$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa File: a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa (raw, json) Hash identifier: KswnIsw++56ne/+yndtSF/wLJyT2ppI1vH3BSv8gnzs= Subject key identifier: AD:09:B1:9D:4C:24:46:41:6C:71:E0:CC:16:23:48:C7:7E:56:88:47 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC140EE642D56C7C21BA000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:40:ee:64:2d:56:c7:c2:1b:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bd620a4d-2025-4ffb-a5ab-3324f02cf3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e3:01:9c:c9:74:f7:e9:46:61:b0:d4:32:ed: 94:28:96:ef:26:9f:b1:4e:98:d6:ae:d3:30:2d:ab: 52:77:1a:3e:51:77:52:60:6f:79:6c:9e:4e:eb:ed: 56:00:26:59:1c:39:94:ba:83:61:32:30:63:b6:c9: a6:77:86:ad:4e:51:1e:16:82:04:66:06:13:aa:72: 76:62:d4:59:40:6a:82:ba:6e:e9:47:69:a3:ea:f0: 61:d0:3d:70:12:6c:a9:45:d3:dc:dd:d4:5f:e2:85: c6:18:48:c2:a9:72:8e:dc:41:7d:33:07:07:2f:0e: 67:f5:a2:8d:71:23:cb:61:bb:ca:5f:a4:2b:2f:db: 6c:ea:f7:cf:ec:dd:d9:50:30:4f:da:13:4f:87:a3: 39:9a:67:d7:5b:8d:08:12:21:30:04:32:de:36:94: 66:a9:5d:f4:e5:6b:38:bf:7b:e6:73:75:db:bd:a5: 3b:ec:cd:81:dd:9c:76:81:27:b2:bc:19:5a:06:a0: e8:5b:b2:fb:7c:6a:c2:33:da:6a:cf:88:6c:48:e7: 70:f9:09:f9:c4:c8:21:90:27:cc:06:bc:8a:d7:eb: f1:24:5a:25:e3:cd:ad:b6:73:b3:18:79:f1:8f:fc: b2:04:e1:e2:ce:cc:c2:68:cf:82:b5:29:bf:5e:b4: ac:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:09:B1:9D:4C:24:46:41:6C:71:E0:CC:16:23:48:C7:7E:56:88:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:76:93:63:42:cb:a0:63:fb:3b:0c:79:d7:a4:ee:f0:71:10: 92:b4:e4:46:29:e4:bd:b8:02:81:41:87:dc:53:b1:e6:ad:56: 6d:5d:68:d4:8f:8b:b1:e2:dc:df:e8:58:1b:7a:43:05:c4:6b: 29:ad:53:ce:f6:05:1d:1d:2f:81:8f:47:75:4c:08:45:fa:5f: 1d:65:48:63:29:47:5a:b8:42:78:c8:26:be:70:21:f5:27:2a: b1:7d:58:de:45:b8:a9:25:d5:eb:15:5f:1b:96:8d:9b:ae:1a: 26:9f:e9:b6:a2:ed:a5:dd:1f:de:c9:5f:16:16:53:66:8a:f8: 1d:e7:b9:25:ba:b4:58:8d:64:c2:e8:0a:d5:34:e1:4a:3c:80: 3c:77:de:c5:81:6e:db:6b:94:37:3f:88:d7:de:08:c5:f6:35: 25:07:8a:73:4a:38:1a:67:ae:98:20:19:0b:87:dc:85:c4:d7: 01:dc:1f:c5:ee:c2:4b:95:e4:85:61:aa:39:20:71:91:b3:04: 89:04:41:c5:65:a0:b4:94:7e:f7:33:1b:77:4a:98:c0:5a:24: 24:e4:83:39:57:ce:02:96:1d:2d:4d:1d:37:38:c9:de:54:64: 54:49:9f:b1:7a:8b:3b:66:74:f9:ff:c4:5a:25:fb:c6:2b:5f: 84:b1:4b:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUDuZC1Wx8IboAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmQ2MjBhNGQtMjAyNS00ZmZiLWE1YWItMzMyNGYwMmNmM2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+MBnMl09+lGYbDUMu2UKJbvJp+xTpjWrtMw LatSdxo+UXdSYG95bJ5O6+1WACZZHDmUuoNhMjBjtsmmd4atTlEeFoIEZgYTqnJ2 YtRZQGqCum7pR2mj6vBh0D1wEmypRdPc3dRf4oXGGEjCqXKO3EF9MwcHLw5n9aKN cSPLYbvKX6QrL9ts6vfP7N3ZUDBP2hNPh6M5mmfXW40IEiEwBDLeNpRmqV305Ws4 v3vmc3XbvaU77M2B3Zx2gSeyvBlaBqDoW7L7fGrCM9pqz4hsSOdw+Qn5xMghkCfM BryK1+vxJFol482ttnOzGHnxj/yyBOHizszCaM+CtSm/XrSs8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0JsZ1MJEZBbHHgzBYjSMd+VohHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTEwYTA2NDYtZDBkYy0z MGRjLWI5YjQtMzMyMzVmNmM4MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ2k2NCy6Bj+zsMedek7vBxEJK05EYp5L24AoFBh9xTseatVm1daNSP i7Hi3N/oWBt6QwXEaymtU872BR0dL4GPR3VMCEX6Xx1lSGMpR1q4QnjIJr5wIfUn KrF9WN5FuKkl1esVXxuWjZuuGiaf6bai7aXdH97JXxYWU2aK+B3nuSW6tFiNZMLo CtU04Uo8gDx33sWBbttrlDc/iNfeCMX2NSUHinNKOBpnrpggGQuH3IXE1wHcH8Xu wkuV5IVhqjkgcZGzBIkEQcVloLSUfvczG3dKmMBaJCTkgzlXzgKWHS1NHTc4yd5U ZFRJn7F6iztmdPn/xFol+8YrX4SxS4A= -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:31 2025 by rpki-client