$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa File: e0509c46-0481-335e-9abf-5705ae2ce135.roa (raw, json) Hash identifier: ZGyst8PpiuV4MqEjbUq1SorFxpJuMOaVTraMJHZxxtM= Subject key identifier: 07:29:BC:1C:80:82:15:10:F0:99:12:D3:F9:4E:20:0B:F1:E5:F5:2C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC141144B094DC73E350E40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 202 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:41:14:4b:09:4d:c7:3e:35:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=76a1dacc-cd09-4f17-8eba-06047543d3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:f3:5c:0d:9e:ed:c2:d7:9d:04:62:a7:64: a2:05:72:6d:ec:33:a8:5a:38:16:62:a4:83:44:4c: ee:6e:91:48:90:75:55:dc:f4:47:5d:58:5e:aa:2e: 4a:c8:d7:40:83:d3:a1:2c:28:30:bd:76:31:cd:6e: 64:a6:76:64:5d:ac:ee:ab:dc:fe:91:fb:8d:77:53: 5a:ef:26:79:1b:f0:da:49:62:72:5b:ed:0a:e3:5c: 9a:ee:a2:ee:d0:b8:de:7e:1d:b1:83:9b:cc:9b:75: 7f:ac:c4:c6:91:6e:bb:60:06:16:fb:fe:7a:c7:31: 32:e5:53:11:76:ed:cc:8b:0e:b4:2d:5a:66:05:6b: d5:8e:2b:70:22:f3:d2:20:f0:ed:1c:e5:f1:6f:8b: 8c:55:10:31:1a:2f:d5:4c:b4:0b:9a:bb:e8:cf:1b: 4d:7f:e5:88:77:e4:e0:5b:a8:4c:d5:26:dd:aa:42: b2:c4:7f:c9:06:96:74:0b:ae:31:73:0a:24:be:65: b5:d5:e5:f4:e1:aa:72:02:bb:44:c8:51:85:ff:a4: 9f:a3:bb:d7:15:10:26:0e:cc:09:f3:49:0f:a0:1c: ce:b4:2f:c0:79:2c:75:b5:65:1a:af:90:e7:dc:f0: 6a:45:f6:65:5f:e0:9c:b4:9e:ae:dd:08:c7:a6:70: 18:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:29:BC:1C:80:82:15:10:F0:99:12:D3:F9:4E:20:0B:F1:E5:F5:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:3d:d8:29:e3:b6:83:37:74:5d:23:f4:ca:01:46:88:c0:fa: 30:30:e9:21:f0:e4:e3:24:64:87:13:32:ef:a2:34:5b:82:55: b7:63:43:7f:55:f0:aa:6a:af:76:b7:e8:f8:c1:64:bc:29:27: ce:77:b1:f4:18:64:30:cc:eb:4f:44:e1:36:52:c3:0d:45:80: 67:30:6a:7a:67:88:61:60:ca:6d:0b:f7:d5:b7:ed:63:0d:0f: fc:ca:9b:3a:d7:28:b3:c3:d5:be:b6:df:15:70:41:11:f2:70: 63:e1:bd:10:62:96:7a:0e:84:2d:09:99:02:a0:ba:a9:0f:84: 54:be:b7:a0:3d:59:b9:a9:76:6f:15:3c:e4:60:e5:f1:42:5d: 42:8c:dd:25:5b:60:d1:6c:53:35:7f:fc:92:16:9e:f0:7f:59: 1a:a9:79:c5:2d:1d:46:e3:ce:18:de:f5:bf:38:eb:8e:8a:89: b2:e1:e1:5c:da:f7:c8:7b:4f:c2:d0:1d:85:61:c7:a9:be:f7: 31:2b:9d:f4:1b:a6:a5:d4:68:cc:84:46:40:79:77:31:2f:cd: 53:24:c0:09:b2:98:21:58:20:29:fd:0b:9c:0c:bc:af:1e:26: e9:da:39:50:ca:3d:2f:20:43:57:58:9b:a0:ff:3a:07:e1:e5: 49:0a:ae:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUEUSwlNxz41DkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzZhMWRhY2MtY2QwOS00ZjE3LThlYmEtMDYwNDc1NDNkM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvvzXA2e7cLXnQRip2SiBXJt7DOoWjgWYqSD REzubpFIkHVV3PRHXVheqi5KyNdAg9OhLCgwvXYxzW5kpnZkXazuq9z+kfuNd1Na 7yZ5G/DaSWJyW+0K41ya7qLu0Ljefh2xg5vMm3V/rMTGkW67YAYW+/56xzEy5VMR du3Miw60LVpmBWvVjitwIvPSIPDtHOXxb4uMVRAxGi/VTLQLmrvozxtNf+WId+Tg W6hM1SbdqkKyxH/JBpZ0C64xcwokvmW11eX04apyArtEyFGF/6Sfo7vXFRAmDswJ 80kPoBzOtC/AeSx1tWUar5Dn3PBqRfZlX+CctJ6u3QjHpnAY5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcpvByAghUQ8JkS0/lOIAvx5fUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTA1MDljNDYtMDQ4MS0z MzVlLTlhYmYtNTcwNWFlMmNlMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc92CnjtoM3dF0j9MoBRojA+jAw6SHw5OMkZIcTMu+iNFuCVbdjQ39V 8Kpqr3a36PjBZLwpJ853sfQYZDDM609E4TZSww1FgGcwanpniGFgym0L99W37WMN D/zKmzrXKLPD1b623xVwQRHycGPhvRBilnoOhC0JmQKguqkPhFS+t6A9Wbmpdm8V PORg5fFCXUKM3SVbYNFsUzV//JIWnvB/WRqpecUtHUbjzhje9b84646KibLh4Vza 98h7T8LQHYVhx6m+9zErnfQbpqXUaMyERkB5dzEvzVMkwAmymCFYICn9C5wMvK8e JunaOVDKPS8gQ1dYm6D/Ogfh5UkKrnk= -----END CERTIFICATE-----Generated at Wed Oct 22 13:02:52 2025 by rpki-client