$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/32163c6d-537a-3a41-8227-c09c400f5f50.roa File: 32163c6d-537a-3a41-8227-c09c400f5f50.roa (raw, json) Hash identifier: vI4V0bT6u2MeYt78f8DKVQmfdqhShwjlubLUrNGYJEg= Subject key identifier: B6:E2:D7:C7:C7:C9:D0:84:0D:83:52:BA:01:48:BE:37:54:07:A9:04 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D179FDA3BFA66A01A36C1C0 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/32163c6d-537a-3a41-8227-c09c400f5f50.roa Signing time: Thu 18 Sep 2025 19:39:37 +0000 ROA not before: Thu 18 Sep 2025 19:39:37 +0000 ROA not after: Wed 17 Dec 2025 20:39:37 +0000 asID: 11377 IP address blocks: 216.20.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:9f:da:3b:fa:66:a0:1a:36:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:37 2025 GMT Not After : Dec 17 20:39:37 2025 GMT Subject: CN=0edc8211-1535-4928-b23a-5d95ace50c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:51:73:51:3b:36:a3:b6:1f:5e:7a:fe:90:e2: a1:9a:10:f3:2b:5b:b1:ce:8d:b9:31:9f:47:34:70: 4a:38:d2:26:fe:5d:e3:8a:f9:7c:d3:55:40:fb:6e: ea:38:67:f6:72:d5:d5:f2:59:c2:fc:d4:50:30:af: 60:0e:a7:e2:39:10:5f:dc:86:d0:70:5d:6f:e5:fa: 7b:e2:f5:a7:0a:3d:d3:89:bb:37:82:2b:ac:7e:ab: d3:7d:fa:6c:0d:e8:24:45:67:ca:7f:a3:70:56:9e: 56:55:90:c0:77:44:81:26:ec:49:ae:9d:ca:93:f9: 15:f8:92:05:3b:2b:0f:81:4c:59:36:ab:b2:93:b4: 34:ea:14:a0:06:05:45:52:a5:6b:ec:ff:1c:2f:47: 65:f1:45:3d:0a:80:63:34:77:2e:d6:09:dd:1d:bd: a5:71:02:9e:0d:04:35:5a:65:d3:48:b3:52:aa:b9: 1a:fa:4f:30:2e:41:a6:17:16:1e:07:44:13:73:a8: 59:2a:98:39:db:62:bf:83:97:7d:88:67:52:3f:65: 2e:b1:66:ba:73:8c:fa:e1:ff:30:de:18:b2:d2:dd: 52:70:67:3e:6a:be:6f:9a:b2:7f:94:b3:f5:ff:9f: 2c:45:96:ed:ca:ce:2e:91:ca:b5:71:23:ce:61:b6: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E2:D7:C7:C7:C9:D0:84:0D:83:52:BA:01:48:BE:37:54:07:A9:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/32163c6d-537a-3a41-8227-c09c400f5f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3f:54:36:63:7d:01:76:ea:b1:ed:8c:fc:67:99:71:ea:71: cb:77:d1:77:8e:f1:98:37:d0:f8:ee:29:d6:3d:ba:b7:33:13: ee:11:22:ac:e3:b5:53:24:03:82:50:b5:a8:e2:4c:56:84:1c: e9:6c:54:60:72:3c:11:db:66:49:2d:24:16:c0:6d:a3:cc:56: dd:00:ee:bb:c2:47:77:62:9f:84:01:97:9f:6b:40:8c:18:bf: 64:1b:85:cb:11:f6:b9:07:f8:6f:39:ab:d7:02:3c:7b:e5:bc: 11:34:3d:a7:88:02:0b:44:5f:56:4c:0b:cf:a7:72:f1:ab:e1: 79:f5:80:74:75:df:38:87:4f:46:8e:ce:b4:5e:a7:42:7e:be: e6:bf:b8:89:14:92:e8:94:9f:d5:ab:26:5e:eb:29:67:7e:31: fa:01:5c:c4:29:0e:80:bb:a6:47:9c:90:ae:bb:d8:03:8b:9a: 9d:54:46:39:72:2e:b9:58:b0:4b:05:2e:bb:ef:8d:e7:47:c5: 44:5c:53:76:21:01:16:54:aa:f7:48:43:d7:b6:62:ec:f9:77: 94:5e:0f:fe:12:d7:0e:fc:f7:97:13:df:1c:52:4b:3f:d4:d7: 0c:7e:72:06:29:8b:3c:3a:a8:6a:1b:df:a7:10:20:8d:5a:a9: 5d:ff:f3:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F5/aO/pmoBo2wcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5MzkzN1oXDTI1MTIxNzIwMzkzN1owLzEtMCsGA1UEAxMk MGVkYzgyMTEtMTUzNS00OTI4LWIyM2EtNWQ5NWFjZTUwYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91FzUTs2o7YfXnr+kOKhmhDzK1uxzo25MZ9H NHBKONIm/l3jivl801VA+27qOGf2ctXV8lnC/NRQMK9gDqfiORBf3IbQcF1v5fp7 4vWnCj3Tibs3giusfqvTffpsDegkRWfKf6NwVp5WVZDAd0SBJuxJrp3Kk/kV+JIF OysPgUxZNquyk7Q06hSgBgVFUqVr7P8cL0dl8UU9CoBjNHcu1gndHb2lcQKeDQQ1 WmXTSLNSqrka+k8wLkGmFxYeB0QTc6hZKpg522K/g5d9iGdSP2UusWa6c4z64f8w 3hiy0t1ScGc+ar5vmrJ/lLP1/58sRZbtys4ukcq1cSPOYba4IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbi18fHydCEDYNSugFIvjdUB6kEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMzIxNjNjNmQtNTM3YS0z YTQxLTgyMjctYzA5YzQwMGY1ZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ/VDZjfQF26rHtjPxnmXHqcct30XeO8Zg30PjuKdY9urczE+4RIqzj tVMkA4JQtajiTFaEHOlsVGByPBHbZkktJBbAbaPMVt0A7rvCR3din4QBl59rQIwY v2QbhcsR9rkH+G85q9cCPHvlvBE0PaeIAgtEX1ZMC8+ncvGr4Xn1gHR13ziHT0aO zrRep0J+vua/uIkUkuiUn9WrJl7rKWd+MfoBXMQpDoC7pkeckK672AOLmp1URjly LrlYsEsFLrvvjedHxURcU3YhARZUqvdIQ9e2Yuz5d5ReD/4S1w7895cT3xxSSz/U 1wx+cgYpizw6qGob36cQII1aqV3/8xI= -----END CERTIFICATE-----Generated at Fri Sep 19 13:08:40 2025 by rpki-client