$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa File: c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa (raw, json) Hash identifier: jQFnjgA/2/j4S3Ml1OqEjEdfhA4UUohZ9bqX3S84qlg= Subject key identifier: 7A:80:10:3B:3F:A2:24:5E:38:73:B6:22:80:BB:AC:14:DB:8A:5E:6A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CF5879C3634392D6D32D520C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 3360 IP address blocks: 20.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:9c:36:34:39:2d:6d:32:d5:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=2f46c2f5-51fb-4b90-8fd7-bcaf78e918de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:61:13:04:e8:69:c8:71:b6:05:34:c6:ae: 7a:81:62:de:cb:6c:08:98:5d:c8:2d:7d:7f:ed:9d: 54:ec:51:95:10:0a:db:34:ab:c2:89:9e:e3:0f:d9: 64:96:89:18:47:e2:8c:c2:3d:5c:08:45:98:b7:69: f6:9a:d2:70:7d:b6:ca:ef:69:7c:52:dd:36:d7:ec: 38:2a:eb:93:d6:bb:87:c6:ea:8e:ee:6b:f7:52:79: e3:62:64:45:e4:48:7f:44:47:9e:54:69:e2:8a:b6: c6:b4:8a:92:e9:92:4e:41:4e:cc:c4:e2:9d:11:bd: 4e:21:a3:ba:1e:d6:71:9e:fb:3f:00:bd:b6:54:a4: 6c:08:c8:aa:89:ad:63:1f:37:ab:23:3d:2d:26:3c: 47:20:ea:27:27:da:d0:74:8b:c3:36:41:66:f1:f7: 7d:3c:99:f2:e3:cc:3e:c3:77:f2:fd:12:3c:73:84: 34:78:5c:64:1f:bd:bb:a0:5e:66:38:86:cc:9d:02: a6:63:c5:03:0a:68:45:ef:d4:e0:a1:6e:19:8b:b7: d4:4b:56:65:e9:3d:39:aa:ed:5c:83:ad:b3:05:b1: 76:b9:d2:14:8c:61:ca:c6:05:7a:c7:94:ea:9f:a0: 3d:75:93:20:5f:90:7c:f9:30:d6:06:04:0a:d5:6e: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:80:10:3B:3F:A2:24:5E:38:73:B6:22:80:BB:AC:14:DB:8A:5E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3c:8a:3d:c8:c9:01:4b:a4:d7:99:af:ff:2c:a4:32:c1:01: 29:48:27:a1:a3:9c:60:72:bf:c7:65:d4:f2:b0:bd:0c:09:24: 83:8e:0b:29:1d:37:db:be:d9:8f:79:7e:5c:03:d4:88:b0:13: 01:f2:ff:b3:af:b6:ad:15:b1:f2:4a:de:17:23:1c:db:61:e5: 45:02:f4:eb:ac:71:d4:38:82:74:05:a8:bb:15:6a:50:96:c2: 6d:1d:94:1b:39:05:cf:18:c3:f5:9a:e5:de:ab:f4:ed:64:66: 7c:13:b9:aa:24:1b:96:52:5c:10:bc:73:c7:26:3e:3f:02:f3: bd:f0:d3:88:fb:18:89:e4:0e:0f:e8:dd:de:36:b1:94:f5:98: 75:4c:0a:53:93:15:45:2c:7d:6c:23:10:e9:4a:40:f6:d3:90: 3d:8f:3a:a6:07:95:aa:88:8b:bc:02:09:4a:61:0f:3c:1a:4c: 38:bf:fd:cd:63:d7:95:30:4a:c9:63:55:81:49:5e:aa:98:2f: ae:e7:68:d7:b8:fd:83:86:9f:82:22:3f:11:43:cf:8f:d0:83: a1:41:3d:5a:5c:4e:29:8e:6d:3b:51:7f:32:30:d5:5a:9a:ca: 50:4f:ec:15:89:dd:32:93:85:09:5c:5c:cc:64:b1:9f:6c:86: af:49:20:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5w2NDktbTLVIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk MmY0NmMyZjUtNTFmYi00YjkwLThmZDctYmNhZjc4ZTkxOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq5hEwToachxtgU0xq56gWLey2wImF3ILX1/ 7Z1U7FGVEArbNKvCiZ7jD9lklokYR+KMwj1cCEWYt2n2mtJwfbbK72l8Ut021+w4 KuuT1ruHxuqO7mv3UnnjYmRF5Eh/REeeVGniirbGtIqS6ZJOQU7MxOKdEb1OIaO6 HtZxnvs/AL22VKRsCMiqia1jHzerIz0tJjxHIOonJ9rQdIvDNkFm8fd9PJny48w+ w3fy/RI8c4Q0eFxkH727oF5mOIbMnQKmY8UDCmhF79TgoW4Zi7fUS1Zl6T05qu1c g62zBbF2udIUjGHKxgV6x5Tqn6A9dZMgX5B8+TDWBgQK1W79kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqAEDs/oiReOHO2IoC7rBTbil5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzNjNjcyNWYtZTRlMy0z MWFjLTkzYTYtZDAyZGRiZjdjNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA8ij3IyQFLpNeZr/8spDLBASlIJ6GjnGByv8dl1PKwvQwJJIOOCykd N9u+2Y95flwD1IiwEwHy/7Ovtq0VsfJK3hcjHNth5UUC9OuscdQ4gnQFqLsValCW wm0dlBs5Bc8Yw/Wa5d6r9O1kZnwTuaokG5ZSXBC8c8cmPj8C873w04j7GInkDg/o 3d42sZT1mHVMClOTFUUsfWwjEOlKQPbTkD2POqYHlaqIi7wCCUphDzwaTDi//c1j 15UwSsljVYFJXqqYL67naNe4/YOGn4IiPxFDz4/Qg6FBPVpcTimObTtRfzIw1Vqa ylBP7BWJ3TKThQlcXMxksZ9shq9JIAM= -----END CERTIFICATE-----Generated at Mon Mar 2 11:46:26 2026 by rpki-client