$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa File: a25da213-0d7e-3813-aab1-7137753f8c5f.roa (raw, json) Hash identifier: 0o897+2dTqmDdLycdBspiDxiJC7cT1ZK7ptFVyYa+SQ= Subject key identifier: D9:1D:14:D1:3D:E7:6E:4E:95:18:66:20:B6:B8:4F:57:C4:84:9A:79 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CAE572FE95D624D9EF036F780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 203 IP address blocks: 20.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:2f:e9:5d:62:4d:9e:f0:36:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7011a2a7-88e8-4e58-86c7-7d56c6f41bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:b2:ff:0a:9c:8d:e2:e4:08:17:ea:1a:c4: 7f:e6:2d:92:ce:01:84:25:39:c7:4e:cb:0f:d8:d6: c4:4d:20:cf:d1:63:6d:c2:5a:07:a8:45:ee:f4:42: d8:74:06:f3:b4:ab:52:b3:51:65:57:e2:1c:7b:0b: 84:a2:8f:03:50:69:26:74:94:5a:13:a6:5b:c7:7f: 03:be:59:11:04:ad:e5:11:7a:fa:fc:65:4f:32:45: 59:f7:23:ff:ca:b8:ff:1d:f4:d6:c9:83:1e:75:a5: 0b:34:69:c3:7c:f6:79:05:38:4e:f2:9e:fc:7b:0c: 40:25:2a:11:88:bf:4a:e6:e8:4c:f4:71:cc:20:60: 67:da:8e:7e:ab:7b:f7:81:c1:4f:9e:74:cb:88:e4: 31:c3:dd:35:00:0c:e0:4a:54:36:cf:a3:da:91:6a: 9c:3c:74:59:e7:f2:8b:e5:b0:be:af:6c:1f:1e:65: 85:d2:eb:10:a8:b9:5e:51:0e:45:23:ff:5b:f7:8f: d4:d4:74:a0:47:5c:23:cb:89:14:55:54:61:20:fc: b1:d0:16:a5:20:e0:c5:43:8f:52:91:c0:4a:dd:8d: 6f:f1:ee:ff:1f:07:20:ba:c0:e5:87:63:8f:9a:1b: 99:3d:2a:fa:1d:b9:de:6b:7c:66:b0:14:04:4e:db: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1D:14:D1:3D:E7:6E:4E:95:18:66:20:B6:B8:4F:57:C4:84:9A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3c:f0:2b:27:4e:5c:e0:eb:f1:5b:48:cf:4a:d8:62:e2:ec: eb:85:b4:4f:c1:7a:35:6a:eb:94:eb:9c:6a:89:c0:bd:df:1e: 59:03:c7:10:c9:5a:34:51:dd:fc:92:fe:b3:a5:71:d6:c4:00: a2:6e:fa:0a:44:51:77:33:e1:d0:13:94:56:39:48:00:05:75: 5f:0c:0a:02:3d:67:e1:db:af:b8:3a:90:b4:81:07:ee:3a:94: ec:47:fa:ba:07:41:68:d5:e2:3b:6d:a0:6b:62:87:c9:85:a0: 7d:21:bd:a1:c4:11:c1:e2:b7:fd:d8:65:5a:f1:3c:a4:e3:98: 6d:a7:c5:fc:ae:21:2e:3c:f1:64:df:38:16:20:be:72:92:37: ce:22:28:d1:45:9c:b7:db:09:8b:63:68:18:90:0f:a4:28:47: 80:af:37:31:97:09:08:4a:bb:3b:bc:a1:90:2c:34:22:ed:68: 6a:4d:46:a3:ab:1c:81:48:95:ff:7a:37:b9:8b:b6:3a:eb:02: e8:d6:17:74:71:b8:4f:97:ab:2c:f0:cf:7f:e6:48:ab:63:c1: 9a:f9:ae:54:93:db:d3:31:ac:19:ae:d6:a4:c3:e4:62:48:44: df:c7:7f:20:3b:4c:23:cf:cc:b6:4e:17:91:41:57:71:ba:18: c8:06:98:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVy/pXWJNnvA294AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzAxMWEyYTctODhlOC00ZTU4LTg2YzctN2Q1NmM2ZjQxYmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Sy/wqcjeLkCBfqGsR/5i2SzgGEJTnHTssP 2NbETSDP0WNtwloHqEXu9ELYdAbztKtSs1FlV+IcewuEoo8DUGkmdJRaE6Zbx38D vlkRBK3lEXr6/GVPMkVZ9yP/yrj/HfTWyYMedaULNGnDfPZ5BThO8p78ewxAJSoR iL9K5uhM9HHMIGBn2o5+q3v3gcFPnnTLiOQxw901AAzgSlQ2z6PakWqcPHRZ5/KL 5bC+r2wfHmWF0usQqLleUQ5FI/9b94/U1HSgR1wjy4kUVVRhIPyx0BalIODFQ49S kcBK3Y1v8e7/HwcgusDlh2OPmhuZPSr6Hbnea3xmsBQETttyvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkdFNE9525OlRhmILa4T1fEhJp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTI1ZGEyMTMtMGQ3ZS0z ODEzLWFhYjEtNzEzNzc1M2Y4YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFInYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc88CsnTlzg6/FbSM9K2GLi7OuFtE/BejVq65TrnGqJwL3fHlkDxxDJ WjRR3fyS/rOlcdbEAKJu+gpEUXcz4dATlFY5SAAFdV8MCgI9Z+Hbr7g6kLSBB+46 lOxH+roHQWjV4jttoGtih8mFoH0hvaHEEcHit/3YZVrxPKTjmG2nxfyuIS488WTf OBYgvnKSN84iKNFFnLfbCYtjaBiQD6QoR4CvNzGXCQhKuzu8oZAsNCLtaGpNRqOr HIFIlf96N7mLtjrrAujWF3RxuE+Xqyzwz3/mSKtjwZr5rlST29MxrBmu1qTD5GJI RN/HfyA7TCPPzLZOF5FBV3G6GMgGmOY= -----END CERTIFICATE-----Generated at Sun Mar 1 21:14:38 2026 by rpki-client