$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa File: 24f0832c-135e-30d8-934a-392b9947dce4.roa (raw, json) Hash identifier: b3iUOYfR340spsrdwXXZTQuEOvI6u5jIufgmjAn8L7c= Subject key identifier: 33:36:B0:B7:EB:42:44:CA:70:F1:03:C4:6C:FE:3A:8A:40:58:53:11 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B52A754D0222A3A8769F60F00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 3360 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:54:d0:22:2a:3a:87:69:f6:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=c3279d61-9013-44c9-a968-0b2a0cac8f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:31:fe:7c:9a:cd:d4:5b:26:6d:a9:2c:26: 6c:32:24:3d:b2:aa:a2:49:4e:f5:d8:f9:7d:f5:fd: 3b:ca:a7:73:d3:ca:48:38:ed:48:7c:60:65:c9:d6: b0:64:c9:3d:9e:da:cb:3f:38:7c:d2:4a:3e:e4:86: c5:0e:db:f4:1b:0d:2b:e7:cf:da:0b:26:66:91:02: 9b:7d:ac:94:c6:57:c1:15:1b:19:06:94:0a:31:48: ba:dc:48:77:53:7b:2d:7d:81:24:c2:b6:5d:71:28: b7:eb:7e:fc:8a:7b:71:70:03:8d:a0:71:55:ec:1d: 86:75:d8:10:d5:83:06:0e:c9:63:50:43:1c:a1:61: 6b:26:81:57:1f:22:fc:15:f1:48:85:96:fa:1f:8c: e4:34:bb:23:50:ea:05:3a:3a:89:ff:81:a2:55:06: 14:b8:e5:dd:ea:e9:98:dd:b1:9c:ac:5e:7d:36:17: d9:cd:a5:6d:e2:50:42:15:ff:b6:34:6b:29:e7:ef: 7e:21:60:e8:7c:ae:be:a1:61:16:7a:63:b9:c7:01: c0:e5:f7:67:ce:ff:9b:a8:52:c1:18:35:1a:17:28: db:7f:c2:bb:c1:ea:f5:0f:d2:fa:0e:68:20:03:db: 25:a8:9a:f2:c5:aa:db:77:2a:a0:62:a3:93:42:56: aa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:36:B0:B7:EB:42:44:CA:70:F1:03:C4:6C:FE:3A:8A:40:58:53:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:36:cf:ac:19:12:0d:bc:ce:b6:9c:80:49:69:08:55:85:28: 87:86:b8:32:f6:97:64:6f:7c:7e:2a:8c:fe:1f:2c:00:53:ad: 35:e9:ba:d2:9c:9b:16:29:87:6b:86:b0:97:58:a0:50:96:18: 7c:15:16:0c:43:b5:1e:ae:d6:bd:f1:92:80:22:cf:b8:ed:34: 38:ed:ee:52:79:f6:56:16:af:50:89:43:14:32:b4:2a:9e:28: da:4c:f5:0b:33:41:8a:ec:64:e3:c4:e8:46:05:51:ab:99:d5: 6d:73:36:f0:ed:28:98:bf:7b:8a:52:a9:f7:23:b7:de:88:4c: a7:46:8b:f1:6a:8a:47:0f:4b:35:e9:1c:aa:c0:b0:40:5b:b6: f6:5d:e9:c0:7c:08:3a:f2:37:c9:34:fd:90:a1:21:0d:4d:b9: 6a:d2:1a:82:e1:40:53:08:c2:ee:dc:88:71:f7:40:82:44:ee: 49:16:ef:84:a1:0e:0d:2b:12:70:0a:84:49:46:df:11:81:ba: d8:be:b3:1f:3a:7c:31:f3:e9:ae:6a:ef:7c:1f:f9:7c:a2:19: 09:52:02:1b:7a:5c:e4:a4:94:58:b9:10:a1:51:3d:ca:18:5b: 97:f9:8d:e2:4f:7e:01:f6:70:8c:ee:1d:d8:0f:bf:1c:21:58: 75:15:f3:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1TQIio6h2n2DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YzMyNzlkNjEtOTAxMy00NGM5LWE5NjgtMGIyYTBjYWM4ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIgx/nyazdRbJm2pLCZsMiQ9sqqiSU712Pl9 9f07yqdz08pIOO1IfGBlydawZMk9ntrLPzh80ko+5IbFDtv0Gw0r58/aCyZmkQKb fayUxlfBFRsZBpQKMUi63Eh3U3stfYEkwrZdcSi36378intxcAONoHFV7B2GddgQ 1YMGDsljUEMcoWFrJoFXHyL8FfFIhZb6H4zkNLsjUOoFOjqJ/4GiVQYUuOXd6umY 3bGcrF59NhfZzaVt4lBCFf+2NGsp5+9+IWDofK6+oWEWemO5xwHA5fdnzv+bqFLB GDUaFyjbf8K7wer1D9L6DmggA9slqJryxarbdyqgYqOTQlaqXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM2sLfrQkTKcPEDxGz+OopAWFMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjRmMDgzMmMtMTM1ZS0z MGQ4LTkzNGEtMzkyYjk5NDdkY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo2z6wZEg28zracgElpCFWFKIeGuDL2l2RvfH4qjP4fLABTrTXputKc mxYph2uGsJdYoFCWGHwVFgxDtR6u1r3xkoAiz7jtNDjt7lJ59lYWr1CJQxQytCqe KNpM9QszQYrsZOPE6EYFUauZ1W1zNvDtKJi/e4pSqfcjt96ITKdGi/FqikcPSzXp HKrAsEBbtvZd6cB8CDryN8k0/ZChIQ1NuWrSGoLhQFMIwu7ciHH3QIJE7kkW74Sh Dg0rEnAKhElG3xGButi+sx86fDHz6a5q73wf+XyiGQlSAht6XOSklFi5EKFRPcoY W5f5jeJPfgH2cIzuHdgPvxwhWHUV8xU= -----END CERTIFICATE-----Generated at Mon Oct 20 04:59:34 2025 by rpki-client