$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3c1034bb-6f35-33bc-bfd1-327b7c6a59bf.roa File: 3c1034bb-6f35-33bc-bfd1-327b7c6a59bf.roa (raw, json) Hash identifier: 3UQbLkZ963gvNcJrBZPgw2Clx1xhow0nFYh5HGUjLHw= Subject key identifier: 29:52:74:FE:2F:5E:48:3E:11:1E:6A:52:96:9D:A8:D5:8D:B4:76:82 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B3556ED87AF9D94E88F047858 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3c1034bb-6f35-33bc-bfd1-327b7c6a59bf.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 202 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ed:87:af:9d:94:e8:8f:04:78:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=a3095841-c610-44f8-a91b-14a47bcf8160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b9:cf:e1:22:ef:0c:31:58:75:d7:f3:cd:89: 79:2e:4a:7d:f4:ac:fd:57:81:06:d7:ad:4b:4f:6b: 96:8b:62:87:65:31:b7:dc:c0:34:5e:dc:04:f4:dc: 25:fd:97:26:65:8f:76:c9:5b:bb:c0:ce:de:67:3a: a3:4c:7c:93:7c:1e:2a:4d:f2:94:6d:ec:59:96:11: 7b:58:d6:1c:b4:e6:e7:e7:c1:84:2a:52:08:f4:63: f3:28:d3:34:91:08:26:6d:e2:8c:f7:32:6c:e1:4d: f3:cb:aa:09:bf:a8:f5:0f:97:09:22:30:68:5d:30: 0a:ab:86:83:08:39:1f:2d:86:de:12:ef:e7:c3:0f: 07:f9:b7:92:87:36:77:30:08:76:c5:9b:69:53:a7: b3:4d:63:5a:3b:8d:7c:3a:ea:80:16:b8:33:db:54: ff:e4:c4:54:ec:56:9d:05:c1:6b:99:d1:ee:62:0b: 08:14:d9:fa:73:dc:4c:ca:70:69:dc:b8:b0:d5:5e: a8:99:da:e1:ce:74:3c:ef:24:ee:2e:e4:29:ca:88: 06:3f:97:5b:b9:a0:59:50:54:ff:35:22:15:57:b0: f9:1a:07:e3:ac:19:7e:4c:3e:ad:55:32:9a:fd:8e: d6:79:51:61:e1:da:85:8b:f9:e1:dd:9a:c3:ff:68: 91:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:52:74:FE:2F:5E:48:3E:11:1E:6A:52:96:9D:A8:D5:8D:B4:76:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3c1034bb-6f35-33bc-bfd1-327b7c6a59bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:04:ba:05:7a:56:2a:d8:a1:d0:de:27:fc:57:c3:22:1d:ad: 04:d2:e9:33:72:49:99:c7:a1:60:11:7f:ac:32:42:2b:22:d0: f1:c8:88:9c:33:3a:49:3a:93:d1:ee:b1:19:f0:c8:0b:00:83: 4b:9a:a7:3a:f9:32:c0:02:5c:52:f3:c6:05:7f:a7:d1:a1:5f: ce:46:e4:f2:d8:f3:bd:c3:48:f8:b3:bb:09:46:c7:22:ba:87: 21:03:5c:7e:fd:71:67:46:f2:80:b3:85:c8:a0:28:64:55:e6: 63:39:f6:b1:a3:5f:76:fa:57:0b:69:59:b6:80:7e:f4:cb:cd: f3:70:07:46:7c:6e:39:ee:10:4a:61:45:45:cd:68:9b:31:ed: e8:8d:58:a3:97:6d:41:7f:a7:ce:32:bd:79:e2:4c:22:22:09: 33:0b:0d:8f:ac:e2:a5:7b:ab:b0:e7:e4:97:73:3a:61:6e:1f: 63:ec:ef:7b:41:64:43:40:32:18:6a:62:ea:eb:cf:f6:ca:84: 19:38:a0:7e:a8:a9:20:8b:00:f9:68:3b:ca:03:4a:40:98:b6: 86:9c:b9:59:48:f4:ff:cd:ba:c0:9c:b1:3f:4a:de:95:e1:cf: 65:0f:1f:9f:55:9d:c7:0e:bd:13:3f:fc:3e:b8:48:f2:b0:fa: e0:1b:9e:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vu2Hr52U6I8EeFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YTMwOTU4NDEtYzYxMC00NGY4LWE5MWItMTRhNDdiY2Y4MTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7nP4SLvDDFYddfzzYl5Lkp99Kz9V4EG161L T2uWi2KHZTG33MA0XtwE9Nwl/ZcmZY92yVu7wM7eZzqjTHyTfB4qTfKUbexZlhF7 WNYctObn58GEKlII9GPzKNM0kQgmbeKM9zJs4U3zy6oJv6j1D5cJIjBoXTAKq4aD CDkfLYbeEu/nww8H+beShzZ3MAh2xZtpU6ezTWNaO418OuqAFrgz21T/5MRU7Fad BcFrmdHuYgsIFNn6c9xMynBp3Liw1V6omdrhznQ87yTuLuQpyogGP5dbuaBZUFT/ NSIVV7D5GgfjrBl+TD6tVTKa/Y7WeVFh4dqFi/nh3ZrD/2iRBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClSdP4vXkg+ER5qUpadqNWNtHaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2MxMDM0YmItNmYzNS0z M2JjLWJmZDEtMzI3YjdjNmE1OWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwEugV6VirYodDeJ/xXwyIdrQTS6TNySZnHoWARf6wyQisi0PHIiJwz Okk6k9HusRnwyAsAg0uapzr5MsACXFLzxgV/p9GhX85G5PLY873DSPizuwlGxyK6 hyEDXH79cWdG8oCzhcigKGRV5mM59rGjX3b6VwtpWbaAfvTLzfNwB0Z8bjnuEEph RUXNaJsx7eiNWKOXbUF/p84yvXniTCIiCTMLDY+s4qV7q7Dn5JdzOmFuH2Ps73tB ZENAMhhqYurrz/bKhBk4oH6oqSCLAPloO8oDSkCYtoacuVlI9P/NusCcsT9K3pXh z2UPH59VnccOvRM//D64SPKw+uAbnvs= -----END CERTIFICATE-----Generated at Mon Oct 20 04:26:28 2025 by rpki-client