$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa File: 20b86aff-f738-359b-bf7f-a923168ca468.roa (raw, json) Hash identifier: cD80YzNzhYVP4sOt/WIz73bLSNaYiZkgTJ7/B55LBoI= Subject key identifier: 69:D0:61:82:F1:6A:98:93:C5:31:39:54:07:15:00:3A:C7:A5:1B:48 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B3556EE139466EE9AE6592B80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ee:13:94:66:ee:9a:e6:59:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=50572773-0443-443d-bcaa-bae039d26ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:fc:67:1e:b6:2d:1b:ab:63:db:36:46:53: 63:e9:d2:89:2f:0d:80:bd:7e:17:f7:75:11:c0:de: 55:24:f5:ac:ae:a7:d3:a3:77:b6:28:15:94:f3:2f: 22:33:f6:8f:1c:1c:51:a8:f0:dc:94:b1:d1:d2:42: ec:fb:b3:d7:08:3f:f7:79:a5:8f:36:e0:6c:de:ac: e1:ff:ce:85:b7:c0:ac:ee:2a:c9:34:62:12:5e:53: 85:e0:c5:10:aa:af:d2:3c:22:ff:95:70:03:d9:1d: 42:7f:fa:60:33:12:c9:81:e8:02:76:74:48:d4:98: 47:58:96:55:58:e8:0e:1c:46:17:c6:4e:f6:15:0b: ce:47:8d:cc:78:f4:4a:84:b5:37:b7:70:63:00:39: 10:77:c4:fc:2c:a1:5d:48:91:5e:97:bc:42:d5:73: 69:5c:34:90:2e:7e:47:06:e9:eb:69:dd:db:83:51: 5d:e9:63:78:67:0f:e2:a7:78:f9:f1:9a:0f:5f:f3: 26:1e:a1:47:a5:cb:52:83:92:78:12:c3:b2:6c:be: 99:25:71:f1:bc:7e:c1:2e:58:bb:8e:34:1a:77:5b: 2b:85:a3:07:de:18:80:25:a7:16:60:08:fb:a2:55: c5:6b:fd:e9:16:05:34:74:fc:de:b3:bc:1b:78:0d: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D0:61:82:F1:6A:98:93:C5:31:39:54:07:15:00:3A:C7:A5:1B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ba:33:89:16:90:32:5d:29:8b:f1:e1:4c:53:03:04:04:55: 26:f8:5c:9f:7f:8b:6b:58:65:83:48:68:0d:a9:0c:41:d2:93: 6f:d4:29:33:b7:11:a0:f5:fe:b0:ee:b2:68:77:81:b9:60:5f: 54:56:5e:af:34:a1:b3:74:8e:ec:20:92:f2:dc:ab:42:ff:67: d8:f9:55:74:6d:4d:cd:ee:70:27:dc:d8:a3:f5:72:04:92:f6: 80:c7:de:2d:ed:b5:ed:1f:7d:6e:ee:68:4b:14:78:b0:ec:47: 5f:55:9d:b3:84:56:e8:d6:30:93:01:81:f7:cd:c3:30:c2:4b: 3c:9a:2b:4b:ab:a3:57:89:f8:8d:bb:96:02:c3:48:73:0e:68: d8:05:13:e0:aa:cb:19:bb:f4:1c:ca:d4:ba:63:d8:ed:e9:2c: 04:c5:5d:50:0d:84:29:fd:a9:90:e1:53:5e:80:5a:10:31:1b: 9c:11:b2:8a:c3:c8:4a:f6:ff:e2:81:a4:2c:c5:61:a4:21:c1: 6a:f6:45:17:92:d1:94:b7:ff:d6:d4:6d:df:88:4e:99:f1:4e: 91:71:be:44:59:65:e4:1d:39:fa:7f:6e:66:42:a3:0f:8e:23: fc:02:1a:1e:10:ff:ce:52:fa:15:19:86:f7:2e:f4:a8:37:2f: 1f:15:e8:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vu4TlGbumuZZK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NTA1NzI3NzMtMDQ0My00NDNkLWJjYWEtYmFlMDM5ZDI2ZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3L8Zx62LRurY9s2RlNj6dKJLw2AvX4X93UR wN5VJPWsrqfTo3e2KBWU8y8iM/aPHBxRqPDclLHR0kLs+7PXCD/3eaWPNuBs3qzh /86Ft8Cs7irJNGISXlOF4MUQqq/SPCL/lXAD2R1Cf/pgMxLJgegCdnRI1JhHWJZV WOgOHEYXxk72FQvOR43MePRKhLU3t3BjADkQd8T8LKFdSJFel7xC1XNpXDSQLn5H Bunrad3bg1Fd6WN4Zw/ip3j58ZoPX/MmHqFHpctSg5J4EsOybL6ZJXHxvH7BLli7 jjQad1srhaMH3hiAJacWYAj7olXFa/3pFgU0dPzes7wbeA23pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnQYYLxapiTxTE5VAcVADrHpRtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjBiODZhZmYtZjczOC0z NTliLWJmN2YtYTkyMzE2OGNhNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK6M4kWkDJdKYvx4UxTAwQEVSb4XJ9/i2tYZYNIaA2pDEHSk2/UKTO3 EaD1/rDusmh3gblgX1RWXq80obN0juwgkvLcq0L/Z9j5VXRtTc3ucCfc2KP1cgSS 9oDH3i3tte0ffW7uaEsUeLDsR19VnbOEVujWMJMBgffNwzDCSzyaK0uro1eJ+I27 lgLDSHMOaNgFE+Cqyxm79BzK1Lpj2O3pLATFXVANhCn9qZDhU16AWhAxG5wRsorD yEr2/+KBpCzFYaQhwWr2RReS0ZS3/9bUbd+ITpnxTpFxvkRZZeQdOfp/bmZCow+O I/wCGh4Q/85S+hUZhvcu9Kg3Lx8V6Ao= -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:18 2025 by rpki-client