$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d4fd0cc-a059-3f38-8414-67b2197b7505.roa File: 9d4fd0cc-a059-3f38-8414-67b2197b7505.roa (raw, json) Hash identifier: lqyNp6kuRf9pTrswArH/6B7Qkh/ygOyDzQ9otQdT3cY= Subject key identifier: 45:64:B4:02:A7:72:7F:92:D0:3E:0E:1B:0E:E7:B8:F8:5E:61:0C:0E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AE46127DBBFFC23CD1BB2B080 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d4fd0cc-a059-3f38-8414-67b2197b7505.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 203 IP address blocks: 20.137.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:27:db:bf:fc:23:cd:1b:b2:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=9cb11031-d510-4780-9d78-732f9817c4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8a:fc:b0:39:b6:df:58:6f:01:ec:31:e1:61: e3:f3:42:c9:d1:8d:c9:2a:7d:05:a6:ca:9f:a1:76: 73:4f:63:0e:a6:00:3a:cd:58:52:c9:64:1b:8b:18: 53:78:ca:07:3d:a0:a7:51:83:30:e3:29:1e:36:99: 06:72:c8:f0:a2:43:22:94:e8:d1:d6:5f:ec:46:7d: 26:37:c1:68:16:dc:54:21:a3:32:a2:e4:c2:b1:93: f2:0a:70:45:61:6c:4d:e3:6c:e0:bd:76:19:3b:1a: 58:c1:73:6f:7d:dd:56:58:a1:71:20:c0:80:b7:53: ec:c6:d8:9a:c8:64:cc:90:88:e1:d1:9a:cb:d9:fe: 8c:d9:08:83:a3:2c:b7:a4:b2:f2:8a:0b:34:7c:63: 3b:57:3b:f3:85:3a:e2:03:a1:7d:1a:54:32:a1:3b: e6:35:24:cb:cf:b3:79:ac:bf:25:3c:e5:c5:09:2a: 94:f1:d7:d8:d1:01:0f:ab:a7:c4:ad:09:e3:4b:93: 52:fc:d6:ca:25:55:c6:67:e0:5b:6e:1f:38:5a:03: 2a:77:28:14:ec:74:98:a1:4f:db:df:75:78:58:00: 08:39:12:71:1e:ce:b0:16:8a:76:d8:06:39:fc:30: 54:25:e8:f5:fa:3f:e0:ae:b0:74:e6:6c:bf:65:19: 45:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:64:B4:02:A7:72:7F:92:D0:3E:0E:1B:0E:E7:B8:F8:5E:61:0C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d4fd0cc-a059-3f38-8414-67b2197b7505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:20:3b:6f:c4:85:91:6a:5a:43:22:cf:b4:ed:6e:cd:0f:62: 2f:e2:cf:d7:31:71:6f:62:e2:69:61:24:b8:74:d3:ff:61:58: a5:26:bf:a0:7e:81:2a:4c:6c:58:8f:36:22:8d:87:e3:ca:1a: b1:22:83:38:92:97:5e:d9:19:e4:df:93:5f:c9:e8:bc:29:44: f5:21:a4:35:2d:70:2d:a7:8f:0f:cd:33:fa:b9:5a:3a:f7:d7: b5:03:ad:68:6a:5e:cd:9b:24:37:0f:64:2d:c0:5c:01:80:e2: a6:bf:26:7a:74:64:d1:67:2e:81:24:d2:a2:fa:2b:75:14:6f: 99:84:66:77:fc:1a:77:be:c2:95:45:13:df:cb:b5:d6:d3:5d: 6b:95:90:56:d8:7f:f5:f5:5c:98:1b:9e:6a:22:d0:b5:36:db: 19:7b:fb:66:f7:77:93:f2:31:d6:b8:2d:ac:b7:c7:c5:c6:26: 08:dc:e0:76:67:95:93:93:bf:4e:19:63:a9:02:4b:71:6f:33: 0e:73:58:52:aa:82:60:3a:e5:a8:7b:1b:e4:4a:80:a0:49:e5: ea:e2:8f:99:60:58:d0:95:18:7f:c2:59:7f:a3:b6:18:e5:b4: ae:19:f4:20:86:c0:b3:4b:0b:c3:30:4a:eb:8e:aa:03:b0:19: 60:27:d9:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSfbv/wjzRuysIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk OWNiMTEwMzEtZDUxMC00NzgwLTlkNzgtNzMyZjk4MTdjNGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIr8sDm231hvAewx4WHj80LJ0Y3JKn0Fpsqf oXZzT2MOpgA6zVhSyWQbixhTeMoHPaCnUYMw4ykeNpkGcsjwokMilOjR1l/sRn0m N8FoFtxUIaMyouTCsZPyCnBFYWxN42zgvXYZOxpYwXNvfd1WWKFxIMCAt1Psxtia yGTMkIjh0ZrL2f6M2QiDoyy3pLLyigs0fGM7VzvzhTriA6F9GlQyoTvmNSTLz7N5 rL8lPOXFCSqU8dfY0QEPq6fErQnjS5NS/NbKJVXGZ+Bbbh84WgMqdygU7HSYoU/b 33V4WAAIORJxHs6wFop22AY5/DBUJej1+j/grrB05my/ZRlF7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVktAKncn+S0D4OGw7nuPheYQwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWQ0ZmQwY2MtYTA1OS0z ZjM4LTg0MTQtNjdiMjE5N2I3NTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkgO2/EhZFqWkMiz7Ttbs0PYi/iz9cxcW9i4mlhJLh00/9hWKUmv6B+ gSpMbFiPNiKNh+PKGrEigziSl17ZGeTfk1/J6LwpRPUhpDUtcC2njw/NM/q5Wjr3 17UDrWhqXs2bJDcPZC3AXAGA4qa/Jnp0ZNFnLoEk0qL6K3UUb5mEZnf8Gne+wpVF E9/LtdbTXWuVkFbYf/X1XJgbnmoi0LU22xl7+2b3d5PyMda4Lay3x8XGJgjc4HZn lZOTv04ZY6kCS3FvMw5zWFKqgmA65ah7G+RKgKBJ5erij5lgWNCVGH/CWX+jthjl tK4Z9CCGwLNLC8MwSuuOqgOwGWAn2fQ= -----END CERTIFICATE-----Generated at Wed Oct 22 13:04:27 2025 by rpki-client