$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/34e93da8-c07e-3b49-840f-e1aea560916a.roa File: 34e93da8-c07e-3b49-840f-e1aea560916a.roa (raw, json) Hash identifier: B6XjRA5QSiv05npdOv3ggOXy5PswxylDMMd1G+9lkC0= Subject key identifier: 4D:EA:3C:59:7A:51:8D:70:C2:9A:B6:6B:5E:34:68:31:90:AD:22:DB Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Certificate serial: 010D0C9F4328584E3FC46DF5D5CD32D06C738F80 Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/34e93da8-c07e-3b49-840f-e1aea560916a.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 12025 IP address blocks: 174.128.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:6d:f5:d5:cd:32:d0:6c:73:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=24626e3f-bcbb-4162-94f4-fc8f3959b7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:63:7a:28:a6:e5:34:f5:98:9a:85:0c:e8: 83:34:8e:00:d7:70:75:32:e5:c8:4c:27:4d:95:f3: ed:dc:e4:a6:a9:0a:1c:b8:71:5b:2b:6b:b7:c2:f2: bd:0a:a8:7c:7f:d1:0f:11:41:70:20:08:f6:ba:a7: 86:3d:23:fb:2e:21:0a:41:ed:57:78:be:2d:d8:d4: 43:b9:1c:4c:2f:52:39:44:fa:b6:1f:f6:81:9c:ff: 34:bb:05:df:98:ac:5c:a2:b3:d9:cd:5f:d6:4e:65: c0:32:f6:3f:64:2c:71:cb:e4:fe:57:af:72:91:69: 33:42:f8:27:28:8d:34:dc:e8:15:75:db:42:4f:09: 30:17:e0:08:2e:12:e7:8f:af:02:eb:dc:eb:85:3e: ae:9d:3d:c4:1a:8e:81:c4:0c:44:0c:b8:8a:36:38: a2:b4:67:ba:f9:a0:23:5f:7e:4a:c9:89:e6:57:16: e9:7b:9e:d0:19:03:89:64:22:da:e2:eb:be:cd:a1: 04:04:ec:ae:66:fb:f1:a5:6a:c8:b8:16:15:b7:50: b6:44:f0:63:ac:83:60:d7:f0:bb:53:2c:ec:cf:cf: 21:ab:5a:69:16:68:05:16:98:1e:ed:7f:a1:3c:6b: 0c:32:7b:7a:10:e8:5f:5f:72:7f:22:58:14:88:9d: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EA:3C:59:7A:51:8D:70:C2:9A:B6:6B:5E:34:68:31:90:AD:22:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/34e93da8-c07e-3b49-840f-e1aea560916a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl X509v3 Authority Key Identifier: keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer sbgp-ipAddrBlock: critical IPv4: 174.128.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:77:2e:ed:e4:b0:28:b7:9a:a5:7f:e0:ce:57:73:0d:1c:1a: 65:5a:50:32:0f:d4:e9:1a:01:14:4f:f6:99:aa:fb:7f:0f:be: 51:6d:dd:e6:66:b0:cb:56:c2:d0:20:93:1e:c8:aa:7b:93:c4: 57:a2:e7:56:ee:5c:97:74:b8:58:08:53:4c:b8:20:5e:0e:5c: 0d:6d:e2:13:9e:98:30:32:5b:fe:c5:8d:6e:20:e1:0d:32:72: bd:9f:10:6c:fb:6e:ea:74:fa:f0:d6:1a:d0:8a:87:2f:08:b8: aa:3c:53:5d:41:1b:77:60:62:9c:49:a3:f7:7f:e2:1c:dd:7e: 4e:31:c8:13:f2:fc:5a:1f:75:43:5a:f6:f6:3c:20:70:f6:a8: 9f:3d:8c:ec:ff:a2:ea:b6:ff:e9:f3:fa:ef:bc:fe:2b:53:48: e5:3a:57:b2:07:c0:43:e7:13:78:bb:98:26:20:3f:71:f1:82: 88:cd:51:71:db:00:57:30:95:f3:66:73:8d:7a:79:e2:b7:3b: 3d:6e:ff:bc:42:f8:d9:2a:ed:0d:4c:9d:df:5e:9d:b8:3f:01: dc:7f:e7:88:07:ba:c5:e3:36:48:19:1f:4b:d2:cc:be:5e:73: 0c:68:0f:19:4f:99:9c:a6:ef:5c:59:96:f3:53:32:e7:80:0e: bc:c5:26:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xG311c0y0Gxzj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2 YzYzMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk MjQ2MjZlM2YtYmNiYi00MTYyLTk0ZjQtZmM4ZjM5NTliN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojBjeiim5TT1mJqFDOiDNI4A13B1MuXITCdN lfPt3OSmqQocuHFbK2u3wvK9Cqh8f9EPEUFwIAj2uqeGPSP7LiEKQe1XeL4t2NRD uRxML1I5RPq2H/aBnP80uwXfmKxcorPZzV/WTmXAMvY/ZCxxy+T+V69ykWkzQvgn KI003OgVddtCTwkwF+AILhLnj68C69zrhT6unT3EGo6BxAxEDLiKNjiitGe6+aAj X35KyYnmVxbpe57QGQOJZCLa4uu+zaEEBOyuZvvxpWrIuBYVt1C2RPBjrINg1/C7 Uyzsz88hq1ppFmgFFpge7X+hPGsMMnt6EOhfX3J/IlgUiJ1qzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3qPFl6UY1wwpq2a140aDGQrSLbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5 YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvMzRlOTNkYTgtYzA3ZS0z YjQ5LTg0MGYtZTFhZWE1NjA5MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3 Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA13Lu3ksCi3mqV/4M5Xcw0cGmVaUDIP1OkaARRP9pmq+38PvlFt3eZm sMtWwtAgkx7IqnuTxFei51buXJd0uFgIU0y4IF4OXA1t4hOemDAyW/7FjW4g4Q0y cr2fEGz7bup0+vDWGtCKhy8IuKo8U11BG3dgYpxJo/d/4hzdfk4xyBPy/FofdUNa 9vY8IHD2qJ89jOz/ouq2/+nz+u+8/itTSOU6V7IHwEPnE3i7mCYgP3HxgojNUXHb AFcwlfNmc416eeK3Oz1u/7xC+Nkq7Q1Mnd9enbg/Adx/54gHusXjNkgZH0vSzL5e cwxoDxlPmZym71xZlvNTMueADrzFJmo= -----END CERTIFICATE-----Generated at Fri Jul 24 09:04:32 2026 by rpki-client