$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa File: a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa (raw, json) Hash identifier: DxIDwS2xMGYCekHe3l5KpmRLqVFzwemg/h0b1SMX8Uc= Subject key identifier: 66:3F:C0:25:3B:A0:96:58:FD:A2:A8:C1:6E:FE:24:94:7A:2A:B1:FE Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584BCD9B1E348B5F8DBEBECB1F80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 3356 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:1e:34:8b:5f:8d:be:be:cb:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=4e8d407f-44f7-4fc0-84d0-ef7ed7520e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:52:34:f7:11:43:f1:dd:1c:c3:b4:c8:66: 7d:21:56:a0:85:55:6e:7e:95:dc:18:49:08:8b:19: 3d:01:c6:d8:7f:d3:78:92:92:a0:dc:67:e5:58:02: 75:ab:78:89:9b:2b:ef:08:48:fd:86:97:57:2f:d1: 4b:e4:b4:1e:1e:05:07:18:a3:ea:77:50:f1:8d:07: fd:c0:af:82:e5:cf:e1:1d:51:bc:a0:f2:1a:3f:c6: 99:de:12:ff:8f:91:ae:8b:38:27:46:4e:0a:7d:b2: da:34:1d:d0:42:a6:97:76:3d:bd:9d:1e:d7:8f:ed: a1:ef:2c:cd:91:4e:20:f1:1e:df:4c:ec:d1:44:94: 58:f0:3a:86:4b:49:81:8e:2b:29:c1:ce:68:c3:dd: 19:ca:2d:a3:a2:94:6f:f9:90:ca:c0:37:ac:7f:79: d3:5f:42:92:70:7d:57:8a:86:39:34:cf:c1:60:2b: 50:0e:2b:e2:5a:ef:80:bb:95:35:e0:c9:f3:c6:ed: 8a:e1:ce:34:4d:d8:c2:ca:13:3a:56:3a:20:f3:ac: 8f:29:5e:6a:e5:8b:03:dd:80:94:5b:2f:22:b8:86: 07:e3:e2:72:a1:b6:3a:0a:3b:6f:6d:8e:97:f2:47: fa:a3:dd:09:36:4e:f0:e9:57:2b:c1:95:b7:cf:4b: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3F:C0:25:3B:A0:96:58:FD:A2:A8:C1:6E:FE:24:94:7A:2A:B1:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:37:9c:4d:6e:83:7a:b7:a9:74:05:25:24:88:a4:1f:98:0c: ee:eb:9b:bd:7a:34:99:d6:2b:7a:62:39:df:e7:14:bd:e8:45: d1:82:22:54:ca:70:c0:04:da:63:3d:12:70:81:9e:30:54:4e: 93:67:35:d2:36:8e:72:88:3a:a5:af:59:81:9d:ec:c8:c5:0e: d2:db:66:b4:5a:82:c6:65:81:be:a0:1f:ee:f4:70:ce:f1:95: 29:fa:ec:6c:d0:d8:10:f6:1e:61:ae:79:16:7c:c7:4a:9f:0e: d0:af:91:86:f7:47:50:1a:87:e3:84:e2:86:28:6c:d8:e3:12: 61:a1:5d:5c:95:95:4b:b6:52:34:ea:ac:1d:30:6c:3f:96:56: 33:ef:1b:fd:3b:2e:98:67:2f:d0:ae:8b:38:2c:d0:21:ae:cb: 39:c6:6f:0c:26:02:b0:a8:bc:5b:30:3a:a0:b1:7b:25:60:b7: 96:c4:19:a4:fb:d0:b1:74:7f:1e:fd:c6:93:be:68:f0:af:d9: 2d:f9:9e:36:a0:3d:55:fb:37:aa:0f:bb:97:c8:0c:ba:66:78: 3b:a8:e0:cb:4f:6e:43:01:30:12:7c:a9:75:a8:b8:38:f4:85: 15:5b:44:bd:19:ee:c1:47:6b:e5:8d:78:80:d5:3d:27:aa:cd: 33:d7:65:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmx40i1+Nvr7LH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NGU4ZDQwN2YtNDRmNy00ZmMwLTg0ZDAtZWY3ZWQ3NTIwZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5JSNPcRQ/HdHMO0yGZ9IVaghVVufpXcGEkI ixk9AcbYf9N4kpKg3GflWAJ1q3iJmyvvCEj9hpdXL9FL5LQeHgUHGKPqd1DxjQf9 wK+C5c/hHVG8oPIaP8aZ3hL/j5GuizgnRk4KfbLaNB3QQqaXdj29nR7Xj+2h7yzN kU4g8R7fTOzRRJRY8DqGS0mBjispwc5ow90Zyi2jopRv+ZDKwDesf3nTX0KScH1X ioY5NM/BYCtQDiviWu+Au5U14Mnzxu2K4c40TdjCyhM6Vjog86yPKV5q5YsD3YCU Wy8iuIYH4+JyobY6CjtvbY6X8kf6o90JNk7w6VcrwZW3z0uCnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGY/wCU7oJZY/aKowW7+JJR6KrH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTEwYTA2NDYtZDBkYy0z MGRjLWI5YjQtMzMyMzVmNmM4MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU3nE1ug3q3qXQFJSSIpB+YDO7rm716NJnWK3piOd/nFL3oRdGCIlTK cMAE2mM9EnCBnjBUTpNnNdI2jnKIOqWvWYGd7MjFDtLbZrRagsZlgb6gH+70cM7x lSn67GzQ2BD2HmGueRZ8x0qfDtCvkYb3R1Aah+OE4oYobNjjEmGhXVyVlUu2UjTq rB0wbD+WVjPvG/07LphnL9Cuizgs0CGuyznGbwwmArCovFswOqCxeyVgt5bEGaT7 0LF0fx79xpO+aPCv2S35njagPVX7N6oPu5fIDLpmeDuo4MtPbkMBMBJ8qXWouDj0 hRVbRL0Z7sFHa+WNeIDVPSeqzTPXZQo= -----END CERTIFICATE-----Generated at Mon Nov 17 01:12:33 2025 by rpki-client