWFiK0cp42f3xhM2xo6oCrauChSZrH0Gz2M sQBXA5EzwPjPcv1ZJ8lkA36Iyh3ZkNxBEK2B2NNQZ3FgkT9qVv4pWzaA4SfRBWj1 zDm3/RbTm7z2c8cfT8hdYe2rWOdK1yCr/2A8z1u3LoVg8p16IOeY7CoKJ+lDRRTW sYgH5H0v3K/GFPhZowJyQFKZsJ3x8W0nargJiCjc23Mdj2bG/NTXY1lnaWO8Wl+9 3kTs0oIq54GxXtmTrvH30h0jV3p7rPBaE8KMuBIXjTqRHbyKewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYXT7BqL+zhcUHOwSMUTfsP4VTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjlmMjAyNGMtZGE1Yy0z ZTVlLWIyMTUtYTVhZWZiZTJmMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFej6uzrhVkkieMUhLh+isAgzeovTnOYEC900o6y6j4B/ZTYLQEbpta CHEuxpqy229JYy0fI0ee4L9gLJVZOnDfxT2L3m09UkiDHwE/IkwFazeDeXy12iwJ YPS61bXtjmBj6d2V/NvbQnYJNIOm2bosAbp7YfVdWUIFGGo2eetemt2lusxYYsg9 KBqmiYBbTBrhBN6jthdSTu0vvv3v0hZZ6CODx+/iMtE+V1QcsNBWgmO6P7v/CJcX Mt2Hk8SkgYqNS0wJCEasytkl81fJPH/T/Q3g6ezcJ/6E9S0PSTZG+6OL1Es+eUzj WJn2NKsg65XEDR7o7Nl9SFi4uxf5HLE= -----END CERTIFICATE-----Generated at Fri Apr 17 21:31:01 2026 by rpki-client