$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa File: 57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa (raw, json) Hash identifier: 9stGbk4ykQleZMVBZXgX8He3WhgbRc5XW8pR7PEz1Nw= Subject key identifier: A1:E1:7E:6D:C0:FB:03:9F:31:DC:FC:6F:96:59:59:5C:7B:8F:86:18 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B3556ED70EEFD0460030BEB80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ed:70:ee:fd:04:60:03:0b:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=45a63f81-0549-4b02-897c-db259529c664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:4e:70:9b:70:2a:19:17:79:7f:a4:5f:f2: 35:9f:bc:72:9e:b4:a0:82:74:20:13:a3:4a:b9:be: f9:8b:ab:8b:ba:05:e6:06:d5:b3:77:96:24:0f:03: 7e:f3:6d:9b:a1:27:b1:9b:d3:cc:7f:6d:2f:c9:17: 9c:ea:1d:02:ff:6c:65:6f:ed:1e:de:89:4b:0e:2d: 50:02:08:6d:76:70:9b:88:a0:aa:f6:c9:f1:97:4e: 3f:ed:a5:04:29:85:ce:d2:2a:d1:be:04:6b:1d:d4: 7a:45:65:ab:2e:fe:b7:ad:d2:c2:47:cd:38:13:a1: fc:4c:ba:b3:79:94:92:46:b1:28:55:fb:18:57:0b: a6:c8:d2:20:d9:ec:e7:27:06:bb:d2:ee:06:49:7b: ed:50:a4:44:71:40:03:cc:1f:0e:dd:5e:b1:53:1f: 76:2f:35:59:85:48:d5:66:e5:95:78:51:a6:d6:fb: f2:a7:3e:f1:a0:a8:80:24:9d:8a:52:33:e2:1a:da: 1f:66:55:01:7f:21:48:07:aa:2c:4a:31:d9:2d:47: 84:2c:e8:fb:d4:2a:7b:f9:f1:b0:db:e4:e0:fd:94: e7:8f:b0:78:3d:22:9d:42:31:7d:3a:69:6b:c6:7e: c9:6b:2a:62:b8:93:45:41:e9:9b:81:6b:1e:29:51: 4c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E1:7E:6D:C0:FB:03:9F:31:DC:FC:6F:96:59:59:5C:7B:8F:86:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:12:fc:eb:13:42:fc:f3:18:ac:1e:79:b8:12:ac:54:26:a2: a1:ff:9a:08:c0:b8:cb:aa:79:96:77:de:19:46:65:d5:58:0c: 2b:48:17:1d:f7:7f:8c:35:8e:11:24:37:26:aa:87:d7:2f:ba: 93:09:38:ac:28:11:bf:be:f6:7d:71:b3:2f:63:59:bb:40:27: 13:d5:7c:a7:06:5b:e7:1c:9f:4a:6f:d7:40:ad:d0:1c:17:35: 82:db:a0:2e:56:0a:68:42:a9:c0:bd:2b:9c:d8:0b:b8:08:04: 5f:9b:9b:87:9f:00:5b:5d:0f:0d:97:21:ee:1b:a6:a7:2f:e7: 3a:21:e1:4f:72:fc:a2:fc:91:9f:24:03:77:6c:39:2b:8c:3c: 87:bd:76:4f:d4:eb:d9:41:39:a8:13:e3:f4:8c:62:8e:f4:2a: 59:65:de:da:07:3e:97:be:70:2f:af:b1:65:d8:3d:c5:25:cb: 51:af:08:00:13:3a:3a:86:6b:c1:ea:cc:df:02:dc:dd:30:24: 89:e3:a8:29:16:74:62:bc:ae:98:e7:6f:2f:42:d1:55:dd:48: ff:b5:f1:16:e1:53:1c:f4:fa:95:74:ad:be:02:fa:6e:af:8c: ac:f7:62:f7:91:ea:8c:0c:53:c3:41:1e:f7:2c:4c:8a:98:f8: c2:b9:71:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vu1w7v0EYAML64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NDVhNjNmODEtMDU0OS00YjAyLTg5N2MtZGIyNTk1MjljNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dNOcJtwKhkXeX+kX/I1n7xynrSggnQgE6NK ub75i6uLugXmBtWzd5YkDwN+822boSexm9PMf20vyRec6h0C/2xlb+0e3olLDi1Q AghtdnCbiKCq9snxl04/7aUEKYXO0irRvgRrHdR6RWWrLv63rdLCR804E6H8TLqz eZSSRrEoVfsYVwumyNIg2eznJwa70u4GSXvtUKREcUADzB8O3V6xUx92LzVZhUjV ZuWVeFGm1vvypz7xoKiAJJ2KUjPiGtofZlUBfyFIB6osSjHZLUeELOj71Cp7+fGw 2+Tg/ZTnj7B4PSKdQjF9Omlrxn7JaypiuJNFQembgWseKVFM8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHhfm3A+wOfMdz8b5ZZWVx7j4YYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTdmZmQxZTYtYjE0YS0z N2IwLTljZmEtZDFmNDhhZWVjOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUS/OsTQvzzGKweebgSrFQmoqH/mgjAuMuqeZZ33hlGZdVYDCtIFx33 f4w1jhEkNyaqh9cvupMJOKwoEb++9n1xsy9jWbtAJxPVfKcGW+ccn0pv10Ct0BwX NYLboC5WCmhCqcC9K5zYC7gIBF+bm4efAFtdDw2XIe4bpqcv5zoh4U9y/KL8kZ8k A3dsOSuMPIe9dk/U69lBOagT4/SMYo70Klll3toHPpe+cC+vsWXYPcUly1GvCAAT OjqGa8HqzN8C3N0wJInjqCkWdGK8rpjnby9C0VXdSP+18RbhUxz0+pV0rb4C+m6v jKz3YveR6owMU8NBHvcsTIqY+MK5cYA= -----END CERTIFICATE-----Generated at Wed Sep 17 04:08:03 2025 by rpki-client