$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/382f88bf-202b-36d2-b132-4cab93ad15d5.roa File: 382f88bf-202b-36d2-b132-4cab93ad15d5.roa (raw, json) Hash identifier: xk+AGZhI5YjOTdNnwY1n1wafEHSCq0hZspqvQGBta8k= Subject key identifier: 91:89:4C:87:B2:8C:6E:8B:E7:5A:EB:C5:48:90:26:9F:3F:4E:AF:98 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B3556EE9E53D126CB7D9F4C40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/382f88bf-202b-36d2-b132-4cab93ad15d5.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 4237 IP address blocks: 20.137.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ee:9e:53:d1:26:cb:7d:9f:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=58ae9071-4b08-4214-8655-a932f4d1bc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c0:ef:da:02:bf:1a:6e:ec:0a:37:16:a0:39: b5:2a:92:55:b9:c3:b2:86:fb:0c:df:3c:f9:8b:70: 10:28:71:12:d3:6f:36:64:4a:b1:9e:82:8d:4f:82: 36:16:ae:75:fa:61:1f:d6:5b:dd:d1:72:47:4e:25: d1:98:a1:05:4a:ab:35:a3:c9:04:6c:fb:64:e1:33: ef:cc:56:4f:ac:45:8f:07:43:f8:44:89:b2:f6:cd: 67:e3:e3:9c:5a:2d:b1:b2:cd:b9:9b:03:e4:6d:ec: 38:40:33:27:09:8a:0e:09:91:87:67:8e:b7:5f:29: 91:1e:a2:0e:0f:00:06:88:b4:d5:85:25:26:f7:0c: 00:d9:39:3a:7d:d3:d2:06:03:75:84:6d:3e:c4:82: 8b:b8:04:57:af:38:97:94:f8:18:3e:c8:59:f4:c3: 26:ca:99:e5:87:fe:63:3f:48:cb:9c:86:5e:ff:b7: 92:9e:36:d8:52:ae:5d:15:fe:8e:42:76:3a:83:36: 2e:a2:2d:bc:76:74:ea:b3:d1:0e:00:3d:e2:cc:15: 67:eb:57:e1:c5:72:a4:3f:ca:12:5a:f4:a0:a5:d6: ce:0e:c6:b6:22:81:b2:f2:4c:9d:53:82:6f:b9:5c: 65:a4:12:20:e9:34:4f:8c:d1:41:98:f0:94:1a:4a: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:89:4C:87:B2:8C:6E:8B:E7:5A:EB:C5:48:90:26:9F:3F:4E:AF:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/382f88bf-202b-36d2-b132-4cab93ad15d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4a:63:65:52:4e:c9:c8:ce:d6:03:5a:c4:83:0b:b6:1b:5a: e1:c1:69:fb:14:fc:41:20:05:d2:c2:9e:06:39:69:73:ac:bb: f9:3b:4c:03:f4:d0:47:a3:d0:1a:3d:30:27:0d:63:95:61:49: 3a:5e:59:06:04:09:a5:57:ef:42:99:f3:e5:06:cc:0e:15:b8: 36:d5:02:93:e5:09:49:f0:05:9b:2e:d0:ab:77:ba:96:40:e8: e4:1f:67:61:82:01:44:2a:7d:08:6d:16:fd:48:61:12:a9:c7: c7:7d:bf:27:36:b2:ed:14:00:0d:4f:3c:67:04:aa:fb:1a:93: 63:0e:19:77:cb:13:ba:cf:2e:1f:18:fc:2d:3a:54:59:46:93: ec:0f:0f:bd:2d:73:0e:8c:19:fb:c7:41:85:3e:53:ca:6b:e1: a2:8b:fd:a4:2c:a8:d5:8b:cb:4c:28:e2:15:f0:ea:de:4a:ea: 37:da:70:19:e7:94:cf:94:78:6a:2b:2e:96:9f:b1:48:5c:9e: 65:ec:5d:d7:f5:cd:24:3b:66:0d:41:69:bd:ca:8b:00:fc:ff: 28:45:df:9c:35:56:6b:eb:9a:92:f2:25:20:f1:70:a3:8e:20: 92:68:ad:a9:f8:38:16:08:0d:29:34:83:6f:0e:fc:a2:ac:b2: f3:7f:a8:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vu6eU9Emy32fTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NThhZTkwNzEtNGIwOC00MjE0LTg2NTUtYTkzMmY0ZDFiYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sDv2gK/Gm7sCjcWoDm1KpJVucOyhvsM3zz5 i3AQKHES0282ZEqxnoKNT4I2Fq51+mEf1lvd0XJHTiXRmKEFSqs1o8kEbPtk4TPv zFZPrEWPB0P4RImy9s1n4+OcWi2xss25mwPkbew4QDMnCYoOCZGHZ463XymRHqIO DwAGiLTVhSUm9wwA2Tk6fdPSBgN1hG0+xIKLuARXrziXlPgYPshZ9MMmypnlh/5j P0jLnIZe/7eSnjbYUq5dFf6OQnY6gzYuoi28dnTqs9EOAD3izBVn61fhxXKkP8oS WvSgpdbODsa2IoGy8kydU4JvuVxlpBIg6TRPjNFBmPCUGkpSyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGJTIeyjG6L51rrxUiQJp8/Tq+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzgyZjg4YmYtMjAyYi0z NmQyLWIxMzItNGNhYjkzYWQxNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFInwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJKY2VSTsnIztYDWsSDC7YbWuHBafsU/EEgBdLCngY5aXOsu/k7TAP0 0Eej0Bo9MCcNY5VhSTpeWQYECaVX70KZ8+UGzA4VuDbVApPlCUnwBZsu0Kt3upZA 6OQfZ2GCAUQqfQhtFv1IYRKpx8d9vyc2su0UAA1PPGcEqvsak2MOGXfLE7rPLh8Y /C06VFlGk+wPD70tcw6MGfvHQYU+U8pr4aKL/aQsqNWLy0wo4hXw6t5K6jfacBnn lM+UeGorLpafsUhcnmXsXdf1zSQ7Zg1Bab3KiwD8/yhF35w1VmvrmpLyJSDxcKOO IJJoran4OBYIDSk0g28O/KKssvN/qMs= -----END CERTIFICATE-----Generated at Wed Nov 5 00:08:04 2025 by rpki-client