$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa File: 66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa (raw, json) Hash identifier: RVloVj8pFrPPEDqdq+SIMRAw2RtZXD2pd0K0EeISi9c= Subject key identifier: 9F:D8:12:79:26:CF:F8:82:E6:C3:8A:20:49:C3:8F:8C:9C:CB:28:16 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B3556EEB40D234BBE1FC6EE00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.137.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ee:b4:0d:23:4b:be:1f:c6:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=9efdea9a-6b92-4c35-a844-45a3e5e5f181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2e:d4:9e:a5:ae:89:3e:79:35:bf:6d:11:f2: 60:c3:1c:21:54:95:8c:8f:a5:41:dd:24:fb:be:4e: 43:e0:c6:fe:f2:0c:e2:48:9c:63:13:f4:c9:68:28: e1:26:b9:bd:d9:5b:0a:41:99:7f:a3:69:f5:16:d0: 30:54:d7:dd:69:89:58:18:01:d8:69:4c:ba:ff:a9: ce:9f:1b:ea:a5:4d:81:7f:26:02:75:2f:91:92:30: 71:db:e5:3b:8c:94:30:64:c6:00:d8:d2:b3:80:c4: 19:42:c0:8f:22:22:f3:e5:3c:81:bb:95:9d:c4:8c: 4a:77:16:c4:e7:cd:92:4e:57:38:b5:47:31:8b:62: d9:eb:b5:5a:c1:57:f2:49:5e:1d:2d:59:d6:2f:36: f3:3b:cc:ea:c0:d4:42:7f:d4:cd:73:ee:f6:a1:a6: 9f:63:0a:90:55:b3:a7:61:b4:25:06:40:0a:78:f6: d0:38:58:d3:65:31:a0:ca:07:8d:33:f5:6b:8d:44: e3:bf:87:36:3c:8e:4f:0d:4b:40:4b:df:b2:82:38: c0:e3:c1:71:ea:88:80:ba:43:ca:50:bd:5a:75:71: f8:d8:53:75:a9:49:2d:61:c0:92:42:16:ff:50:3c: 59:47:35:57:d4:39:a6:1f:e1:67:fc:7a:e4:be:36: f0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D8:12:79:26:CF:F8:82:E6:C3:8A:20:49:C3:8F:8C:9C:CB:28:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:0a:ec:32:bb:9c:21:df:a8:c4:99:47:75:09:4e:36:cb:61: 1b:e0:af:ad:19:7e:f1:71:3a:16:5c:3e:7c:c7:9a:a7:99:d5: 00:c3:59:4e:f3:ef:78:70:32:43:ce:72:15:a3:d8:c3:f7:5a: d1:41:cc:93:2b:a3:ba:94:d7:9f:4b:7d:42:7e:1e:07:73:49: d4:34:04:da:c7:9f:0c:9d:d2:91:57:a3:cf:f7:40:98:6e:46: 6b:cd:d2:19:68:10:68:b4:af:d3:4c:d2:c2:ee:90:79:f3:fe: ba:e1:9b:53:6d:cd:85:45:3a:94:0a:1a:00:6b:70:ed:cb:a9: b7:f2:78:2c:fa:e2:22:a3:99:10:50:72:6b:cd:2b:6f:d5:c6: cd:41:be:9f:74:3a:96:d0:e1:f6:b6:bf:14:25:64:40:80:4d: 17:cc:32:05:c6:3a:6f:67:7d:6b:df:3d:3b:b4:e4:54:36:b0: b6:37:ad:72:40:37:c5:79:c2:44:17:2b:76:cb:ab:d7:02:49: 74:c1:3b:1d:cd:1b:ff:42:24:d1:6d:bc:b5:96:b2:db:6b:38: a1:ee:0d:13:5f:cd:60:16:9a:2d:17:4c:90:b1:00:7f:3b:c0: a5:fc:04:01:5a:e1:71:20:69:c3:2e:3d:42:31:15:92:22:52: 83:db:01:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vu60DSNLvh/G7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OWVmZGVhOWEtNmI5Mi00YzM1LWE4NDQtNDVhM2U1ZTVmMTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli7UnqWuiT55Nb9tEfJgwxwhVJWMj6VB3ST7 vk5D4Mb+8gziSJxjE/TJaCjhJrm92VsKQZl/o2n1FtAwVNfdaYlYGAHYaUy6/6nO nxvqpU2BfyYCdS+RkjBx2+U7jJQwZMYA2NKzgMQZQsCPIiLz5TyBu5WdxIxKdxbE 582STlc4tUcxi2LZ67VawVfySV4dLVnWLzbzO8zqwNRCf9TNc+72oaafYwqQVbOn YbQlBkAKePbQOFjTZTGgygeNM/VrjUTjv4c2PI5PDUtAS9+ygjjA48Fx6oiAukPK UL1adXH42FN1qUktYcCSQhb/UDxZRzVX1DmmH+Fn/HrkvjbwwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/YEnkmz/iC5sOKIEnDj4ycyygWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjZhM2M5MzQtYThhZS0z OWM2LTllMDctOTU3OTRiNjNiOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFInwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYK7DK7nCHfqMSZR3UJTjbLYRvgr60ZfvFxOhZcPnzHmqeZ1QDDWU7z 73hwMkPOchWj2MP3WtFBzJMro7qU159LfUJ+HgdzSdQ0BNrHnwyd0pFXo8/3QJhu RmvN0hloEGi0r9NM0sLukHnz/rrhm1NtzYVFOpQKGgBrcO3LqbfyeCz64iKjmRBQ cmvNK2/Vxs1Bvp90OpbQ4fa2vxQlZECATRfMMgXGOm9nfWvfPTu05FQ2sLY3rXJA N8V5wkQXK3bLq9cCSXTBOx3NG/9CJNFtvLWWsttrOKHuDRNfzWAWmi0XTJCxAH87 wKX8BAFa4XEgacMuPUIxFZIiUoPbAQg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:52:30 2025 by rpki-client