$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219fc05e-aabc-31b2-b3c0-3fa093865751.roa File: 219fc05e-aabc-31b2-b3c0-3fa093865751.roa (raw, json) Hash identifier: efl5F1TZmW8rcmPVurUCXprZLRiRTqwPHXYdMDQEt5c= Subject key identifier: 00:B7:5E:0C:D1:09:5D:65:DB:E2:EE:55:95:B3:1E:CB:F4:39:37:F5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC141FBC7D5475F25791E00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219fc05e-aabc-31b2-b3c0-3fa093865751.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 202 IP address blocks: 20.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:41:fb:c7:d5:47:5f:25:79:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4abd4597-eb8f-4f62-be53-26759bfaee45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:6f:78:60:ee:45:13:7d:86:f6:8d:80:d3: 34:91:c9:09:1b:5a:95:79:b2:2b:74:ba:b4:68:37: 72:dc:5a:9b:2f:aa:d9:c1:8c:b0:f2:b9:d1:89:82: 81:b8:16:27:75:8e:7e:56:37:03:50:aa:45:8e:fc: 92:cd:08:03:32:2a:ac:4a:65:e0:24:00:0b:28:fd: 28:a9:4b:ef:0f:69:e8:25:32:fb:4d:d5:a3:f8:21: b1:0c:ec:c4:8b:a6:2e:b6:e2:fa:9d:ab:17:45:55: 1d:c2:f9:3c:c8:c6:7f:ae:92:8d:f6:e9:0f:c9:bb: 25:30:c1:3c:15:1c:2e:0d:1e:68:39:16:52:34:0b: cb:89:4d:b2:de:0b:e6:69:3c:c7:21:37:33:43:19: b3:23:d4:62:74:0b:ed:29:61:5f:2c:c9:8c:79:a4: 6f:44:f9:37:3e:7c:91:68:c1:fb:95:ca:3c:db:28: 38:8b:d7:41:4d:f6:f4:c3:47:4e:54:dd:81:4f:30: 96:39:cf:b7:3c:a0:b8:c7:30:47:69:dd:61:b1:2d: c9:c2:e1:3a:53:f1:98:07:93:f1:ca:43:6f:16:0f: 8e:27:48:0e:fa:0b:d4:dd:90:9b:79:74:86:88:5a: a8:de:df:1f:bd:a7:90:79:e8:42:8b:98:a7:7e:6f: 08:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B7:5E:0C:D1:09:5D:65:DB:E2:EE:55:95:B3:1E:CB:F4:39:37:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219fc05e-aabc-31b2-b3c0-3fa093865751.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e3:6b:b2:54:f8:f7:49:f7:5f:43:eb:d2:bc:14:5d:9e:2a: 85:5e:93:96:98:98:66:42:10:3c:4b:3c:aa:86:dc:b1:46:f7: ac:ef:11:5e:6e:4a:59:0e:b3:63:c3:09:76:9c:38:db:d0:d9: df:86:a3:50:ce:f3:d2:c0:d9:6f:11:76:12:3f:da:c0:23:5b: dd:c7:d1:4b:8f:d1:4b:34:26:33:9d:d9:79:35:64:a6:2e:e3: 4f:88:e0:98:a2:fa:18:df:0a:b7:61:87:b2:32:35:54:c5:02: a8:4f:a0:bb:b5:9d:02:65:0a:60:8c:de:5d:fc:4d:45:ca:ad: 21:81:55:2e:89:67:4e:25:2b:e8:1c:16:64:da:0a:5e:d9:d0: a7:d5:30:56:04:73:c9:68:0a:0a:6e:fc:11:60:5f:99:c3:b0: 27:e5:0a:7f:2f:09:43:7b:05:af:da:f5:65:b5:60:67:3b:b5: b1:07:07:0e:7d:d4:9e:75:b8:74:c9:ed:98:3a:07:b3:35:97: e9:ff:a9:b6:4d:58:40:6b:9c:f2:da:95:35:9c:54:68:cc:14: 9a:0d:d4:7d:1c:a8:d3:a6:be:0d:3c:a2:d9:f7:f8:80:1b:cf: dd:0c:a3:7d:35:44:73:8a:af:79:a5:fe:cf:a0:65:48:b9:b7: ab:63:5e:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUH7x9VHXyV5HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGFiZDQ1OTctZWI4Zi00ZjYyLWJlNTMtMjY3NTliZmFlZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt5veGDuRRN9hvaNgNM0kckJG1qVebIrdLq0 aDdy3FqbL6rZwYyw8rnRiYKBuBYndY5+VjcDUKpFjvySzQgDMiqsSmXgJAALKP0o qUvvD2noJTL7TdWj+CGxDOzEi6YutuL6nasXRVUdwvk8yMZ/rpKN9ukPybslMME8 FRwuDR5oORZSNAvLiU2y3gvmaTzHITczQxmzI9RidAvtKWFfLMmMeaRvRPk3PnyR aMH7lco82yg4i9dBTfb0w0dOVN2BTzCWOc+3PKC4xzBHad1hsS3JwuE6U/GYB5Px ykNvFg+OJ0gO+gvU3ZCbeXSGiFqo3t8fvaeQeehCi5infm8IrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC3XgzRCV1l2+LuVZWzHsv0OTf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjE5ZmMwNWUtYWFiYy0z MWIyLWIzYzAtM2ZhMDkzODY1NzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFInYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfja7JU+PdJ919D69K8FF2eKoVek5aYmGZCEDxLPKqG3LFG96zvEV5u SlkOs2PDCXacONvQ2d+Go1DO89LA2W8RdhI/2sAjW93H0UuP0Us0JjOd2Xk1ZKYu 40+I4Jii+hjfCrdhh7IyNVTFAqhPoLu1nQJlCmCM3l38TUXKrSGBVS6JZ04lK+gc FmTaCl7Z0KfVMFYEc8loCgpu/BFgX5nDsCflCn8vCUN7Ba/a9WW1YGc7tbEHBw59 1J51uHTJ7Zg6B7M1l+n/qbZNWEBrnPLalTWcVGjMFJoN1H0cqNOmvg08otn3+IAb z90Mo301RHOKr3ml/s+gZUi5t6tjXmE= -----END CERTIFICATE-----Generated at Wed Oct 22 13:04:31 2025 by rpki-client