$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55abceef-df30-306e-9d07-b819061ccc81.roa File: 55abceef-df30-306e-9d07-b819061ccc81.roa (raw, json) Hash identifier: XQETCrWSwq8QfqNaISLX5DdXB0peFTOxhPYebOJfUXY= Subject key identifier: FA:32:F7:D0:BD:DA:29:25:7B:95:DA:DA:04:8C:6D:77:11:80:A1:AE Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCB29645794F720978D080 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55abceef-df30-306e-9d07-b819061ccc81.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 202 IP address blocks: 20.149.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b2:96:45:79:4f:72:09:78:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=78670371-9660-4456-b649-c824f7c1b5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:f5:c0:ad:95:8f:4b:bd:03:dd:96:5a:d4: bf:71:87:8a:6b:90:f4:91:bd:31:2d:94:06:2a:0e: c1:4a:94:a4:45:34:cb:3b:b0:de:bd:30:00:f3:f0: 2b:98:91:9e:0b:f6:46:e5:25:24:e7:8c:4d:fc:54: 79:b5:f8:19:30:b8:c6:3b:f2:15:66:fe:3f:3f:67: 6b:a3:8a:e7:c7:11:40:1e:08:55:63:dc:62:1b:ba: dc:d0:b1:a9:62:e2:19:f4:c7:2b:9e:d4:25:b4:5a: 1e:08:18:5f:3a:15:4f:09:c4:43:11:bf:a8:4a:dd: 76:6f:ed:dd:11:2b:46:8a:25:60:a2:be:49:44:fb: f4:d1:eb:bb:9f:99:8d:6f:39:76:5e:6e:c2:38:29: 2b:53:06:ec:54:68:b2:63:ab:90:0e:9a:93:a8:0e: 20:2f:39:9b:5b:53:4b:4c:31:6d:0c:f1:e9:06:e8: 43:d3:21:a2:9d:46:11:9e:c0:ed:8d:8a:50:0b:95: eb:f3:0a:5e:d0:50:5c:40:42:63:69:1a:8c:11:45: b7:cc:6f:6d:1f:35:ce:d3:a3:6c:b7:f1:04:5c:b2: 46:8c:1a:f8:d7:08:6d:e0:95:ef:c8:21:89:da:3d: 24:a0:59:0e:97:69:6f:b8:d5:5d:d2:32:90:d1:ed: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:32:F7:D0:BD:DA:29:25:7B:95:DA:DA:04:8C:6D:77:11:80:A1:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55abceef-df30-306e-9d07-b819061ccc81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:39:58:fd:6e:2d:0d:a3:85:3c:85:cf:c3:42:ac:a2:c4:f5: bd:51:46:76:b5:e6:b9:75:92:c6:59:c1:55:e1:19:5a:04:42: bc:da:63:c9:cc:41:b3:ff:7e:25:b7:b6:6a:b8:29:46:3f:7d: 06:fc:36:f6:d8:2a:59:88:38:43:ae:ad:78:d0:6b:7e:ed:a9: a5:4c:4e:06:80:cb:c3:2f:2e:54:99:c6:c2:2b:49:a8:b1:0b: e9:90:ea:a6:c1:fa:7d:9e:c4:9d:e0:f8:65:f4:34:83:c4:6e: 7e:d7:31:fc:c3:66:76:b7:a7:f7:4a:ac:10:57:31:11:8a:e8: ac:2b:b7:4e:78:87:7d:b3:44:f3:d4:be:c6:4d:c0:cd:5c:c9: b8:c6:c4:75:6f:09:6a:77:f8:64:48:b3:cb:83:c7:fb:5a:67: 1b:dc:69:e0:45:0b:34:31:ca:2f:e5:82:60:ee:10:95:59:a5: 64:e0:be:42:8b:43:e6:19:f3:d4:ee:ea:8f:58:4e:0d:82:b8: 81:cb:14:1b:00:c6:14:c5:65:ee:9c:45:20:37:7b:3c:f1:30: f3:a8:c5:d5:5c:2c:4b:30:a5:82:12:36:43:8a:99:f7:e0:e3: 57:9f:9c:8d:ff:59:68:d7:ed:5f:5b:80:fb:2f:cb:4c:17:21: 05:9f:35:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLKWRXlPcgl40IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk Nzg2NzAzNzEtOTY2MC00NDU2LWI2NDktYzgyNGY3YzFiNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooL1wK2Vj0u9A92WWtS/cYeKa5D0kb0xLZQG Kg7BSpSkRTTLO7DevTAA8/ArmJGeC/ZG5SUk54xN/FR5tfgZMLjGO/IVZv4/P2dr o4rnxxFAHghVY9xiG7rc0LGpYuIZ9McrntQltFoeCBhfOhVPCcRDEb+oSt12b+3d EStGiiVgor5JRPv00eu7n5mNbzl2Xm7COCkrUwbsVGiyY6uQDpqTqA4gLzmbW1NL TDFtDPHpBuhD0yGinUYRnsDtjYpQC5Xr8wpe0FBcQEJjaRqMEUW3zG9tHzXO06Ns t/EEXLJGjBr41wht4JXvyCGJ2j0koFkOl2lvuNVd0jKQ0e2tDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoy99C92ikle5Xa2gSMbXcRgKGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTVhYmNlZWYtZGYzMC0z MDZlLTlkMDctYjgxOTA2MWNjYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE5WP1uLQ2jhTyFz8NCrKLE9b1RRna15rl1ksZZwVXhGVoEQrzaY8nM QbP/fiW3tmq4KUY/fQb8NvbYKlmIOEOurXjQa37tqaVMTgaAy8MvLlSZxsIrSaix C+mQ6qbB+n2exJ3g+GX0NIPEbn7XMfzDZna3p/dKrBBXMRGK6Kwrt054h32zRPPU vsZNwM1cybjGxHVvCWp3+GRIs8uDx/taZxvcaeBFCzQxyi/lgmDuEJVZpWTgvkKL Q+YZ89Tu6o9YTg2CuIHLFBsAxhTFZe6cRSA3ezzxMPOoxdVcLEswpYISNkOKmffg 41efnI3/WWjX7V9bgPsvy0wXIQWfNXE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:26:17 2025 by rpki-client