$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa File: cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa (raw, json) Hash identifier: jGEAuMUUd0KtTVdO8YxgWPe0Wt63qKlUHt0CLZ1wlbA= Subject key identifier: 36:A2:E5:BE:55:2F:A4:79:F0:2C:54:4E:AD:CD:EB:51:53:B7:70:5C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584BCD9B1FEBA6395C9318BD8C00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 3356 IP address blocks: 20.148.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:1f:eb:a6:39:5c:93:18:bd:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=ccfa25db-7a8f-488b-a4bb-754bff7c0818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1b:b7:f2:40:56:98:32:6d:34:a9:d1:99:b4: ca:3d:1b:3d:2c:b9:48:a6:61:c8:26:63:96:64:a9: e2:bd:66:e3:52:a9:9f:63:4a:02:e2:ea:d9:18:59: 18:f7:25:35:98:17:33:8c:48:74:09:9e:db:35:19: ca:b0:7c:6b:16:2e:f8:de:27:bc:13:b3:20:3c:de: 7c:d1:0b:30:36:da:c2:3a:c8:b0:dc:b5:58:65:2f: 07:f8:33:ea:2a:32:4a:d3:88:62:d7:c1:87:f2:25: 37:33:a2:c5:3b:f9:06:f4:93:eb:ca:ee:96:5c:d9: 9a:91:dd:84:7b:dd:a9:dd:c4:1e:46:b6:19:4a:8b: 71:ce:77:fa:11:eb:20:ff:8f:ca:58:01:46:7e:bf: 4f:d4:87:d6:a1:d1:c9:5a:6b:3d:b9:3d:c0:a4:4f: 19:3f:85:48:80:ad:c9:bb:d7:df:5f:15:df:e4:b8: 4d:77:59:63:0d:5d:d2:ef:32:44:01:e0:a8:70:55: 71:c0:e6:8b:34:3e:15:4c:18:57:ea:65:75:1f:d9: 91:a2:28:37:25:2f:6e:85:c4:6f:70:7f:4a:7a:11: 0c:1e:a4:fc:1b:7d:a8:ec:77:db:ed:2a:12:3c:7b: 43:0a:82:fd:3e:0b:dc:01:c8:52:a5:95:1d:04:4c: da:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A2:E5:BE:55:2F:A4:79:F0:2C:54:4E:AD:CD:EB:51:53:B7:70:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:82:e4:06:86:1f:ee:eb:e9:44:18:52:87:d2:d2:63:a1:d0: da:3c:94:1b:04:2d:f5:ef:d4:cc:1d:89:e3:0d:9b:f9:ee:aa: 29:af:f9:49:cd:41:44:64:1d:3c:21:a0:63:b6:b1:a8:7c:5d: 4d:d1:a6:a7:14:73:99:a1:eb:96:e3:60:d5:d0:63:c6:41:63: 61:f3:26:38:0f:b8:e3:2e:2c:3f:ba:29:fe:27:ca:be:3d:2c: 8d:b1:5e:72:20:90:e2:a1:f9:25:96:fb:3a:5c:22:18:8d:6f: ee:27:2b:0b:62:1c:12:14:dc:26:1d:a3:2b:1c:06:d5:06:be: 0d:21:45:bc:96:52:7c:2c:3a:81:00:75:5f:da:4a:b5:95:e5: 71:13:7b:d2:32:06:c5:af:f2:fa:ff:a8:d9:da:c1:93:12:ca: 8d:5e:96:47:05:1e:95:c4:92:47:68:79:ee:9c:11:34:1d:15: 53:00:40:81:ba:6c:b1:f8:a3:9d:0a:33:7f:d3:d2:21:53:cd: ca:09:c7:2f:93:4e:9d:58:c5:60:08:d7:a6:75:8c:b0:59:ed: 4a:39:d9:0d:14:33:18:ce:59:d2:eb:20:ea:7f:34:16:5c:ad: 09:0c:41:e6:a7:30:26:aa:10:1c:27:96:e8:fe:c7:63:a3:21: 8c:78:25:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmx/rpjlckxi9jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk Y2NmYTI1ZGItN2E4Zi00ODhiLWE0YmItNzU0YmZmN2MwODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxu38kBWmDJtNKnRmbTKPRs9LLlIpmHIJmOW ZKnivWbjUqmfY0oC4urZGFkY9yU1mBczjEh0CZ7bNRnKsHxrFi743ie8E7MgPN58 0QswNtrCOsiw3LVYZS8H+DPqKjJK04hi18GH8iU3M6LFO/kG9JPryu6WXNmakd2E e92p3cQeRrYZSotxznf6Eesg/4/KWAFGfr9P1IfWodHJWms9uT3ApE8ZP4VIgK3J u9ffXxXf5LhNd1ljDV3S7zJEAeCocFVxwOaLND4VTBhX6mV1H9mRoig3JS9uhcRv cH9KehEMHqT8G32o7Hfb7SoSPHtDCoL9PgvcAchSpZUdBEzanwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDai5b5VL6R58CxUTq3N61FTt3BcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvY2Y2YTRmYTAtM2RiMC0z MzU0LTg4ZDktNDhiMDI1ZTBmNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmC5AaGH+7r6UQYUofS0mOh0No8lBsELfXv1MwdieMNm/nuqimv+UnN QURkHTwhoGO2sah8XU3RpqcUc5mh65bjYNXQY8ZBY2HzJjgPuOMuLD+6Kf4nyr49 LI2xXnIgkOKh+SWW+zpcIhiNb+4nKwtiHBIU3CYdoyscBtUGvg0hRbyWUnwsOoEA dV/aSrWV5XETe9IyBsWv8vr/qNnawZMSyo1elkcFHpXEkkdoee6cETQdFVMAQIG6 bLH4o50KM3/T0iFTzcoJxy+TTp1YxWAI16Z1jLBZ7Uo52Q0UMxjOWdLrIOp/NBZc rQkMQeanMCaqEBwnluj+x2OjIYx4Jd4= -----END CERTIFICATE-----Generated at Mon Nov 17 01:15:29 2025 by rpki-client