$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa File: da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa (raw, json) Hash identifier: RW9a4DlB48Bf9bhGA1fvBOoO6qu9nPf9Auz1WE3AZUM= Subject key identifier: 33:12:50:09:80:03:E4:C7:36:9A:36:0F:1F:07:1E:05:C5:38:24:CD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B23318788FFFAFB762202D900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 3360 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:87:88:ff:fa:fb:76:22:02:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=0728d6ac-388b-45b8-8cb6-017aa0102320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9d:ff:b0:48:6f:c4:98:8b:5b:74:3b:13:59: bf:29:60:2d:2a:42:8b:83:8e:2c:2c:3d:b5:21:74: 1e:e5:87:6c:7a:af:63:23:4d:80:d3:66:75:8b:99: f6:30:b4:2c:8b:0f:b1:e9:94:25:71:9d:6e:29:5d: 21:d6:2c:3b:7f:a1:89:cd:15:d7:12:21:26:19:e5: 62:fb:ec:88:ec:1c:a0:a9:b5:1c:8e:00:4e:95:b0: b1:f6:00:96:ab:ba:82:10:5c:d4:ef:b6:fc:fe:14: 74:2a:15:84:c3:f5:cc:89:5d:3e:34:ef:95:bb:8e: 1b:0c:c3:a3:35:1f:d6:8a:4e:06:be:24:06:62:ab: a6:15:e8:dd:54:00:a4:e3:e6:4a:b2:86:6d:aa:c4: 2a:db:f6:a1:80:41:7b:bf:4f:8a:e5:ed:b7:d1:ec: 6f:9d:dd:9b:b9:7b:2e:a9:ac:22:4a:73:ba:ca:cf: 9e:c4:05:e3:7c:ba:21:89:e1:3a:17:23:dc:95:38: e6:ab:e5:23:1d:25:93:5c:32:ef:46:47:57:20:ad: 90:1f:c6:3a:3a:02:99:53:ef:76:2c:8c:e1:be:06: 81:a7:27:b4:fd:1e:15:76:f0:28:7f:8f:27:13:04: 14:76:ce:67:3a:45:93:83:e7:c0:32:1f:08:80:cf: a5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:12:50:09:80:03:E4:C7:36:9A:36:0F:1F:07:1E:05:C5:38:24:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:4c:17:1f:ba:b2:a7:1d:82:85:76:a4:6c:0c:41:82:e2:f8: 5e:72:46:73:bc:6d:d2:2c:49:92:cc:b1:ba:f4:9f:3f:2b:cc: 1a:89:29:93:9b:56:dd:3e:45:1f:db:25:a6:92:7f:fc:46:0c: d9:17:e8:2d:8f:0f:7d:78:2b:3b:ad:78:fb:67:ee:3e:76:6e: 9c:7e:6c:29:6f:e1:a8:6d:aa:59:6e:70:d3:86:8f:8d:e0:52: ad:70:59:46:2a:ad:b3:88:e2:a1:8d:ee:18:95:0e:95:5a:62: c7:85:82:2e:11:ec:cc:14:58:5c:a4:3f:65:83:97:c6:ea:01: 39:95:a4:eb:bc:57:8d:41:c5:9a:7e:c0:27:80:ca:b8:ef:ce: 2e:67:84:dd:10:e4:a7:c3:c1:0a:98:a5:50:27:55:f3:d9:38: 4c:2f:c9:6d:ce:e0:2b:d6:60:5f:42:f9:2d:f5:c5:5d:ec:5f: d9:97:82:9d:e6:93:98:9b:02:3b:51:e8:92:1e:0d:aa:98:6c: 49:19:5f:47:af:c9:44:aa:27:eb:bb:cc:80:46:16:4f:d5:bb: 9a:71:6f:9e:12:f8:b7:41:6f:b4:d7:10:b1:c8:59:d2:68:da: 35:15:63:59:4c:75:b0:0f:9b:6d:5c:fa:9c:79:0a:9d:f9:ae: 7e:0c:70:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYeI//r7diIC2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MDcyOGQ2YWMtMzg4Yi00NWI4LThjYjYtMDE3YWEwMTAyMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ3/sEhvxJiLW3Q7E1m/KWAtKkKLg44sLD21 IXQe5Ydseq9jI02A02Z1i5n2MLQsiw+x6ZQlcZ1uKV0h1iw7f6GJzRXXEiEmGeVi ++yI7BygqbUcjgBOlbCx9gCWq7qCEFzU77b8/hR0KhWEw/XMiV0+NO+Vu44bDMOj NR/Wik4GviQGYqumFejdVACk4+ZKsoZtqsQq2/ahgEF7v0+K5e230exvnd2buXsu qawiSnO6ys+exAXjfLohieE6FyPclTjmq+UjHSWTXDLvRkdXIK2QH8Y6OgKZU+92 LIzhvgaBpye0/R4VdvAof48nEwQUds5nOkWTg+fAMh8IgM+l4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMSUAmAA+THNpo2Dx8HHgXFOCTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEzOWM3OTctOWFmNC0z ZDcxLWJmYTItNWM0ZmMwYjQ3NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5MFx+6sqcdgoV2pGwMQYLi+F5yRnO8bdIsSZLMsbr0nz8rzBqJKZOb Vt0+RR/bJaaSf/xGDNkX6C2PD314KzutePtn7j52bpx+bClv4ahtqllucNOGj43g Uq1wWUYqrbOI4qGN7hiVDpVaYseFgi4R7MwUWFykP2WDl8bqATmVpOu8V41BxZp+ wCeAyrjvzi5nhN0Q5KfDwQqYpVAnVfPZOEwvyW3O4CvWYF9C+S31xV3sX9mXgp3m k5ibAjtR6JIeDaqYbEkZX0evyUSqJ+u7zIBGFk/Vu5pxb54S+LdBb7TXELHIWdJo 2jUVY1lMdbAPm21c+px5Cp35rn4McMQ= -----END CERTIFICATE-----Generated at Fri Sep 12 05:43:32 2025 by rpki-client