$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa File: da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa (raw, json) Hash identifier: ypFDn0vFQE31xwTAHB8YxTUGaOqVIBFsStav1SypsRw= Subject key identifier: 60:68:0A:51:FD:6D:F0:A6:4E:18:F8:E3:6C:6F:E8:6F:44:C6:86:26 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CE36210742ADAEC6889B7DB98 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa Signing time: Tue 17 Feb 2026 02:00:31 +0000 ROA not before: Tue 17 Feb 2026 02:00:31 +0000 ROA not after: Mon 18 May 2026 01:00:31 +0000 asID: 3360 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:62:10:74:2a:da:ec:68:89:b7:db:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 17 02:00:31 2026 GMT Not After : May 18 01:00:31 2026 GMT Subject: CN=ea20f63d-23ec-4e80-b32b-66c15a5cc86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:7b:79:3d:be:aa:71:ec:2d:78:40:fa:6f: 40:03:ff:c6:66:75:e3:53:9d:c1:ac:db:e6:fa:d8: fc:49:a2:61:9b:82:0a:7e:44:09:79:52:3f:ed:0c: fb:71:f1:86:84:17:82:88:b8:ed:40:ec:f6:4e:35: 63:54:1d:fe:a0:cc:38:44:fd:48:36:99:d0:82:c2: b9:b7:64:4d:dc:ef:6e:f7:79:94:2e:58:1c:81:1b: 4e:26:16:8f:d5:c5:a6:1a:ef:c9:59:84:e9:83:a9: 61:54:1f:20:42:50:3a:fd:53:bf:30:50:0f:5f:70: 89:2f:08:ad:f3:4c:99:31:3d:6d:2e:cf:47:a7:3e: 3b:27:62:0c:18:cd:9e:d1:6a:ec:4c:ca:c6:02:50: 08:56:41:6a:99:f3:51:d9:2b:9a:c5:d8:fc:80:f6: a9:12:63:cd:bf:f3:9a:61:bb:09:c5:37:35:a3:2f: d6:af:ad:16:f7:3b:b7:17:d8:18:c9:de:9c:e3:f0: 88:e8:ad:f0:42:f9:04:e3:58:45:d1:56:37:6f:88: ce:ff:f1:bd:07:c2:52:94:19:49:7c:37:96:21:85: 0b:94:ad:bb:5b:38:51:75:7e:6f:98:a6:12:94:4f: dc:91:22:1d:f9:e4:6e:d8:d6:39:30:52:e9:4f:b6: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:68:0A:51:FD:6D:F0:A6:4E:18:F8:E3:6C:6F:E8:6F:44:C6:86:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:93:c6:64:ec:c8:7a:d8:00:87:6c:60:47:e9:76:b0:a1:81: 29:79:98:9a:58:47:ca:79:ab:60:fd:14:fa:af:55:44:d9:29: 11:b7:6b:0e:1e:cd:2d:ac:c5:de:6e:68:b9:1d:59:be:41:f4: 26:53:d8:40:3a:f9:12:ff:ed:c1:53:e9:eb:81:3b:67:df:3c: bc:a6:ad:50:87:23:7f:d2:1d:ae:20:84:ae:93:7d:07:7b:56: 43:1d:22:88:66:a4:ee:81:d0:49:02:5c:51:8d:33:62:a3:e2: f2:8e:99:95:ee:be:8b:40:8c:ef:74:2c:ad:70:72:a3:cb:3b: f1:e7:86:84:9c:11:87:5b:88:2b:c7:c2:02:ab:0a:47:02:6d: a4:9f:88:ff:25:62:b8:ee:09:51:9f:5b:72:4a:de:85:c2:3a: 1f:54:4b:c5:73:6c:33:80:fa:95:0f:4e:a7:17:cb:cc:6d:88: db:38:43:57:ab:5e:bb:91:25:a1:d5:9b:77:a0:6b:a1:f9:42: 72:08:5b:7b:5d:c8:cc:e3:5a:3c:7c:6c:db:75:ca:a1:aa:83: f1:35:05:89:60:e1:67:fd:ee:bf:12:e3:d2:6a:c6:5b:71:02: 7d:f3:c6:38:9a:da:cb:3c:61:96:f0:a5:36:65:5a:22:72:3c: 1f:60:1b:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzjYhB0KtrsaIm325gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk ZWEyMGY2M2QtMjNlYy00ZTgwLWIzMmItNjZjMTVhNWNjODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7d7eT2+qnHsLXhA+m9AA//GZnXjU53BrNvm +tj8SaJhm4IKfkQJeVI/7Qz7cfGGhBeCiLjtQOz2TjVjVB3+oMw4RP1INpnQgsK5 t2RN3O9u93mULlgcgRtOJhaP1cWmGu/JWYTpg6lhVB8gQlA6/VO/MFAPX3CJLwit 80yZMT1tLs9Hpz47J2IMGM2e0WrsTMrGAlAIVkFqmfNR2Suaxdj8gPapEmPNv/Oa YbsJxTc1oy/Wr60W9zu3F9gYyd6c4/CI6K3wQvkE41hF0VY3b4jO//G9B8JSlBlJ fDeWIYULlK27WzhRdX5vmKYSlE/ckSId+eRu2NY5MFLpT7YuJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBoClH9bfCmThj442xv6G9ExoYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEzOWM3OTctOWFmNC0z ZDcxLWJmYTItNWM0ZmMwYjQ3NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaTxmTsyHrYAIdsYEfpdrChgSl5mJpYR8p5q2D9FPqvVUTZKRG3aw4e zS2sxd5uaLkdWb5B9CZT2EA6+RL/7cFT6euBO2ffPLymrVCHI3/SHa4ghK6TfQd7 VkMdIohmpO6B0EkCXFGNM2Kj4vKOmZXuvotAjO90LK1wcqPLO/HnhoScEYdbiCvH wgKrCkcCbaSfiP8lYrjuCVGfW3JK3oXCOh9US8VzbDOA+pUPTqcXy8xtiNs4Q1er XruRJaHVm3ega6H5QnIIW3tdyMzjWjx8bNt1yqGqg/E1BYlg4Wf97r8S49Jqxltx An3zxjia2ss8YZbwpTZlWiJyPB9gGzM= -----END CERTIFICATE-----Generated at Mon Mar 2 14:31:51 2026 by rpki-client