$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa File: 25c05be1-22a2-319c-ab38-889cdebd39e8.roa (raw, json) Hash identifier: +BqOaeCZ3OBNu/k3bgo5so9p5cGPo/cNQhdFtCiTn6k= Subject key identifier: A0:7E:19:9B:63:F8:E5:32:AC:C8:1F:B7:1B:88:86:2D:EB:E9:52:8A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F093CF11DD14AADE0246484A0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 20.137.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f1:1d:d1:4a:ad:e0:24:64:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=eb159d1b-7483-43e0-90ce-2d610d61410c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:31:9b:35:5e:63:cd:d7:72:33:36:d5:37: d3:7e:56:e6:6a:db:db:c0:a9:a1:d5:72:79:00:43: de:dc:31:02:58:99:72:79:16:d6:b8:5c:51:0a:73: b0:ed:ef:63:a5:fe:4e:d2:75:51:7d:c3:e1:de:c0: 67:c0:28:4a:d2:1e:54:d7:3e:8b:a6:de:03:2e:33: f7:bc:08:0b:15:a1:31:a5:f0:84:8d:a0:21:aa:f0: db:6b:a5:09:56:da:92:81:40:78:81:bf:08:cf:7f: 73:0b:f9:0e:2a:e2:82:09:00:5f:20:93:9e:a0:d8: ba:b7:b4:85:e4:10:28:99:36:ad:98:94:b2:41:c7: 0b:bc:c6:1b:c0:8c:5f:42:7d:41:46:30:f6:f3:39: aa:03:25:22:5e:d5:57:0f:4c:d6:4b:d7:03:0b:15: 91:5c:6d:80:5f:69:e3:51:85:44:21:3c:b7:1b:7a: 74:ba:10:53:d2:12:3a:9c:52:15:fe:07:3a:c3:2a: fa:c2:8c:d5:46:48:97:08:dd:e4:0a:92:de:24:da: 21:8f:0d:34:a3:62:d3:21:ca:32:d8:be:93:1f:b7: 35:4b:a4:82:b5:3e:e5:fa:50:ad:4b:f1:c6:e6:6a: f7:f5:c4:56:c0:d1:53:cd:41:9b:66:6c:19:48:fd: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7E:19:9B:63:F8:E5:32:AC:C8:1F:B7:1B:88:86:2D:EB:E9:52:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d8:bc:90:51:44:4f:e1:31:18:90:d7:6a:90:1f:da:76:87: f4:c2:50:66:e8:db:b6:f0:3d:fa:53:72:23:f5:f8:23:24:cb: 23:cf:49:de:29:17:a4:71:de:b6:31:25:78:5b:46:4c:2d:dc: d5:7f:92:be:e2:a1:96:81:62:fb:29:ac:60:40:98:00:89:81: ea:09:8b:0d:b3:7b:7a:cc:c5:43:19:bb:d8:3c:f2:c3:80:77: c0:de:c4:24:03:ef:bd:a1:e3:04:97:2a:5b:fa:de:59:81:7a: 34:e8:b7:56:f4:b2:c6:00:dc:98:ea:df:2a:7b:f4:a3:22:37: 5a:93:a3:ec:9a:a8:45:d2:9b:0b:b4:82:9a:39:b1:81:b6:b4: b8:80:1f:af:2e:0f:aa:b3:cc:f2:6c:9d:6b:d7:f4:e5:f8:7c: be:b3:61:93:db:dd:59:92:db:61:cf:bc:7f:ad:f7:78:ee:34: ca:9e:96:e6:82:7a:86:43:5a:e9:74:4d:3e:8b:33:51:4e:39: ae:ab:8c:60:57:36:e4:9d:fe:4f:d0:ab:b4:b2:22:fb:1b:2b: 70:19:86:63:f3:ae:71:0a:88:92:44:73:c9:bf:96:74:11:22: 76:7e:e4:47:c9:85:7c:9e:b2:26:08:10:7b:be:3d:7e:b9:69: 76:83:9f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPEd0Uqt4CRkhKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZWIxNTlkMWItNzQ4My00M2UwLTkwY2UtMmQ2MTBkNjE0MTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqcxmzVeY83XcjM21TfTflbmatvbwKmh1XJ5 AEPe3DECWJlyeRbWuFxRCnOw7e9jpf5O0nVRfcPh3sBnwChK0h5U1z6Lpt4DLjP3 vAgLFaExpfCEjaAhqvDba6UJVtqSgUB4gb8Iz39zC/kOKuKCCQBfIJOeoNi6t7SF 5BAomTatmJSyQccLvMYbwIxfQn1BRjD28zmqAyUiXtVXD0zWS9cDCxWRXG2AX2nj UYVEITy3G3p0uhBT0hI6nFIV/gc6wyr6wozVRkiXCN3kCpLeJNohjw00o2LTIcoy 2L6TH7c1S6SCtT7l+lCtS/HG5mr39cRWwNFTzUGbZmwZSP2DcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB+GZtj+OUyrMgftxuIhi3r6VKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjVjMDViZTEtMjJhMi0z MTljLWFiMzgtODg5Y2RlYmQzOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXYvJBRRE/hMRiQ12qQH9p2h/TCUGbo27bwPfpTciP1+CMkyyPPSd4p F6Rx3rYxJXhbRkwt3NV/kr7ioZaBYvsprGBAmACJgeoJiw2ze3rMxUMZu9g88sOA d8DexCQD772h4wSXKlv63lmBejTot1b0ssYA3Jjq3yp79KMiN1qTo+yaqEXSmwu0 gpo5sYG2tLiAH68uD6qzzPJsnWvX9OX4fL6zYZPb3VmS22HPvH+t93juNMqeluaC eoZDWul0TT6LM1FOOa6rjGBXNuSd/k/Qq7SyIvsbK3AZhmPzrnEKiJJEc8m/lnQR InZ+5EfJhXyesiYIEHu+PX65aXaDn2Y= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:46 2026 by rpki-client