$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7bdd57f3-fd11-3497-8d1f-ef485d5f2d5e.roa File: 7bdd57f3-fd11-3497-8d1f-ef485d5f2d5e.roa (raw, json) Hash identifier: kDJVNyupo8jjdq77R9GoPjI5/lHAweeUWxZD8MaCMRU= Subject key identifier: 7F:D3:4C:24:17:8E:13:F8:AE:BC:5D:2B:8B:95:8A:27:F6:54:8C:B4 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584BCD9B1EC3180082B26ED6BBC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7bdd57f3-fd11-3497-8d1f-ef485d5f2d5e.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 3356 IP address blocks: 20.132.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:1e:c3:18:00:82:b2:6e:d6:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=ae230d3d-2d41-44e2-b972-0d320056bbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e6:e1:f9:10:c6:e9:19:ab:cc:6e:ac:f2:7b: 17:a1:0f:e1:10:ed:21:cf:97:7e:f3:69:b5:8f:c0: 43:05:52:26:2e:43:30:fe:71:5b:c1:99:99:6d:0c: ad:3f:2c:97:95:c8:ae:7d:9c:83:c1:f1:83:98:09: 83:b5:70:7a:14:ee:90:69:67:ec:80:e6:16:60:ed: 98:07:c9:2d:86:b1:d5:bf:72:cf:08:a7:c3:de:cb: f9:b4:86:36:19:d7:7a:83:ea:09:34:20:9d:58:0b: 7a:a8:72:b8:47:06:b7:c3:37:2b:07:a2:99:d8:ef: 17:3e:10:4d:0f:af:16:93:99:18:28:b1:2c:73:54: 09:8f:9f:99:79:88:12:a6:dc:6a:a2:5c:9a:e2:e5: a5:99:64:b9:68:d9:f2:95:04:dc:d9:72:63:f7:ed: 73:73:e4:6a:a1:35:73:96:c1:4a:d9:ee:12:51:31: 78:a3:ed:d4:49:35:86:a8:c1:0b:d5:55:79:58:b9: 83:c4:16:3c:49:82:ae:e2:54:77:51:25:48:2a:b0: 4b:3d:a1:2c:f0:f5:d9:fc:76:99:17:97:01:cc:d0: 4b:5c:ac:37:f8:72:c3:71:56:20:88:25:45:54:b6: 7f:b0:03:c0:48:7f:62:7f:38:d4:b0:5e:bf:a8:a2: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D3:4C:24:17:8E:13:F8:AE:BC:5D:2B:8B:95:8A:27:F6:54:8C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7bdd57f3-fd11-3497-8d1f-ef485d5f2d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:4b:bc:c2:6a:d5:95:47:cb:7a:7e:4a:84:10:54:c3:df:28: 4f:3b:88:df:66:fd:71:c3:73:6a:b0:6e:fe:40:5f:e1:1f:01: f5:98:4e:fa:cc:40:b3:36:9e:d4:c1:47:ab:cd:3b:b6:e3:30: 0f:46:84:70:2a:01:71:d7:14:27:55:34:10:0d:96:8a:50:fc: 8b:01:a7:13:03:c5:c4:5f:2e:ea:6a:f7:bd:f1:7b:7f:b6:28: a6:d7:aa:9b:3f:2e:92:c4:b3:7a:5f:21:b5:79:bd:a2:7b:42: d9:d7:4e:9f:5e:43:ef:90:23:45:0a:09:04:2d:a2:db:41:b1: 77:d0:ee:dc:28:4b:f1:a8:5b:ad:d9:1f:46:2d:4d:bb:3b:30: 69:29:d2:71:b0:a5:60:3d:a1:e3:c9:38:14:89:20:b6:9f:d8: 56:84:ce:4f:42:24:a4:f6:7b:a7:07:6d:2b:8c:15:6c:00:b0: a0:ec:30:e8:09:46:3e:e6:42:26:64:fe:64:a0:d0:e3:c0:d8: a6:20:f6:a4:ad:c9:7f:04:ca:6c:61:01:4e:b2:0e:91:62:ec: 13:0c:ac:1e:c3:0a:9f:8b:0a:b0:ce:d2:76:db:14:b4:a6:7e: ff:c1:2e:03:78:b3:f9:89:4b:a8:b8:12:e9:90:a2:0b:dd:bc: bd:ec:65:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmx7DGACCsm7Wu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk YWUyMzBkM2QtMmQ0MS00NGUyLWI5NzItMGQzMjAwNTZiYmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhObh+RDG6RmrzG6s8nsXoQ/hEO0hz5d+82m1 j8BDBVImLkMw/nFbwZmZbQytPyyXlciufZyDwfGDmAmDtXB6FO6QaWfsgOYWYO2Y B8kthrHVv3LPCKfD3sv5tIY2Gdd6g+oJNCCdWAt6qHK4Rwa3wzcrB6KZ2O8XPhBN D68Wk5kYKLEsc1QJj5+ZeYgSptxqolya4uWlmWS5aNnylQTc2XJj9+1zc+RqoTVz lsFK2e4SUTF4o+3USTWGqMEL1VV5WLmDxBY8SYKu4lR3USVIKrBLPaEs8PXZ/HaZ F5cBzNBLXKw3+HLDcVYgiCVFVLZ/sAPASH9ifzjUsF6/qKL3+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/TTCQXjhP4rrxdK4uViif2VIy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2JkZDU3ZjMtZmQxMS0z NDk3LThkMWYtZWY0ODVkNWYyZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZLvMJq1ZVHy3p+SoQQVMPfKE87iN9m/XHDc2qwbv5AX+EfAfWYTvrM QLM2ntTBR6vNO7bjMA9GhHAqAXHXFCdVNBANlopQ/IsBpxMDxcRfLupq973xe3+2 KKbXqps/LpLEs3pfIbV5vaJ7QtnXTp9eQ++QI0UKCQQtottBsXfQ7twoS/GoW63Z H0YtTbs7MGkp0nGwpWA9oePJOBSJILaf2FaEzk9CJKT2e6cHbSuMFWwAsKDsMOgJ Rj7mQiZk/mSg0OPA2KYg9qStyX8EymxhAU6yDpFi7BMMrB7DCp+LCrDO0nbbFLSm fv/BLgN4s/mJS6i4EumQogvdvL3sZXs= -----END CERTIFICATE-----Generated at Mon Nov 17 01:14:19 2025 by rpki-client