$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa File: 4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa (raw, json) Hash identifier: REo+TVGYA9HHPEdWJMDeoHeVv4rGpDlfuA1itLCvt4I= Subject key identifier: 59:E1:B7:73:34:1D:93:B8:91:F4:E6:C5:9A:2F:42:17:1E:8D:BD:EC Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B23318771B2389498D8646400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 3360 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:87:71:b2:38:94:98:d8:64:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=9a8c1fe7-5f34-4320-a9d8-b9ed5d8e36c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:67:8b:54:d1:47:a5:4f:e0:9c:02:43:65:36: de:6d:1b:17:c6:14:8d:78:25:b0:2b:85:2f:37:51: b3:37:19:d1:e8:8c:26:36:a3:28:56:f5:53:61:c5: 91:cb:19:eb:2f:0d:51:3f:f3:f8:58:ad:af:50:cb: ab:54:da:3a:ae:94:d8:62:e9:5a:65:78:06:fc:f8: ae:a7:ac:ae:a4:9e:26:c5:fa:0d:17:0b:2c:ae:fc: b5:33:55:65:96:9a:b3:21:99:0c:cf:e3:35:35:d5: 55:9d:fa:79:83:cf:aa:01:c4:27:d8:c3:a0:8a:93: 39:80:be:9a:70:3e:0e:ca:44:4d:c9:ba:bc:92:dc: 82:f0:fc:03:f4:9e:e7:32:13:84:5b:73:9f:d5:b6: fe:9a:33:c7:49:0a:18:ad:6f:72:7b:bd:20:ae:49: f2:4a:aa:66:bd:45:c5:65:a7:ee:5e:60:4d:52:36: 5c:66:3f:22:6b:da:d5:ec:82:4a:bf:43:9b:81:df: ae:6f:d5:a5:73:4c:67:a0:f4:c8:45:50:f9:74:7d: d6:4f:09:53:40:b2:8d:e5:18:9d:c0:c1:51:e3:c7: 48:44:0b:e9:f6:1e:34:d7:57:57:7c:a3:27:33:c8: 8d:82:ce:d8:9a:e2:43:44:81:de:e0:a0:70:96:13: 47:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E1:B7:73:34:1D:93:B8:91:F4:E6:C5:9A:2F:42:17:1E:8D:BD:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f8:e4:06:bc:4a:c7:ca:0d:0c:5d:42:1c:29:a2:84:70:6b: 47:9d:80:94:fa:53:26:a4:88:5f:af:7a:55:6c:ef:41:ea:3e: d6:bf:98:76:fe:a7:9a:e5:8b:3d:6c:11:12:24:77:81:34:14: eb:89:9c:49:b6:56:91:6f:53:fa:b3:ad:16:5e:3d:91:fd:2f: 2b:ea:a8:dc:f5:74:51:90:49:cd:15:1a:ff:8e:0d:2a:3c:10: bd:77:3a:8e:bf:4c:7b:2c:09:01:a4:23:94:f6:b2:75:75:42: a0:2e:e1:9b:b4:d3:20:1b:8b:ef:78:1b:bf:77:4f:93:46:35: 4a:9f:87:ab:9f:31:d4:c5:91:c3:cc:45:ed:37:23:b2:85:5e: 06:5a:1f:ad:6b:ab:4c:a8:32:c0:b4:0b:15:d7:43:52:07:aa: 81:c9:e6:3f:1a:ba:86:7d:dd:50:77:2f:7c:94:45:1b:8e:35: 5b:51:64:a3:68:d7:42:16:04:de:74:6f:d4:5e:02:68:7c:72: 14:be:54:2c:c3:cb:38:a6:41:c4:17:1e:49:2b:59:be:a2:92: 3b:7f:a7:21:f0:17:9c:fa:be:ea:41:5c:ca:a9:c3:05:3c:25: b0:c6:db:38:42:31:ab:7d:9c:73:f6:4e:17:05:3d:78:83:ec: bf:77:3f:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYdxsjiUmNhkZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk OWE4YzFmZTctNWYzNC00MzIwLWE5ZDgtYjllZDVkOGUzNmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2eLVNFHpU/gnAJDZTbebRsXxhSNeCWwK4Uv N1GzNxnR6IwmNqMoVvVTYcWRyxnrLw1RP/P4WK2vUMurVNo6rpTYYulaZXgG/Piu p6yupJ4mxfoNFwssrvy1M1VllpqzIZkMz+M1NdVVnfp5g8+qAcQn2MOgipM5gL6a cD4OykRNybq8ktyC8PwD9J7nMhOEW3Of1bb+mjPHSQoYrW9ye70grknySqpmvUXF ZafuXmBNUjZcZj8ia9rV7IJKv0Obgd+ub9Wlc0xnoPTIRVD5dH3WTwlTQLKN5Rid wMFR48dIRAvp9h4011dXfKMnM8iNgs7YmuJDRIHe4KBwlhNHnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnht3M0HZO4kfTmxZovQhcejb3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNGMwOWQ1ZGYtN2FjZC0z NGVjLWFlMTEtMDYyNzI1ZWU3YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI745Aa8SsfKDQxdQhwpooRwa0edgJT6UyakiF+velVs70HqPta/mHb+ p5rliz1sERIkd4E0FOuJnEm2VpFvU/qzrRZePZH9LyvqqNz1dFGQSc0VGv+ODSo8 EL13Oo6/THssCQGkI5T2snV1QqAu4Zu00yAbi+94G793T5NGNUqfh6ufMdTFkcPM Re03I7KFXgZaH61rq0yoMsC0CxXXQ1IHqoHJ5j8auoZ93VB3L3yURRuONVtRZKNo 10IWBN50b9ReAmh8chS+VCzDyzimQcQXHkkrWb6ikjt/pyHwF5z6vupBXMqpwwU8 JbDG2zhCMat9nHP2ThcFPXiD7L93Pwc= -----END CERTIFICATE-----Generated at Fri Sep 12 05:45:48 2025 by rpki-client