$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/69ed5808-c077-3138-b24c-f87000a5e1f6.roa File: 69ed5808-c077-3138-b24c-f87000a5e1f6.roa (raw, json) Hash identifier: eHLPpdQ8E++pgBgsSf9f0JAomT4jC3cPrUUEhd8GmZA= Subject key identifier: B3:9B:E4:CB:E3:82:A2:94:0F:E3:3E:15:5A:4E:90:72:4C:51:60:E7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B52A754E069299B7F5C3B9880 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/69ed5808-c077-3138-b24c-f87000a5e1f6.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 3356 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:54:e0:69:29:9b:7f:5c:3b:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=744c9ec5-a585-434f-ac93-d6e07920fcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:f9:42:16:4e:f5:d6:09:62:b3:aa:36:09: 94:76:57:29:1d:65:e8:5a:7d:9e:f5:a8:c2:8a:e9: 71:4c:5f:b4:64:7a:e7:40:dc:64:00:de:31:1a:ac: 99:79:12:a5:39:01:18:4a:af:3f:10:33:39:ea:e8: 10:2b:bd:00:2a:f5:eb:06:67:c4:76:67:17:36:a9: 1e:f3:6a:11:1d:9f:97:68:c1:69:71:64:96:20:33: c5:af:5b:2d:ac:af:50:a3:a9:bb:6a:68:09:e7:84: 37:c2:ec:19:a1:34:aa:61:4c:46:e7:e0:cb:10:1c: 31:a9:66:45:95:dc:da:88:2c:1f:51:8a:60:7f:93: 27:5d:87:31:92:c7:2d:1f:6c:1f:64:3c:b2:2a:95: 89:67:94:8f:dd:ee:99:e7:1a:69:cf:e3:b2:39:64: 8a:8b:95:f7:02:65:29:f5:c8:61:7a:df:0f:78:3c: ee:f5:a2:5e:16:cb:cf:ee:df:4b:be:71:1f:19:09: c0:ca:95:ec:8a:26:fb:70:e6:29:e2:50:c2:14:e8: 82:ca:b8:19:f7:33:4e:a0:2b:ab:72:f9:e2:3a:4d: 6f:8a:c3:a5:65:28:53:fa:9e:88:c1:38:75:61:6f: 8f:cd:89:ee:37:e4:6a:fd:1f:ed:b0:e5:32:d1:e3: ae:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9B:E4:CB:E3:82:A2:94:0F:E3:3E:15:5A:4E:90:72:4C:51:60:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/69ed5808-c077-3138-b24c-f87000a5e1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:51:05:28:23:4f:e5:47:75:b0:a4:fa:dd:cc:60:21:d8:dd: 20:ca:66:aa:66:e8:4e:a8:6f:3b:a6:3b:55:5e:83:10:ac:14: 76:6a:1f:62:de:f6:bb:ff:9b:14:61:a8:1d:0a:42:e3:01:81: 62:2c:3e:da:ee:f2:38:1b:b9:cd:92:82:25:ad:8a:43:4a:9a: c7:20:27:42:38:9d:2a:22:ff:d1:64:74:79:fb:9d:4c:30:ef: ee:6b:cc:de:f6:34:a3:5e:c8:62:15:0d:87:b6:90:14:cc:b9: ea:31:1e:a0:39:48:87:44:70:0b:b2:fb:94:84:e0:79:07:d3: 5d:b6:48:7a:e2:9a:e6:db:61:f6:55:ec:81:33:30:a8:d5:0c: ec:e7:4b:84:aa:53:b9:6d:c5:e7:9c:45:23:e4:58:8d:82:4d: 36:b4:c6:ac:6d:5b:d0:1f:01:0d:a6:17:74:5a:7a:78:a3:fe: 98:36:d9:40:6e:62:6c:db:eb:54:b3:82:82:d2:4c:fc:41:af: bc:a0:7e:95:c6:c3:27:be:dc:c2:45:bc:ad:11:82:d3:1e:a3: a3:85:f6:d3:7d:84:77:3c:50:98:9e:aa:ee:d6:7b:29:f3:3d: 60:a0:ae:09:b1:e7:6c:2b:84:bf:4b:36:f0:2e:ea:d1:e3:00: 71:7f:fe:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1TgaSmbf1w7mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NzQ0YzllYzUtYTU4NS00MzRmLWFjOTMtZDZlMDc5MjBmY2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG75QhZO9dYJYrOqNgmUdlcpHWXoWn2e9ajC iulxTF+0ZHrnQNxkAN4xGqyZeRKlOQEYSq8/EDM56ugQK70AKvXrBmfEdmcXNqke 82oRHZ+XaMFpcWSWIDPFr1strK9Qo6m7amgJ54Q3wuwZoTSqYUxG5+DLEBwxqWZF ldzaiCwfUYpgf5MnXYcxksctH2wfZDyyKpWJZ5SP3e6Z5xppz+OyOWSKi5X3AmUp 9chhet8PeDzu9aJeFsvP7t9LvnEfGQnAypXsiib7cOYp4lDCFOiCyrgZ9zNOoCur cvniOk1visOlZShT+p6IwTh1YW+PzYnuN+Rq/R/tsOUy0eOumQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOb5MvjgqKUD+M+FVpOkHJMUWDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjllZDU4MDgtYzA3Ny0z MTM4LWIyNGMtZjg3MDAwYTVlMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdRBSgjT+VHdbCk+t3MYCHY3SDKZqpm6E6obzumO1VegxCsFHZqH2Le 9rv/mxRhqB0KQuMBgWIsPtru8jgbuc2SgiWtikNKmscgJ0I4nSoi/9FkdHn7nUww 7+5rzN72NKNeyGIVDYe2kBTMueoxHqA5SIdEcAuy+5SE4HkH0122SHrimubbYfZV 7IEzMKjVDOznS4SqU7ltxeecRSPkWI2CTTa0xqxtW9AfAQ2mF3Raenij/pg22UBu Ymzb61SzgoLSTPxBr7ygfpXGwye+3MJFvK0RgtMeo6OF9tN9hHc8UJiequ7Weynz PWCgrgmx52wrhL9LNvAu6tHjAHF//qY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:48:06 2025 by rpki-client