$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa File: 2358e127-b9cd-321b-a2ed-09882df26c20.roa (raw, json) Hash identifier: nz2vwCrHzk2b4gAxt7AdnDmbwW3trvutirMYNA2Y+cY= Subject key identifier: 5E:6F:DC:56:87:A0:2C:CB:D2:79:C4:51:10:C3:3F:BF:41:67:57:3C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B3556EE28B9765764B8A5E000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 202 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ee:28:b9:76:57:64:b8:a5:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=e42b6a7f-9d5c-4bed-b681-083e49853b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:4c:52:e4:df:83:d8:76:97:8b:f1:07:10: bb:d3:85:df:ea:90:24:f4:59:83:b3:79:c8:cd:9b: 1f:a8:90:46:ed:1c:a8:3d:e3:31:d3:a4:ed:a3:2d: 61:99:78:bc:a4:c7:89:3c:98:71:69:d9:0c:9c:6e: cb:96:6e:d0:8f:02:3c:a1:2e:77:e7:b2:93:b8:ce: 2a:4c:98:73:3f:15:fc:fc:2d:8d:4d:94:ce:c4:08: 5f:00:1d:51:0b:04:46:e8:a4:fe:59:b4:9a:ce:aa: be:00:be:6a:bf:34:b5:9b:06:89:09:e5:7b:6f:9d: 18:4a:e3:af:a0:3f:87:9e:34:c4:af:a2:26:6c:32: 03:05:d1:f0:96:89:6a:b8:95:02:86:33:4e:50:34: fc:60:f2:da:f5:48:3a:4d:38:4d:2a:06:c6:fa:88: 21:d7:75:44:8d:f6:fa:c3:09:b8:87:1b:62:98:da: 07:20:9c:f8:be:43:88:b3:d2:b3:a5:d2:1e:ed:72: 2d:62:40:92:04:cf:c7:1b:25:8e:96:10:01:76:88: 33:4e:0b:ba:a1:cf:55:e9:1e:7b:e1:35:3a:38:1d: c6:e6:b1:7b:f7:9c:b7:fb:e3:25:49:9d:40:c0:53: d1:01:2f:81:2a:b4:9a:7f:07:ba:42:90:70:30:54: fc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6F:DC:56:87:A0:2C:CB:D2:79:C4:51:10:C3:3F:BF:41:67:57:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:67:ec:cd:a4:4d:9f:77:77:27:0b:b2:e0:d4:4a:ca:cf:4c: d0:8c:63:a8:a7:3f:99:81:59:aa:5d:80:83:01:f9:69:22:1f: 06:a2:f7:b6:78:a6:59:4c:ba:58:71:0f:65:eb:57:f5:ea:9e: de:d3:f0:08:41:ad:b1:ec:cd:97:16:9e:87:83:77:e8:c4:18: cf:b2:03:13:78:2d:5b:a4:2e:e4:a4:9d:32:40:76:be:e0:8d: e9:94:ea:36:89:4b:c4:11:19:38:76:0e:fd:ff:e3:66:23:82: f2:5e:bd:d5:21:37:9a:15:26:79:c2:7b:8b:67:04:15:bd:1a: 17:80:cf:2f:74:1a:f5:0b:5f:87:f5:9f:b6:63:2d:a2:e5:00: a7:da:a6:5e:d2:ec:ab:c1:4c:0e:81:28:8b:38:02:3d:50:70: 54:b9:69:3d:29:2d:ac:ea:05:8c:be:b1:31:ba:40:f5:57:69: 4d:aa:98:1b:4c:55:61:c1:3b:77:c2:f5:06:ac:36:7f:57:2b: 38:7d:c9:df:58:b2:9e:30:43:65:84:48:77:c1:68:7a:47:26: f0:c2:6d:b0:ee:85:1f:43:3e:ef:79:62:5e:6a:c5:19:2f:ea: 38:9c:e0:ba:c0:b2:4a:05:ea:1f:5b:60:1e:98:3f:6b:32:08: 92:bf:82:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vu4ouXZXZLil4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTQyYjZhN2YtOWQ1Yy00YmVkLWI2ODEtMDgzZTQ5ODUzYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGJMUuTfg9h2l4vxBxC704Xf6pAk9FmDs3nI zZsfqJBG7RyoPeMx06Ttoy1hmXi8pMeJPJhxadkMnG7Llm7QjwI8oS5357KTuM4q TJhzPxX8/C2NTZTOxAhfAB1RCwRG6KT+WbSazqq+AL5qvzS1mwaJCeV7b50YSuOv oD+HnjTEr6ImbDIDBdHwlolquJUChjNOUDT8YPLa9Ug6TThNKgbG+ogh13VEjfb6 wwm4hxtimNoHIJz4vkOIs9KzpdIe7XItYkCSBM/HGyWOlhABdogzTgu6oc9V6R57 4TU6OB3G5rF795y3++MlSZ1AwFPRAS+BKrSafwe6QpBwMFT8HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5v3FaHoCzL0nnEURDDP79BZ1c8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjM1OGUxMjctYjljZC0z MjFiLWEyZWQtMDk4ODJkZjI2YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFn7M2kTZ93dycLsuDUSsrPTNCMY6inP5mBWapdgIMB+WkiHwai97Z4 pllMulhxD2XrV/Xqnt7T8AhBrbHszZcWnoeDd+jEGM+yAxN4LVukLuSknTJAdr7g jemU6jaJS8QRGTh2Dv3/42YjgvJevdUhN5oVJnnCe4tnBBW9GheAzy90GvULX4f1 n7ZjLaLlAKfapl7S7KvBTA6BKIs4Aj1QcFS5aT0pLazqBYy+sTG6QPVXaU2qmBtM VWHBO3fC9QasNn9XKzh9yd9Ysp4wQ2WESHfBaHpHJvDCbbDuhR9DPu95Yl5qxRkv 6jic4LrAskoF6h9bYB6YP2syCJK/gsc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:02 2025 by rpki-client