$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa File: 552f37d1-55ae-3591-bc00-063e37bf73cb.roa (raw, json) Hash identifier: Uph4RHG6LLsYYtwTszjOZoOb5nLtnk1kkq+GFEg3R8U= Subject key identifier: A4:DC:E1:52:94:CB:48:BD:F2:D3:DA:3E:98:40:22:CD:1B:48:8B:1A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B95A79DEA21507C8951935680 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 203 IP address blocks: 20.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9d:ea:21:50:7c:89:51:93:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e89abaea-c955-4631-87d2-3fbadf22ce64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:8e:2b:82:da:c1:31:67:7e:73:50:aa:78: f0:8d:74:03:cd:9d:64:97:6b:1b:4e:8c:b8:75:e9: d6:90:be:3d:7f:f6:50:34:7a:5d:fa:1d:2b:09:0f: 8f:f0:e9:8d:47:93:b0:2a:79:af:bf:64:55:a0:cd: a6:99:9f:8b:16:ce:99:21:b9:a5:a1:76:81:7d:58: b9:cf:f5:6d:ad:fe:c3:b6:7e:d4:51:af:cc:a2:86: bb:45:bf:4e:c4:e7:8f:00:28:ba:21:59:31:bd:43: b2:31:96:8e:e7:2e:49:ad:0d:30:91:d2:e6:67:19: 1a:a9:48:da:8c:5e:69:ec:40:24:6b:53:5d:84:5f: 93:3c:21:85:06:9a:bb:cd:a9:ca:38:23:af:82:de: cc:37:12:36:de:1c:8a:ab:b4:e1:f7:cd:17:03:be: da:25:7a:10:f6:15:43:4d:d3:04:aa:0c:c1:02:4f: 17:6a:86:41:95:25:27:02:e0:a5:db:19:51:be:26: 1a:56:89:3a:ab:97:e5:e6:8d:41:63:f9:87:90:d4: e1:6b:84:bb:61:6e:52:e4:aa:40:80:7f:bc:f7:c0: 0c:2b:fd:d9:d0:c1:28:98:32:71:a8:51:69:19:44: 07:8d:4c:bb:88:4a:3d:1c:3c:90:c4:5b:22:3a:3b: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DC:E1:52:94:CB:48:BD:F2:D3:DA:3E:98:40:22:CD:1B:48:8B:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7e:51:b7:ae:f0:40:a0:17:86:be:8d:c7:74:2a:e8:6a:35: 24:33:c8:a9:b1:59:79:54:77:63:c8:f5:c1:a4:3b:de:29:2d: 10:4b:69:2e:48:ee:72:f9:24:96:58:d6:c0:c4:8d:d0:c4:e0: dc:ac:a8:5f:a5:eb:2b:98:68:f0:e6:c4:29:51:cd:27:2a:c8: 4d:8e:61:07:44:82:9e:a1:88:b3:e4:d9:38:60:28:e5:05:98: 51:16:c8:9b:af:a1:45:69:19:09:71:54:99:d1:2f:ea:4b:80: 25:62:9e:9b:54:e7:3b:0b:1b:b4:4f:dc:14:fd:71:fc:9c:a3: ad:0d:81:c3:6c:08:d8:22:4a:3e:7e:8f:c5:f0:40:a2:0a:e5: d8:81:e5:c0:2c:98:56:5f:76:b7:c4:55:fb:3b:48:94:4a:aa: a1:c1:95:36:21:64:3d:e5:c2:7d:60:5f:f0:bd:34:62:f6:92: 8c:24:bb:51:fd:57:3e:79:1e:c7:6f:10:a3:3c:3b:78:aa:ac: 7b:11:0a:00:83:8b:78:6f:83:e4:b6:36:e9:1b:5f:fb:72:94: 90:3b:3f:51:95:56:c5:97:05:94:d8:d0:8f:e3:bd:26:db:44: be:03:c3:e0:fd:f5:24:aa:13:30:ef:cf:be:48:0a:06:83:be: 0d:49:41:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp53qIVB8iVGTVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTg5YWJhZWEtYzk1NS00NjMxLTg3ZDItM2ZiYWRmMjJjZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLuOK4LawTFnfnNQqnjwjXQDzZ1kl2sbToy4 denWkL49f/ZQNHpd+h0rCQ+P8OmNR5OwKnmvv2RVoM2mmZ+LFs6ZIbmloXaBfVi5 z/Vtrf7Dtn7UUa/Mooa7Rb9OxOePACi6IVkxvUOyMZaO5y5JrQ0wkdLmZxkaqUja jF5p7EAka1NdhF+TPCGFBpq7zanKOCOvgt7MNxI23hyKq7Th980XA77aJXoQ9hVD TdMEqgzBAk8XaoZBlSUnAuCl2xlRviYaVok6q5fl5o1BY/mHkNTha4S7YW5S5KpA gH+898AMK/3Z0MEomDJxqFFpGUQHjUy7iEo9HDyQxFsiOjvP6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTc4VKUy0i98tPaPphAIs0bSIsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTUyZjM3ZDEtNTVhZS0z NTkxLWJjMDAtMDYzZTM3YmY3M2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5+Ubeu8ECgF4a+jcd0KuhqNSQzyKmxWXlUd2PI9cGkO94pLRBLaS5I 7nL5JJZY1sDEjdDE4NysqF+l6yuYaPDmxClRzScqyE2OYQdEgp6hiLPk2ThgKOUF mFEWyJuvoUVpGQlxVJnRL+pLgCVinptU5zsLG7RP3BT9cfyco60NgcNsCNgiSj5+ j8XwQKIK5diB5cAsmFZfdrfEVfs7SJRKqqHBlTYhZD3lwn1gX/C9NGL2kowku1H9 Vz55HsdvEKM8O3iqrHsRCgCDi3hvg+S2NukbX/tylJA7P1GVVsWXBZTY0I/jvSbb RL4Dw+D99SSqEzDvz75ICgaDvg1JQQY= -----END CERTIFICATE-----Generated at Wed Oct 22 13:05:10 2025 by rpki-client