$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/196e1976-14cd-3c8e-933a-dac31649a3e1.roa File: 196e1976-14cd-3c8e-933a-dac31649a3e1.roa (raw, json) Hash identifier: XHvSdnpFhwLRCOa5cjCsQoh66sGfmXdpVeUJQ8h3bMg= Subject key identifier: BE:44:7A:A6:D3:48:DA:44:59:18:9C:A6:53:96:95:F8:63:3B:CE:6C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B3556EE88AB41CB0BAEE44380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/196e1976-14cd-3c8e-933a-dac31649a3e1.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 203 IP address blocks: 20.137.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ee:88:ab:41:cb:0b:ae:e4:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=0b0714fc-5fff-4e00-84cc-b90f4f0a097a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9f:56:30:db:c4:85:a3:da:c1:43:31:53:a3: 15:3d:27:66:97:15:aa:47:04:9f:98:09:2f:e8:16: b1:b5:1a:3d:a9:4c:dc:63:92:70:33:2f:19:b5:34: 64:6e:46:6c:9d:16:72:93:d3:3a:77:fc:b2:6d:58: 1b:2b:35:f9:a7:eb:15:c9:2a:5d:bb:05:7c:72:9b: d6:b4:74:a2:54:ae:50:b1:22:53:ea:72:8b:66:bd: 6a:4f:43:28:10:65:be:22:44:cf:73:36:d2:cd:8d: 6f:26:d3:e4:1a:9b:a1:b5:69:7e:f7:44:bd:87:dd: d9:47:1f:3a:0a:d5:67:68:b3:2b:48:03:43:df:ad: 62:52:d2:dd:fc:af:5d:88:1e:be:a5:f0:98:6f:f9: 93:e5:b5:c0:cd:7f:f0:3f:e3:ac:80:f7:c5:43:e2: 30:71:1f:d7:5d:82:d4:6f:ad:98:9e:ec:95:02:04: 14:fc:51:63:b8:79:29:1a:15:ab:7a:55:57:2c:08: a3:16:36:2d:68:b0:8f:2b:bf:c2:ad:5d:89:c2:bd: 45:95:7a:f7:c3:88:0d:86:fa:bf:40:73:65:d3:ad: 23:e9:94:a0:26:10:1b:d7:9f:5a:6d:3b:f8:23:79: 29:eb:cc:66:8b:81:7a:da:2d:9a:50:22:f0:46:09: 10:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:44:7A:A6:D3:48:DA:44:59:18:9C:A6:53:96:95:F8:63:3B:CE:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/196e1976-14cd-3c8e-933a-dac31649a3e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7c:b9:74:a2:dc:7e:64:cf:a2:24:e8:da:fb:02:c4:5e:30: be:d1:d5:1d:e2:14:b0:90:14:f4:63:b4:4a:00:85:8b:da:64: 10:f3:46:78:ad:f1:a5:8e:63:67:ce:7b:83:ab:4b:fa:ad:7c: 81:ac:4d:46:8f:6a:c5:d5:85:b2:67:f6:d9:88:fb:20:2a:60: cd:97:fd:a9:80:cc:db:fe:b2:c9:53:67:a5:02:bb:3d:08:9f: ee:a6:b4:87:8b:a8:cd:cf:82:28:c9:38:b2:3f:3b:6b:4b:6c: b0:62:1b:ec:25:49:38:c7:8a:b9:7c:36:d0:65:39:89:0b:c9: 5a:23:c8:38:2e:75:7a:f7:07:0d:13:32:e5:a7:69:76:bd:6e: 06:db:98:da:ce:53:3d:60:ab:ea:f0:5a:fd:bb:3d:b2:7a:92: ac:84:ef:0a:62:3a:24:f0:e0:f8:c9:72:19:6a:25:a8:14:f2: 8b:c7:f8:b1:b8:a4:f3:0f:1f:db:a8:de:4a:0a:8d:a2:35:39: 11:db:16:37:1e:fa:8c:71:23:72:12:3c:24:0a:a8:0a:00:de: e8:05:97:4b:1b:f7:5e:55:ae:03:e4:ed:79:e1:01:e2:22:af: 37:f9:38:9c:8b:dc:5d:34:97:bc:74:37:7d:b0:f4:cf:50:c4: aa:4d:90:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vu6Iq0HLC67kQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MGIwNzE0ZmMtNWZmZi00ZTAwLTg0Y2MtYjkwZjRmMGEwOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ9WMNvEhaPawUMxU6MVPSdmlxWqRwSfmAkv 6BaxtRo9qUzcY5JwMy8ZtTRkbkZsnRZyk9M6d/yybVgbKzX5p+sVySpduwV8cpvW tHSiVK5QsSJT6nKLZr1qT0MoEGW+IkTPczbSzY1vJtPkGpuhtWl+90S9h93ZRx86 CtVnaLMrSAND361iUtLd/K9diB6+pfCYb/mT5bXAzX/wP+OsgPfFQ+IwcR/XXYLU b62YnuyVAgQU/FFjuHkpGhWrelVXLAijFjYtaLCPK7/CrV2Jwr1FlXr3w4gNhvq/ QHNl060j6ZSgJhAb159abTv4I3kp68xmi4F62i2aUCLwRgkQBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5EeqbTSNpEWRicplOWlfhjO85sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTk2ZTE5NzYtMTRjZC0z YzhlLTkzM2EtZGFjMzE2NDlhM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ8uXSi3H5kz6Ik6Nr7AsReML7R1R3iFLCQFPRjtEoAhYvaZBDzRnit 8aWOY2fOe4OrS/qtfIGsTUaPasXVhbJn9tmI+yAqYM2X/amAzNv+sslTZ6UCuz0I n+6mtIeLqM3PgijJOLI/O2tLbLBiG+wlSTjHirl8NtBlOYkLyVojyDgudXr3Bw0T MuWnaXa9bgbbmNrOUz1gq+rwWv27PbJ6kqyE7wpiOiTw4PjJchlqJagU8ovH+LG4 pPMPH9uo3koKjaI1ORHbFjce+oxxI3ISPCQKqAoA3ugFl0sb915VrgPk7XnhAeIi rzf5OJyL3F00l7x0N32w9M9QxKpNkDI= -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:04 2025 by rpki-client