$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa File: 25c05be1-22a2-319c-ab38-889cdebd39e8.roa (raw, json) Hash identifier: GFqw4Xhh7+sfe8uk3fzNFl8sreQdZsLz/sLbbSCI+R4= Subject key identifier: 60:B2:E5:AD:75:B4:5B:2C:F8:F7:6E:A8:32:84:64:63:15:8B:38:23 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D86955CED3A4CAC009DAF0180 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 203 IP address blocks: 20.137.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:5c:ed:3a:4c:ac:00:9d:af:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=e2714ff9-0c19-4a3b-ab47-0100c5038b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0e:b8:5e:48:33:f1:9a:af:1c:40:0c:3f:46: b1:22:2c:61:0a:ce:61:16:2a:90:ee:ee:96:78:2d: ae:e0:cd:13:a4:7a:1e:b6:9a:1b:11:c3:07:4e:58: 4d:77:f6:f0:10:17:1d:7f:d3:a4:9d:b0:ff:c2:7c: 90:98:60:e5:de:ae:32:81:c1:a7:61:d9:62:f9:81: 29:92:37:8b:40:26:74:11:21:d1:47:08:42:ae:6f: 0c:5c:32:da:97:a3:eb:03:15:cc:fc:58:32:91:d7: 5d:35:ef:9b:cb:2b:a9:b7:01:bb:0c:fb:df:07:53: a8:44:49:a3:f3:c3:47:45:a0:05:ae:fa:4b:fb:bb: a0:a2:4c:0f:86:0c:5e:a8:31:d2:90:b0:5c:80:3d: 21:52:50:ff:4f:54:cd:b9:7c:96:1a:fc:98:f3:53: 80:cc:3e:1b:64:5b:c2:29:5f:32:48:c3:e1:3b:44: 6d:4d:8b:f3:8a:70:f1:60:4b:49:ca:6f:0f:92:75: cb:e8:c4:f9:fe:00:1b:0f:cc:f2:50:72:b9:87:1f: 54:84:ad:61:a2:8d:70:6f:a5:24:45:37:0c:fe:4a: fd:53:be:a5:e9:45:b0:88:c4:25:28:49:22:48:8d: 02:10:c6:0a:bb:e0:d6:2b:7e:21:ac:9b:1c:c0:df: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B2:E5:AD:75:B4:5B:2C:F8:F7:6E:A8:32:84:64:63:15:8B:38:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:14:12:cc:22:da:e0:c3:4c:d0:21:2e:7d:15:35:7b:cb:2e: 49:69:fd:14:6b:52:09:8d:b7:04:35:b5:6d:f2:15:2a:98:0f: e0:bd:be:63:20:9e:d4:9c:3d:93:4c:e5:26:cd:65:43:98:df: 80:c2:40:37:78:66:c2:da:33:2f:d5:14:fe:15:bb:7a:dd:15: af:58:80:08:11:1d:3d:89:53:f7:8d:0d:5e:33:5b:77:29:2c: bb:3a:1c:32:9e:86:7b:de:a1:77:2b:bc:a3:33:ec:a7:19:c2: 91:81:02:8a:08:83:13:25:2a:d6:19:32:f6:34:00:02:6e:35: 54:b5:4f:70:f5:bf:87:b8:d9:3c:9c:b4:cd:cc:ef:ff:7f:2f: f5:c0:a1:50:5d:f0:ba:2b:4e:fa:e6:12:f3:58:05:15:7d:4a: b8:a7:42:f2:68:4a:37:a4:1a:24:5a:bb:8a:21:04:b2:88:23: b3:42:c7:b0:2c:af:88:89:10:99:98:e9:c3:d4:be:98:51:ff: ca:1d:5a:63:e3:86:55:97:5e:87:77:61:70:9b:46:04:b0:05: b1:f2:8d:35:10:5a:87:cc:94:9a:41:cb:2c:88:f9:a8:5e:f7: 3f:98:04:55:df:7b:5c:07:48:cf:8a:27:fc:ea:b2:6c:ed:a6: dd:4b:b7:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVztOkysAJ2vAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZTI3MTRmZjktMGMxOS00YTNiLWFiNDctMDEwMGM1MDM4YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw64Xkgz8ZqvHEAMP0axIixhCs5hFiqQ7u6W eC2u4M0TpHoetpobEcMHTlhNd/bwEBcdf9OknbD/wnyQmGDl3q4ygcGnYdli+YEp kjeLQCZ0ESHRRwhCrm8MXDLal6PrAxXM/FgykdddNe+byyuptwG7DPvfB1OoREmj 88NHRaAFrvpL+7ugokwPhgxeqDHSkLBcgD0hUlD/T1TNuXyWGvyY81OAzD4bZFvC KV8ySMPhO0RtTYvzinDxYEtJym8PknXL6MT5/gAbD8zyUHK5hx9UhK1hoo1wb6Uk RTcM/kr9U76l6UWwiMQlKEkiSI0CEMYKu+DWK34hrJscwN9sewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCy5a11tFss+PduqDKEZGMVizgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjVjMDViZTEtMjJhMi0z MTljLWFiMzgtODg5Y2RlYmQzOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkUEswi2uDDTNAhLn0VNXvLLklp/RRrUgmNtwQ1tW3yFSqYD+C9vmMg ntScPZNM5SbNZUOY34DCQDd4ZsLaMy/VFP4Vu3rdFa9YgAgRHT2JU/eNDV4zW3cp LLs6HDKehnveoXcrvKMz7KcZwpGBAooIgxMlKtYZMvY0AAJuNVS1T3D1v4e42Tyc tM3M7/9/L/XAoVBd8LorTvrmEvNYBRV9SrinQvJoSjekGiRau4ohBLKII7NCx7As r4iJEJmY6cPUvphR/8odWmPjhlWXXod3YXCbRgSwBbHyjTUQWofMlJpByyyI+ahe 9z+YBFXfe1wHSM+KJ/zqsmztpt1Lt1M= -----END CERTIFICATE-----Generated at Fri Apr 17 20:42:59 2026 by rpki-client