$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa File: 3844cb66-4923-3faf-8c4d-519000648600.roa (raw, json) Hash identifier: inSF+e3FW68TUpvZF7gsRmZ2Sxq3DdatJ40jI5drOLw= Subject key identifier: 8F:C9:EF:B0:38:EF:74:F9:9C:15:17:62:97:65:58:E8:4A:69:41:89 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B23318714FF83CE6697EC3700 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 202 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:87:14:ff:83:ce:66:97:ec:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=d0abcca1-b33a-46d8-bd67-32e282519cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b4:ef:a3:06:0d:8f:1f:31:bf:89:57:f3:6c: c7:00:a6:52:00:4c:d1:64:99:b0:1e:03:c6:94:9c: 3b:fe:d7:62:66:69:3a:d2:5b:81:1b:8d:1f:e8:12: c2:75:e5:8d:2f:26:2c:f6:54:a1:ac:3b:7d:4a:9d: f4:91:8b:1b:61:3e:71:e7:80:37:da:a3:f7:8f:a0: 7c:50:e4:94:f5:87:2e:3e:cc:da:12:3d:8d:de:f3: a8:ff:22:ca:20:26:0d:6a:65:2a:60:9f:78:c5:bb: 37:9a:3b:4f:28:a7:98:41:45:fe:c3:0c:5a:d4:96: 63:ae:ee:27:dd:33:48:8c:ce:b1:88:64:8f:b2:bd: 06:13:a7:4b:ab:67:4e:66:ff:b8:7b:a1:58:59:a1: d4:a4:8b:4f:0a:17:fd:e1:11:82:af:07:3a:1e:bd: 93:d7:aa:4c:0f:52:74:ae:2f:92:7a:5a:f4:af:45: 5e:5d:83:3e:46:74:5c:a8:47:77:2d:73:08:bd:42: 94:ec:10:02:76:cf:b7:19:15:64:a1:d7:51:53:10: e4:33:ae:a9:45:ca:c5:39:c9:e1:91:45:4e:64:cf: 2e:fb:20:53:2f:00:37:12:4d:e9:0a:a5:02:7d:88: 5a:e8:f4:df:24:ec:e1:75:cf:12:48:12:91:5b:fe: 2a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C9:EF:B0:38:EF:74:F9:9C:15:17:62:97:65:58:E8:4A:69:41:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c5:15:ae:5f:39:cf:e0:25:bd:8c:d7:d3:60:04:61:cb:eb: 16:da:0d:df:71:12:d7:f1:f2:a0:4a:27:27:fc:82:65:9c:f7: fc:1e:02:f1:d4:29:0a:27:5b:23:f7:98:e4:fc:3a:85:20:e7: 9b:d7:8d:9e:fe:60:4e:40:5f:2f:47:a6:1d:3d:a6:c1:e7:4c: 90:b8:b2:8a:b3:16:40:d1:b9:15:7d:9e:3c:79:4b:fe:b3:cc: 9c:09:f1:8b:41:f3:bd:a8:45:d3:b0:25:fa:d4:b9:e9:37:de: e1:93:b6:80:2a:9f:ea:b3:2f:0c:a4:c9:96:32:17:e3:d6:05: b2:48:6d:32:5e:07:85:4b:2f:ce:76:34:21:cd:88:91:2f:16: 26:21:a5:71:b8:e2:d5:11:ca:66:4d:fa:52:e5:e9:9c:95:c7: ad:f7:27:1c:4d:13:42:7a:5f:4b:c5:f4:a2:31:80:ae:3e:b8: 6e:3c:2a:cb:4c:a6:f3:26:49:03:c2:d5:0c:8b:e9:6e:65:2a: 59:6a:c1:07:60:f5:a8:7a:29:f2:e8:e4:ae:23:81:39:50:44: 6c:8f:5a:77:a6:3a:99:33:b8:d7:05:3d:61:92:97:a9:08:9e: 17:71:b7:f0:e0:56:30:da:bf:f8:d4:7c:b3:f8:a8:04:23:c5: 93:2a:f6:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYcU/4POZpfsNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZDBhYmNjYTEtYjMzYS00NmQ4LWJkNjctMzJlMjgyNTE5Y2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7TvowYNjx8xv4lX82zHAKZSAEzRZJmwHgPG lJw7/tdiZmk60luBG40f6BLCdeWNLyYs9lShrDt9Sp30kYsbYT5x54A32qP3j6B8 UOSU9YcuPszaEj2N3vOo/yLKICYNamUqYJ94xbs3mjtPKKeYQUX+wwxa1JZjru4n 3TNIjM6xiGSPsr0GE6dLq2dOZv+4e6FYWaHUpItPChf94RGCrwc6Hr2T16pMD1J0 ri+Selr0r0VeXYM+RnRcqEd3LXMIvUKU7BACds+3GRVkoddRUxDkM66pRcrFOcnh kUVOZM8u+yBTLwA3Ek3pCqUCfYha6PTfJOzhdc8SSBKRW/4q3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/J77A473T5nBUXYpdlWOhKaUGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzg0NGNiNjYtNDkyMy0z ZmFmLThjNGQtNTE5MDAwNjQ4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3FFa5fOc/gJb2M19NgBGHL6xbaDd9xEtfx8qBKJyf8gmWc9/weAvHU KQonWyP3mOT8OoUg55vXjZ7+YE5AXy9Hph09psHnTJC4soqzFkDRuRV9njx5S/6z zJwJ8YtB872oRdOwJfrUuek33uGTtoAqn+qzLwykyZYyF+PWBbJIbTJeB4VLL852 NCHNiJEvFiYhpXG44tURymZN+lLl6ZyVx633JxxNE0J6X0vF9KIxgK4+uG48KstM pvMmSQPC1QyL6W5lKllqwQdg9ah6KfLo5K4jgTlQRGyPWnemOpkzuNcFPWGSl6kI nhdxt/DgVjDav/jUfLP4qAQjxZMq9gg= -----END CERTIFICATE-----Generated at Wed Oct 22 13:04:26 2025 by rpki-client