$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa File: a25da213-0d7e-3813-aab1-7137753f8c5f.roa (raw, json) Hash identifier: rR1WKDLsK4+Ur2tOwnS/fwNJq5T986UeTjOO/LOqlFE= Subject key identifier: 89:55:FA:A6:E2:73:EA:D0:01:94:DD:B7:42:B7:9E:A6:32:07:A0:99 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F119D0D2BC1291F1B0F221100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 20.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:0d:2b:c1:29:1f:1b:0f:22:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=a96b29d7-3575-4370-b1c5-b8cee93fd96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:94:9d:76:95:6d:ee:68:f5:5e:b8:af:28:bf: 48:a3:68:e7:c8:79:bd:fb:8e:f8:15:6d:b3:e4:cf: d1:99:e4:f6:a3:3e:b6:3b:1d:09:0b:54:03:d8:b1: 70:68:7c:ea:10:3a:a0:3d:ab:fd:6e:c0:70:20:5a: 0e:c2:1d:de:52:ab:ff:22:8a:b5:b9:b2:a3:8f:8d: cb:86:c4:f6:9f:19:6d:27:2c:7f:ed:d3:44:8a:7a: ea:aa:54:00:b8:f9:29:e0:98:44:85:d5:5c:00:33: 57:c5:52:9b:f4:af:f9:16:c8:3a:94:1d:8b:dd:56: 52:70:2d:c0:0d:2c:e2:c2:75:26:a2:5e:aa:d2:7b: 27:72:e2:23:5c:e7:86:6d:4e:2b:ca:ec:7a:74:65: d2:b4:fc:ab:1f:f1:c7:0b:00:3b:1e:e1:27:19:8e: f5:cb:15:fc:f7:2e:ee:19:6f:4f:73:7b:83:6a:6d: eb:49:36:38:6a:4e:ed:bf:6e:7e:40:b2:5a:a4:05: 7c:ce:e4:19:48:7c:38:ed:f7:54:50:e1:4f:d9:75: 81:d9:02:1e:cf:2b:bd:8f:30:d5:c8:5d:53:fb:00: 9c:8a:8d:40:dd:65:b7:2c:29:fb:17:80:4c:80:64: 70:aa:ba:b8:cb:89:f6:47:5f:4b:58:ae:31:f4:8e: 40:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:55:FA:A6:E2:73:EA:D0:01:94:DD:B7:42:B7:9E:A6:32:07:A0:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bb:f4:f2:09:b9:c4:93:d9:a5:c3:c2:49:da:3d:9b:60:9e: 3b:dd:c9:26:39:f3:ba:70:0e:28:a5:52:59:0c:5e:34:9d:ab: f8:8c:b2:0d:3f:c4:15:94:3b:df:1a:81:96:27:78:2b:b0:58: 7d:59:61:54:cd:05:33:32:df:c0:1e:05:fb:1b:3d:a6:9c:72: a1:35:d3:fe:23:94:a8:65:d4:f1:98:2e:36:41:c5:81:39:c9: ab:c1:5e:b5:ee:2b:9a:af:9e:05:0d:c3:c8:6d:35:67:da:ee: 61:6e:61:70:1f:8e:84:c9:c0:9b:c9:25:fb:c0:fb:05:24:1d: 85:58:c4:42:29:11:51:b6:2d:28:57:28:77:76:d4:76:4d:ce: cc:39:62:04:f6:48:4a:2e:d9:bc:3a:50:8d:6f:63:82:28:96: 9e:1a:8c:47:a6:8a:d6:7b:88:9b:60:a0:b1:a4:87:67:85:d7: 13:01:d9:28:a6:67:04:df:3d:79:cd:e1:d9:31:5c:ba:70:08: 3f:6d:f0:b0:a2:8a:db:17:d6:98:3b:47:cb:33:8e:b0:51:bc: c7:91:2b:bf:15:ec:90:09:99:fc:45:1f:4d:43:c8:e8:65:66: 7d:14:a0:b0:87:0e:b4:8c:6e:d6:4f:b5:26:ea:c8:bc:94:1e: d4:f5:6d:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQ0rwSkfGw8iEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YTk2YjI5ZDctMzU3NS00MzcwLWIxYzUtYjhjZWU5M2ZkOTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5SddpVt7mj1XrivKL9Io2jnyHm9+474FW2z 5M/RmeT2oz62Ox0JC1QD2LFwaHzqEDqgPav9bsBwIFoOwh3eUqv/Ioq1ubKjj43L hsT2nxltJyx/7dNEinrqqlQAuPkp4JhEhdVcADNXxVKb9K/5Fsg6lB2L3VZScC3A DSziwnUmol6q0nsncuIjXOeGbU4ryux6dGXStPyrH/HHCwA7HuEnGY71yxX89y7u GW9Pc3uDam3rSTY4ak7tv25+QLJapAV8zuQZSHw47fdUUOFP2XWB2QIezyu9jzDV yF1T+wCcio1A3WW3LCn7F4BMgGRwqrq4y4n2R19LWK4x9I5AzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlV+qbic+rQAZTdt0K3nqYyB6CZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTI1ZGEyMTMtMGQ3ZS0z ODEzLWFhYjEtNzEzNzc1M2Y4YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFInYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu79PIJucST2aXDwknaPZtgnjvdySY587pwDiilUlkMXjSdq/iMsg0/ xBWUO98agZYneCuwWH1ZYVTNBTMy38AeBfsbPaaccqE10/4jlKhl1PGYLjZBxYE5 yavBXrXuK5qvngUNw8htNWfa7mFuYXAfjoTJwJvJJfvA+wUkHYVYxEIpEVG2LShX KHd21HZNzsw5YgT2SEou2bw6UI1vY4Iolp4ajEemitZ7iJtgoLGkh2eF1xMB2Sim ZwTfPXnN4dkxXLpwCD9t8LCiitsX1pg7R8szjrBRvMeRK78V7JAJmfxFH01DyOhl Zn0UoLCHDrSMbtZPtSbqyLyUHtT1bR8= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:34 2026 by rpki-client