$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa File: c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa (raw, json) Hash identifier: SpZXDsJTf7M4xfNry00ULNeVRdW+a3CchhtzzdyVfcs= Subject key identifier: 93:82:86:4A:90:F8:F1:C4:A2:56:DF:86:77:98:E4:9D:92:D8:B4:E1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B3556EDAD20151668D4F37500 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 3360 IP address blocks: 20.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ed:ad:20:15:16:68:d4:f3:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=f7002191-4a12-469f-a306-13a94817f10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4f:df:50:c0:84:41:77:fc:0d:a7:c4:9b:4e: 4c:d3:e1:f6:14:14:57:aa:68:23:bc:26:4a:75:a8: c2:3b:f1:10:47:cd:d8:79:ac:e5:02:4a:41:57:7d: b9:b7:67:94:f0:4d:a0:b6:f9:40:cf:69:6d:dc:9e: 92:06:78:ae:8e:4a:33:31:b9:39:13:d8:01:10:9e: 0a:96:02:a6:9d:d5:b5:09:f4:97:89:f8:44:c6:95: 35:a3:78:01:a6:80:43:96:d0:ab:d4:f2:4f:7b:e3: da:5b:d6:58:b1:0b:99:03:98:dc:12:4a:b2:c6:4e: 13:b2:8c:be:ab:ac:a7:a2:72:5b:b9:80:01:85:77: 5e:d9:8e:21:2c:7b:43:9a:7b:7b:46:70:f5:7f:27: 67:94:58:f4:da:50:6c:c5:10:7e:22:e7:cc:f5:f0: 1e:21:89:e9:3d:0f:ca:68:1f:f8:43:bb:b1:17:ef: 9a:52:7e:41:d3:f7:58:67:ba:17:f8:5b:ac:f9:6d: 7d:bf:19:6b:f1:69:d1:91:33:cd:89:1d:42:89:36: 22:53:c0:ff:31:86:1d:55:59:89:d2:7d:af:2c:3f: 29:4f:22:e1:bd:bc:24:1d:40:85:8c:4f:0d:7e:fa: eb:e1:0a:1d:3e:7c:80:5e:2a:57:a1:27:87:25:8f: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:82:86:4A:90:F8:F1:C4:A2:56:DF:86:77:98:E4:9D:92:D8:B4:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4b:00:53:6c:e1:c5:6b:89:1c:53:dd:e5:bb:f4:ac:01:ce: 7d:90:fc:8f:19:02:88:3a:4b:67:9c:45:49:cf:8f:2b:cc:04: 3b:cc:71:26:5d:cb:13:b2:28:4f:26:44:7c:ca:a7:df:bc:24: c7:d3:4e:eb:29:c1:2e:67:9c:8f:5c:e9:74:09:8a:64:e9:65: 29:de:54:21:0b:86:67:70:41:f4:7f:9b:b7:fb:07:c3:c7:5a: f5:bd:5c:35:2a:b8:1e:c0:46:3c:0e:2b:2c:82:90:3b:b8:f0: 30:fe:ad:87:d6:67:a8:c4:b9:50:ec:b7:fd:06:5b:6f:29:90: e6:9b:d0:51:73:d7:b0:09:54:93:cb:1c:34:4c:56:25:e6:64: 6f:39:11:da:36:ce:df:db:74:f4:2d:e4:c7:a4:5b:d3:14:34: 4c:6b:74:7c:7b:ca:3d:4a:7d:5b:78:69:82:00:54:20:9c:2e: cb:31:1f:c9:a1:d6:35:e6:d4:08:4f:30:34:16:33:ad:0f:a7: 51:e2:f8:72:c9:95:c5:c2:da:ba:1a:2e:ab:b3:c9:b9:0b:f4: f2:79:3d:b3:02:e7:e6:22:eb:7c:e9:ef:7c:25:6b:ca:27:4b: 23:4f:6a:f9:aa:67:8a:33:be:3e:50:4f:62:cc:65:31:0f:b0: 53:5b:c0:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vu2tIBUWaNTzdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZjcwMDIxOTEtNGExMi00NjlmLWEzMDYtMTNhOTQ4MTdmMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU/fUMCEQXf8DafEm05M0+H2FBRXqmgjvCZK dajCO/EQR83YeazlAkpBV325t2eU8E2gtvlAz2lt3J6SBniujkozMbk5E9gBEJ4K lgKmndW1CfSXifhExpU1o3gBpoBDltCr1PJPe+PaW9ZYsQuZA5jcEkqyxk4Tsoy+ q6ynonJbuYABhXde2Y4hLHtDmnt7RnD1fydnlFj02lBsxRB+IufM9fAeIYnpPQ/K aB/4Q7uxF++aUn5B0/dYZ7oX+Fus+W19vxlr8WnRkTPNiR1CiTYiU8D/MYYdVVmJ 0n2vLD8pTyLhvbwkHUCFjE8Nfvrr4QodPnyAXipXoSeHJY+ITQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOChkqQ+PHEolbfhneY5J2S2LThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzNjNjcyNWYtZTRlMy0z MWFjLTkzYTYtZDAyZGRiZjdjNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtLAFNs4cVriRxT3eW79KwBzn2Q/I8ZAog6S2ecRUnPjyvMBDvMcSZd yxOyKE8mRHzKp9+8JMfTTuspwS5nnI9c6XQJimTpZSneVCELhmdwQfR/m7f7B8PH WvW9XDUquB7ARjwOKyyCkDu48DD+rYfWZ6jEuVDst/0GW28pkOab0FFz17AJVJPL HDRMViXmZG85Edo2zt/bdPQt5MekW9MUNExrdHx7yj1KfVt4aYIAVCCcLssxH8mh 1jXm1AhPMDQWM60Pp1Hi+HLJlcXC2roaLquzybkL9PJ5PbMC5+Yi63zp73wla8on SyNPavmqZ4ozvj5QT2LMZTEPsFNbwMg= -----END CERTIFICATE-----Generated at Tue Oct 28 17:51:08 2025 by rpki-client