$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa File: 20885ce4-5a76-39c3-86d6-c90d2b265830.roa (raw, json) Hash identifier: ipSFzzHeOcaJShRU/Aqx+L+l9gPM+jCMWP/RCwruGdI= Subject key identifier: 24:7C:A5:D9:CC:BE:B0:5F:1E:1C:33:B6:F8:29:3A:02:38:15:BC:A8 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584B0B76AFE041F3AC6C32012080 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 394285 IP address blocks: 174.137.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:af:e0:41:f3:ac:6c:32:01:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=7d1f02d7-4232-450f-9253-d6112e9af521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:0d:a0:ff:fc:13:ca:49:52:ed:ca:b3:d6: 8d:94:7e:05:78:98:51:a4:d6:27:cc:9c:ca:8a:64: 4e:b9:6a:ed:97:4e:27:cb:f6:89:33:4e:2d:04:61: 87:1f:7c:4e:f4:00:05:c9:5e:3d:7f:0d:45:26:7b: c9:26:da:77:42:72:91:5d:c2:8b:44:89:a9:47:06: d5:68:d6:c6:2a:22:61:d9:69:16:6a:9c:5d:78:da: 55:58:68:1b:64:f6:a5:23:f9:30:56:33:e1:9a:c9: 29:54:3f:9d:0f:81:4a:29:bb:8a:d9:de:f6:57:da: 8a:d7:02:24:92:85:ba:5d:57:cf:2c:3f:dc:80:12: aa:85:a6:cf:c5:8e:5b:df:85:10:97:67:98:58:63: 2c:e2:de:30:75:c3:1c:4e:e9:a8:01:bc:29:da:e1: f3:b6:b9:73:c9:60:ab:70:a9:d3:04:dc:17:d5:b8: 6c:3c:64:cb:08:af:bc:99:8e:be:62:48:8e:0c:78: f3:52:f4:f8:6b:b4:32:f2:34:98:b6:78:e6:d7:d1: 43:d5:42:6a:cd:8a:b3:95:c2:3c:30:a1:a3:e2:58: 00:ee:25:5b:e0:9f:2f:a3:8e:78:87:0f:0d:cf:ef: 00:ef:f8:0b:3c:1e:7b:c1:36:5a:3c:b4:31:cf:f7: c8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7C:A5:D9:CC:BE:B0:5F:1E:1C:33:B6:F8:29:3A:02:38:15:BC:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:32:e1:ba:f8:b5:ac:3c:b8:ec:93:a8:19:cb:fe:63:e4:4f: 93:cb:d9:b5:f4:d4:82:fe:84:60:44:51:d5:c4:c6:78:1c:68: 08:0c:01:ab:3a:3d:01:e0:3c:7e:8f:74:84:5e:00:b0:91:c4: 7a:e5:5b:c5:a7:5d:41:25:07:88:d3:10:d9:3a:90:89:a5:45: b0:08:f2:9b:21:18:b5:cd:bf:b8:59:a3:2f:37:28:d8:fa:e5: b0:4c:6c:ba:4e:68:86:a4:34:bb:3b:4b:c7:cb:a8:99:87:66: 5f:5f:ad:ab:5d:c5:ca:d3:7c:64:c8:ad:c8:73:a2:18:4b:53: 07:c3:71:64:7e:68:4d:ad:48:fe:be:59:4b:74:d3:83:29:42: 5e:1b:95:7a:77:ce:b1:b1:54:b3:4b:99:5f:a2:cb:2c:43:15: 50:34:40:f9:ee:3e:56:47:b3:b2:0b:45:c7:fe:dc:40:bc:57: 5f:7f:6c:fb:10:b7:43:41:27:85:6b:85:63:92:83:34:51:3d: 7e:49:42:df:b6:e6:d9:44:af:55:48:3e:54:7f:b1:7b:ef:b1: cd:26:43:9c:7d:56:27:7a:8d:1a:e5:4f:92:25:31:d1:12:3a: 54:59:48:2e:b2:e4:1c:9e:ed:21:84:e8:63:4a:a7:b6:8a:03: 11:2f:ca:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq/gQfOsbDIBIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk N2QxZjAyZDctNDIzMi00NTBmLTkyNTMtZDYxMTJlOWFmNTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+8NoP/8E8pJUu3Ks9aNlH4FeJhRpNYnzJzK imROuWrtl04ny/aJM04tBGGHH3xO9AAFyV49fw1FJnvJJtp3QnKRXcKLRImpRwbV aNbGKiJh2WkWapxdeNpVWGgbZPalI/kwVjPhmskpVD+dD4FKKbuK2d72V9qK1wIk koW6XVfPLD/cgBKqhabPxY5b34UQl2eYWGMs4t4wdcMcTumoAbwp2uHztrlzyWCr cKnTBNwX1bhsPGTLCK+8mY6+YkiODHjzUvT4a7Qy8jSYtnjm19FD1UJqzYqzlcI8 MKGj4lgA7iVb4J8vo454hw8Nz+8A7/gLPB57wTZaPLQxz/fI3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR8pdnMvrBfHhwztvgpOgI4FbyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMjA4ODVjZTQtNWE3Ni0z OWMzLTg2ZDYtYzkwZDJiMjY1ODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArolkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwy4br4taw8uOyTqBnL/mPkT5PL2bX01IL+hGBEUdXExngcaAgMAas6 PQHgPH6PdIReALCRxHrlW8WnXUElB4jTENk6kImlRbAI8pshGLXNv7hZoy83KNj6 5bBMbLpOaIakNLs7S8fLqJmHZl9fratdxcrTfGTIrchzohhLUwfDcWR+aE2tSP6+ WUt004MpQl4blXp3zrGxVLNLmV+iyyxDFVA0QPnuPlZHs7ILRcf+3EC8V19/bPsQ t0NBJ4VrhWOSgzRRPX5JQt+25tlEr1VIPlR/sXvvsc0mQ5x9Vid6jRrlT5IlMdES OlRZSC6y5Bye7SGE6GNKp7aKAxEvyr8= -----END CERTIFICATE-----Generated at Fri Sep 19 12:48:58 2025 by rpki-client