$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa File: 53fb2e37-5e98-3242-85b4-dc0598c808e7.roa (raw, json) Hash identifier: NjIf1Sqc0VLIzRUEAA3E3OtWHSAl57YvkK+jTZmntPk= Subject key identifier: D5:21:5A:F2:14:4E:7F:26:4B:23:22:EA:5E:37:1C:E1:CC:78:8B:70 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCABA7639983485CC77110 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3356 IP address blocks: 20.149.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:ab:a7:63:99:83:48:5c:c7:71:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=d7964bba-2c3d-46fe-a381-2b99bce34794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:da:22:02:f1:19:c7:c4:36:c5:e8:e4:d7: 59:db:3b:29:57:29:68:62:e9:ab:34:0c:9e:7f:b9: 18:3e:76:c0:64:74:5c:d4:4b:b2:2f:a5:a5:3b:c7: 96:98:43:f0:6b:e8:16:f2:57:e3:21:dc:70:30:87: 8f:52:15:c8:04:db:e7:20:b2:45:fd:d0:a5:48:b3: 33:5e:d6:fa:18:38:aa:81:60:47:b3:2a:e2:c6:84: 1f:dc:21:6d:c8:28:05:c8:c8:7c:6b:23:d2:80:eb: 0a:e8:c2:8f:f8:14:21:9e:bb:06:23:d4:c7:6e:bd: 35:cd:4b:c9:91:a8:c4:7a:43:91:e5:d0:50:40:ac: bf:bd:09:34:58:10:a4:5c:77:4f:9e:6d:0c:1c:5e: 5d:cb:ed:11:4e:46:fa:92:8b:26:78:d6:65:2c:c0: 35:73:f1:3e:1a:69:6b:8f:83:6e:66:71:bd:d6:31: ca:14:01:42:53:10:84:15:1c:57:ca:1f:09:78:58: 5f:62:89:41:f5:33:69:a6:92:3f:a6:85:0b:c1:bf: 04:21:82:c6:91:6f:ed:97:b0:80:16:a3:23:54:ae: 48:e2:73:a5:53:3f:5f:d1:41:52:b6:38:d3:78:ba: dc:bf:ee:d2:e1:73:54:d8:47:ea:98:2b:6b:79:51: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:21:5A:F2:14:4E:7F:26:4B:23:22:EA:5E:37:1C:E1:CC:78:8B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:65:ba:f3:66:43:b1:eb:99:97:d8:67:99:f6:c1:2c:c2:a8: 9d:67:31:24:17:94:2d:73:2c:c8:b2:4d:bf:ea:45:e9:b5:3d: 91:e4:5f:7e:6a:d9:19:f0:f3:9a:d3:9e:15:81:5a:8a:38:35: 58:8f:70:5f:54:2b:b4:bf:91:e3:f2:ac:61:61:6a:ef:be:dc: d2:a2:07:ae:96:a4:db:46:0f:f6:75:8a:59:d2:6a:83:8c:aa: 03:2b:5a:03:36:0a:d3:cf:5c:27:6c:01:50:a4:81:10:9f:b0: 46:ea:8c:c5:44:33:ae:2e:2c:75:4d:42:f1:d6:4b:d9:59:b3: 2d:fb:c4:29:7a:62:28:72:4b:50:fd:65:3c:25:17:a2:f5:72: 5c:72:b6:12:62:22:38:a9:be:52:94:e5:4e:4e:e0:be:82:22: 5a:07:d5:ca:bd:ca:bc:a0:08:23:96:3b:de:30:11:a6:0d:69: b0:c6:b8:88:84:29:f3:8d:fe:26:87:3a:69:10:9d:6d:d4:ed: 6f:02:bd:c5:58:59:62:17:3b:02:ac:cc:24:eb:e9:37:3f:30: b7:6b:eb:4e:d1:09:97:9d:7f:87:3c:42:5e:51:9f:2e:2d:49: 16:fd:5b:74:2c:e6:ec:1f:6e:49:15:55:2c:77:a6:fd:4e:0b: 7b:16:cb:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vKunY5mDSFzHcRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZDc5NjRiYmEtMmMzZC00NmZlLWEzODEtMmI5OWJjZTM0Nzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrnaIgLxGcfENsXo5NdZ2zspVyloYumrNAye f7kYPnbAZHRc1EuyL6WlO8eWmEPwa+gW8lfjIdxwMIePUhXIBNvnILJF/dClSLMz Xtb6GDiqgWBHsyrixoQf3CFtyCgFyMh8ayPSgOsK6MKP+BQhnrsGI9THbr01zUvJ kajEekOR5dBQQKy/vQk0WBCkXHdPnm0MHF5dy+0RTkb6kosmeNZlLMA1c/E+Gmlr j4NuZnG91jHKFAFCUxCEFRxXyh8JeFhfYolB9TNpppI/poULwb8EIYLGkW/tl7CA FqMjVK5I4nOlUz9f0UFStjjTeLrcv+7S4XNU2EfqmCtreVFytwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUhWvIUTn8mSyMi6l43HOHMeItwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTNmYjJlMzctNWU5OC0z MjQyLTg1YjQtZGMwNTk4YzgwOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1luvNmQ7HrmZfYZ5n2wSzCqJ1nMSQXlC1zLMiyTb/qRem1PZHkX35q 2Rnw85rTnhWBWoo4NViPcF9UK7S/kePyrGFhau++3NKiB66WpNtGD/Z1ilnSaoOM qgMrWgM2CtPPXCdsAVCkgRCfsEbqjMVEM64uLHVNQvHWS9lZsy37xCl6YihyS1D9 ZTwlF6L1clxythJiIjipvlKU5U5O4L6CIloH1cq9yrygCCOWO94wEaYNabDGuIiE KfON/iaHOmkQnW3U7W8CvcVYWWIXOwKszCTr6Tc/MLdr607RCZedf4c8Ql5Rny4t SRb9W3Qs5uwfbkkVVSx3pv1OC3sWyxY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:42:43 2025 by rpki-client