$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa File: a25da213-0d7e-3813-aab1-7137753f8c5f.roa (raw, json) Hash identifier: VK0F9QhWwf0VbKWFFYtt4MfU41qO861peMD2eMMR0TQ= Subject key identifier: 0B:AF:B7:53:C7:DE:FD:F9:D6:90:C2:8F:F1:2C:4A:46:39:44:24:8F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584E6F3A3E83A47334DB13719980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 203 IP address blocks: 20.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:3e:83:a4:73:34:db:13:71:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=44cf6014-2abe-414c-9a3c-b5d53f315a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:18:30:41:32:b7:c3:6e:36:85:a4:b9:d2: 3c:65:2f:40:29:5f:42:f7:3c:22:99:7e:3d:32:29: 4d:fd:0b:a7:83:4d:0c:b8:f7:68:89:f9:39:fd:37: 0a:e4:5b:17:56:4f:b6:f1:05:d8:69:9d:ea:bb:9c: 97:e8:e0:c0:9c:80:55:09:a0:f7:c7:69:66:bc:0a: 18:e5:7e:ff:e2:ef:2f:6d:e2:65:e4:47:e4:83:3f: 95:78:48:02:c8:31:18:67:ee:b5:a0:63:dd:bb:4b: fe:bc:64:6c:78:82:f2:45:c4:67:ee:57:19:90:74: 43:03:ec:6b:3f:45:d7:a8:2f:08:95:0e:82:f1:50: f8:99:ca:78:4d:fa:bc:ff:6b:f8:8b:76:d7:60:09: ae:bc:90:d5:a7:1c:a1:2b:2e:77:5c:4e:ca:4d:66: 42:76:6e:8c:2a:20:5b:a7:39:d4:e4:89:45:ff:ca: 99:db:a2:0f:cc:26:6f:30:f7:8a:e7:9d:99:5f:8e: 25:01:a6:14:60:bc:d1:2a:e1:5a:80:b6:9e:67:75: 9c:76:d2:2f:5d:c6:e0:9e:3c:14:48:d7:99:6c:9b: e2:fb:55:c8:db:65:9f:3e:92:68:f5:87:51:71:7f: bb:4b:09:f5:c3:b7:55:32:60:92:53:dc:65:08:f4: 24:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AF:B7:53:C7:DE:FD:F9:D6:90:C2:8F:F1:2C:4A:46:39:44:24:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ce:41:9b:b2:ae:e3:e0:90:46:df:77:01:06:03:83:da:a0: ea:e4:dd:86:f9:2a:94:72:97:06:b1:01:4a:34:f6:f1:e1:9e: ae:bc:d4:13:25:6c:9b:89:f1:7a:17:f1:4e:ec:e7:3a:4b:8b: ed:8d:3f:13:6c:16:35:23:17:13:e1:24:a4:ab:1c:ec:20:55: 89:90:8b:0f:6e:f1:66:f1:a6:9b:2b:b0:8e:06:b6:36:44:84: 8f:7b:79:a8:85:a3:70:41:0f:d8:d6:aa:b6:dd:18:de:71:74: 51:7b:be:75:d7:b3:ef:34:c6:b5:b7:77:cd:1f:b6:36:bc:af: 9b:08:75:9d:81:8f:31:c9:7f:f5:96:a1:55:cb:1d:68:80:40: 1f:0a:77:51:56:49:d2:a7:20:8d:6e:c4:25:42:c8:b8:99:5e: da:d1:95:e3:f1:2e:64:ca:39:21:5b:09:b8:20:87:97:ff:e2: 41:fc:f3:c2:23:19:f3:50:c0:e7:82:6f:04:1e:33:31:75:a7: 9f:13:cc:8d:5f:38:16:09:83:03:2c:70:88:d0:75:a9:98:47: b0:f4:4b:60:39:14:cd:3e:f2:b9:a1:d1:c7:38:1d:cb:a0:39: 74:cd:ed:62:b9:af:f6:9b:23:f5:d0:4b:09:7e:21:11:10:77: d8:0b:d7:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOj6DpHM02xNxmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NDRjZjYwMTQtMmFiZS00MTRjLTlhM2MtYjVkNTNmMzE1YTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFYYMEEyt8NuNoWkudI8ZS9AKV9C9zwimX49 MilN/Qung00MuPdoifk5/TcK5FsXVk+28QXYaZ3qu5yX6ODAnIBVCaD3x2lmvAoY 5X7/4u8vbeJl5Efkgz+VeEgCyDEYZ+61oGPdu0v+vGRseILyRcRn7lcZkHRDA+xr P0XXqC8IlQ6C8VD4mcp4Tfq8/2v4i3bXYAmuvJDVpxyhKy53XE7KTWZCdm6MKiBb pznU5IlF/8qZ26IPzCZvMPeK552ZX44lAaYUYLzRKuFagLaeZ3WcdtIvXcbgnjwU SNeZbJvi+1XI22WfPpJo9YdRcX+7Swn1w7dVMmCSU9xlCPQk1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuvt1PH3v351pDCj/EsSkY5RCSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTI1ZGEyMTMtMGQ3ZS0z ODEzLWFhYjEtNzEzNzc1M2Y4YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFInYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXOQZuyruPgkEbfdwEGA4PaoOrk3Yb5KpRylwaxAUo09vHhnq681BMl bJuJ8XoX8U7s5zpLi+2NPxNsFjUjFxPhJKSrHOwgVYmQiw9u8WbxppsrsI4GtjZE hI97eaiFo3BBD9jWqrbdGN5xdFF7vnXXs+80xrW3d80ftja8r5sIdZ2BjzHJf/WW oVXLHWiAQB8Kd1FWSdKnII1uxCVCyLiZXtrRlePxLmTKOSFbCbggh5f/4kH888Ij GfNQwOeCbwQeMzF1p58TzI1fOBYJgwMscIjQdamYR7D0S2A5FM0+8rmh0cc4Hcug OXTN7WK5r/abI/XQSwl+IREQd9gL16E= -----END CERTIFICATE-----Generated at Fri Jul 24 22:16:46 2026 by rpki-client