$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa File: 32054d0b-077d-3e96-8773-c1690e50a953.roa (raw, json) Hash identifier: +npEGMOsw+kQaTcnbkenH9RDUSpD8vtcFE9aiV1a3R8= Subject key identifier: 99:11:20:C7:63:1D:BA:56:C9:18:5D:8C:19:EE:AA:D4:C3:34:FF:F2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCC4BF5414FB4903956C00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 202 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c4:bf:54:14:fb:49:03:95:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=865169e3-71fa-44f4-ad9c-9d006b7ff37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a4:48:ce:a2:ac:08:a2:bd:0b:ba:f4:89:6a: 7a:d1:26:5e:7b:36:fb:5d:d0:51:85:36:3c:e0:f2: a0:6a:ee:e8:99:3a:4d:98:26:4c:67:5d:2b:fe:88: 4f:a8:e5:2e:c3:a2:59:f3:54:02:c1:98:f9:7f:bf: 57:c5:c0:66:4b:39:76:8e:7b:89:be:e3:69:47:61: d8:37:fd:48:7f:f4:4d:d1:d8:1f:21:96:54:d9:c1: ab:3d:6f:77:5e:0c:63:d3:38:87:3c:18:24:41:19: 47:df:40:28:45:59:79:3d:fb:80:79:b2:4a:3a:79: 60:29:00:e6:03:f5:c7:69:cf:bc:64:10:84:e0:5e: 45:e6:32:8f:42:e1:bc:83:1a:96:a0:35:e8:a9:94: 09:da:1f:a2:ac:3b:f3:2c:69:44:38:04:96:3f:eb: 0c:bd:e6:45:b2:e8:d3:60:e6:5b:3a:22:9e:3c:5e: 56:4f:bf:dc:cc:dd:6e:02:b4:1d:5c:86:1f:b7:b7: a1:8a:4c:61:84:34:7b:5d:13:e1:28:19:48:cd:df: fc:8c:c8:39:d9:37:78:dc:c3:ef:45:d8:9d:d9:0c: 68:3c:3c:00:95:ce:fb:3f:89:0a:39:e8:61:18:c5: 46:6b:96:09:26:cf:44:30:f8:cd:e5:51:c9:99:ce: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:11:20:C7:63:1D:BA:56:C9:18:5D:8C:19:EE:AA:D4:C3:34:FF:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f8:b5:6e:91:c4:5a:7c:91:7c:41:a1:4f:aa:20:61:1e:33: 67:1d:67:fd:f1:84:5a:fc:32:fa:5e:e5:c8:69:4f:f2:60:1b: bd:63:15:ad:16:d9:20:aa:fd:a3:6d:30:7d:2e:3f:d8:97:3c: 16:58:a7:2b:67:b5:76:13:20:88:74:52:65:37:cf:e1:82:7f: 82:15:58:db:21:9d:ba:1f:05:19:20:85:19:7b:31:c4:d4:95: 35:dc:71:9c:e6:5c:52:b9:87:7b:3e:83:fb:a6:f9:3f:53:12: 39:d9:88:83:5a:db:6d:bb:d7:d8:58:52:55:59:44:8f:20:6d: e8:65:d3:8d:47:03:13:d5:b3:f4:27:a9:ca:b2:75:41:29:37: 73:e4:9a:7a:c2:29:9e:4a:0a:59:14:7e:50:e3:1d:c1:87:71: 8a:ec:c7:cb:06:9f:6c:6b:2f:d0:ec:e9:f8:1e:7e:02:ee:65: b5:be:52:09:46:27:c8:09:28:d6:b8:26:05:04:95:45:11:bc: 7d:50:a8:e2:05:c9:58:e4:03:33:66:3b:b0:5e:e4:ea:af:17: 3d:c0:50:0e:42:33:89:45:95:57:d5:90:6c:4b:13:d8:f7:a8: d4:02:dc:f0:57:44:78:01:1c:28:be:27:4a:8b:4c:25:6d:00: 0b:9e:10:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMS/VBT7SQOVbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ODY1MTY5ZTMtNzFmYS00NGY0LWFkOWMtOWQwMDZiN2ZmMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86RIzqKsCKK9C7r0iWp60SZeezb7XdBRhTY8 4PKgau7omTpNmCZMZ10r/ohPqOUuw6JZ81QCwZj5f79XxcBmSzl2jnuJvuNpR2HY N/1If/RN0dgfIZZU2cGrPW93Xgxj0ziHPBgkQRlH30AoRVl5PfuAebJKOnlgKQDm A/XHac+8ZBCE4F5F5jKPQuG8gxqWoDXoqZQJ2h+irDvzLGlEOASWP+sMveZFsujT YOZbOiKePF5WT7/czN1uArQdXIYft7ehikxhhDR7XRPhKBlIzd/8jMg52Td43MPv Rdid2QxoPDwAlc77P4kKOehhGMVGa5YJJs9EMPjN5VHJmc6XbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkRIMdjHbpWyRhdjBnuqtTDNP/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzIwNTRkMGItMDc3ZC0z ZTk2LTg3NzMtYzE2OTBlNTBhOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIz4tW6RxFp8kXxBoU+qIGEeM2cdZ/3xhFr8Mvpe5chpT/JgG71jFa0W 2SCq/aNtMH0uP9iXPBZYpytntXYTIIh0UmU3z+GCf4IVWNshnbofBRkghRl7McTU lTXccZzmXFK5h3s+g/um+T9TEjnZiINa222719hYUlVZRI8gbehl041HAxPVs/Qn qcqydUEpN3PkmnrCKZ5KClkUflDjHcGHcYrsx8sGn2xrL9Ds6fgefgLuZbW+UglG J8gJKNa4JgUElUURvH1QqOIFyVjkAzNmO7Be5OqvFz3AUA5CM4lFlVfVkGxLE9j3 qNQC3PBXRHgBHCi+J0qLTCVtAAueEH0= -----END CERTIFICATE-----Generated at Wed Oct 22 13:04:30 2025 by rpki-client