$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20055f0f-2b95-320b-ae9d-738a39ad46e6.roa File: 20055f0f-2b95-320b-ae9d-738a39ad46e6.roa (raw, json) Hash identifier: Nv2l4LW4Q76AEEfRaJNjLHEfsddP2FElO5qSzFpHwko= Subject key identifier: DC:4B:E3:79:50:FC:16:F8:4B:B6:5C:F6:6F:F6:65:57:C1:B2:F5:E0 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B3556EE3C3AB13369ACD1C600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20055f0f-2b95-320b-ae9d-738a39ad46e6.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 203 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ee:3c:3a:b1:33:69:ac:d1:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=ba70f988-d852-47be-bf9d-8cd7c306e1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:a3:14:3c:0d:50:2f:9f:08:a0:c4:4d:19: 4e:44:97:f9:2e:5e:38:7e:3c:13:02:4f:9a:f2:c4: e2:2f:f4:fd:63:31:4f:a9:76:c2:cc:c4:42:93:9d: 83:ae:b7:71:40:55:38:52:55:1e:fb:23:47:80:8f: 51:36:a8:eb:5b:1d:cc:92:01:de:83:82:a1:4a:79: 64:c0:b7:fc:a9:ab:62:0b:b2:62:1a:c3:9d:e7:48: 9c:a8:53:ff:e0:80:20:06:d5:84:26:d8:84:3f:82: ac:0e:2d:02:f9:d3:c7:12:bc:31:39:fe:51:19:85: b2:ae:dc:a9:bd:d8:65:c3:3f:4c:0c:ac:4c:44:55: b9:df:3e:90:ad:a8:20:5b:e6:9a:01:8d:20:82:5c: d2:fa:fc:2a:84:a9:a6:e4:c1:aa:79:b9:6e:bc:60: c3:87:26:0e:47:b7:31:0c:f2:19:6c:01:4c:da:59: 3b:c9:77:86:3b:da:e6:0a:48:43:92:76:a5:d4:ec: 59:0b:87:63:a7:99:e2:7b:25:60:9f:0d:f2:82:5a: 01:02:e2:bf:c5:f3:f1:c9:44:79:71:fc:59:33:a2: d4:00:4f:8d:b7:7a:18:33:92:8e:cc:b0:ba:c0:c3: 18:66:2a:2a:50:55:2a:85:78:fb:be:df:08:fc:0d: 2e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4B:E3:79:50:FC:16:F8:4B:B6:5C:F6:6F:F6:65:57:C1:B2:F5:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20055f0f-2b95-320b-ae9d-738a39ad46e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a8:88:19:a5:0f:b1:42:99:c3:5d:ac:7e:66:fb:a0:ca:81: 83:92:40:1f:f5:25:6f:cd:9c:e4:8c:e7:e7:52:c5:e4:dd:76: 37:b8:ed:67:74:82:9d:48:eb:9d:e7:c0:38:40:74:8f:38:01: 19:09:41:ca:e2:7d:f8:f9:31:d1:3d:36:8b:b7:a3:3d:45:6b: f5:11:e9:e3:5a:91:0e:5c:d4:4c:68:d6:b1:1f:39:49:5a:7d: c8:7d:5f:94:d9:65:da:3c:9c:8e:7a:5c:f6:45:35:08:67:aa: 40:1b:00:c4:73:41:de:c8:af:b1:22:c0:d2:f5:36:cc:98:13: ab:e6:2b:50:09:40:21:fe:a8:6c:1f:1e:74:00:1a:20:8c:11: 34:92:b9:04:f7:a4:0f:43:36:85:ca:d9:e6:18:bb:cd:00:6b: a6:43:26:aa:36:d5:44:27:28:3e:af:b4:30:f9:b4:5a:ca:c9: 0e:21:54:37:43:da:9d:ad:8c:8c:13:17:09:8e:c8:d9:92:73: 57:17:87:1b:d7:a7:bc:93:ae:23:cb:75:78:1f:90:ee:b6:ad: af:4f:4d:aa:d0:10:d1:4c:bf:c2:a0:41:6a:77:3b:ad:4d:fb: d1:be:e4:5f:83:bf:1f:67:72:13:22:30:93:e7:95:a7:df:d1: 09:7a:c0:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vu48OrEzaazRxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YmE3MGY5ODgtZDg1Mi00N2JlLWJmOWQtOGNkN2MzMDZlMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsyjFDwNUC+fCKDETRlORJf5Ll44fjwTAk+a 8sTiL/T9YzFPqXbCzMRCk52DrrdxQFU4UlUe+yNHgI9RNqjrWx3MkgHeg4KhSnlk wLf8qatiC7JiGsOd50icqFP/4IAgBtWEJtiEP4KsDi0C+dPHErwxOf5RGYWyrtyp vdhlwz9MDKxMRFW53z6QraggW+aaAY0gglzS+vwqhKmm5MGqebluvGDDhyYOR7cx DPIZbAFM2lk7yXeGO9rmCkhDknal1OxZC4djp5nieyVgnw3ygloBAuK/xfPxyUR5 cfxZM6LUAE+Nt3oYM5KOzLC6wMMYZioqUFUqhXj7vt8I/A0uHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxL43lQ/Bb4S7Zc9m/2ZVfBsvXgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjAwNTVmMGYtMmI5NS0z MjBiLWFlOWQtNzM4YTM5YWQ0NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeoiBmlD7FCmcNdrH5m+6DKgYOSQB/1JW/NnOSM5+dSxeTddje47Wd0 gp1I653nwDhAdI84ARkJQcriffj5MdE9Nou3oz1Fa/UR6eNakQ5c1Exo1rEfOUla fch9X5TZZdo8nI56XPZFNQhnqkAbAMRzQd7Ir7EiwNL1NsyYE6vmK1AJQCH+qGwf HnQAGiCMETSSuQT3pA9DNoXK2eYYu80Aa6ZDJqo21UQnKD6vtDD5tFrKyQ4hVDdD 2p2tjIwTFwmOyNmSc1cXhxvXp7yTriPLdXgfkO62ra9PTarQENFMv8KgQWp3O61N +9G+5F+Dvx9nchMiMJPnlaff0Ql6wCo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:52:07 2025 by rpki-client