$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ab1770b-ddcb-3aa3-93bc-b4a95ef6dee3.roa File: 7ab1770b-ddcb-3aa3-93bc-b4a95ef6dee3.roa (raw, json) Hash identifier: tLXlQpWzNE7R6kRrAQxK575Ee8CdbJcUu5mjmZpQuTc= Subject key identifier: 66:FA:53:4C:C9:49:CD:89:F8:6F:AD:EE:46:0C:D3:A1:4B:6D:BF:8A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B3556EDEBFB35D4249EF52060 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ab1770b-ddcb-3aa3-93bc-b4a95ef6dee3.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 203 IP address blocks: 20.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ed:eb:fb:35:d4:24:9e:f5:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=386dcff0-4025-44c8-95d5-0cfe10441108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:76:e1:c7:ad:9c:03:43:be:16:e1:52:2e:d4: 31:a6:13:b6:13:9c:84:54:a8:ab:d5:00:2a:d9:40: 45:7f:63:49:a1:69:a2:4e:9b:29:d1:35:0a:06:86: 66:12:09:7b:57:fe:64:26:ef:79:3f:90:01:33:d3: c7:c4:9e:84:03:30:a3:b6:eb:d4:6b:d1:ae:16:05: c6:2c:71:50:4d:e9:64:4a:ec:ef:74:9a:66:d8:b8: 94:f5:3c:69:51:45:60:28:9a:31:32:61:71:61:40: a1:ab:82:2b:07:6a:36:3e:12:77:5d:eb:47:4f:f3: 0d:38:69:0e:39:c8:e1:7b:a5:5f:11:21:fa:19:77: 60:db:00:e5:e8:db:06:42:52:fd:3a:de:07:ca:a1: 62:e2:3e:5a:cc:9f:f7:42:a7:f4:88:ca:0d:f6:d4: 88:f6:41:a2:31:58:4b:b5:8b:54:c3:76:af:f3:c3: 3f:fe:11:3d:60:da:1d:dc:d5:b2:dd:f5:d7:6c:1e: df:22:48:90:3d:43:54:3a:01:6e:67:48:6a:95:ef: 53:42:c4:84:4f:fc:12:f7:90:12:cf:35:fe:fe:4f: 9a:37:65:c5:80:c9:44:f9:7f:66:53:36:0d:f8:49: a6:dd:ff:25:a4:d7:5a:5a:5c:c8:34:de:eb:30:b6: 99:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FA:53:4C:C9:49:CD:89:F8:6F:AD:EE:46:0C:D3:A1:4B:6D:BF:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ab1770b-ddcb-3aa3-93bc-b4a95ef6dee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6c:6e:d8:27:98:24:47:96:01:d7:53:3c:7f:7e:fa:2d:fe: ba:62:a4:21:c0:c4:1f:e9:11:0a:31:bf:f0:ca:8f:45:94:03: db:17:4c:05:c3:e8:fc:61:4c:5a:71:bd:95:12:3a:96:12:e5: a0:d7:92:e4:73:07:bd:ac:97:2b:4f:e0:25:4d:47:5d:d6:d5: 73:e5:12:8a:2a:e6:1e:e8:e2:88:27:e0:67:de:1d:78:bd:d9: e8:34:3d:4c:2b:f6:d4:34:10:f6:8e:bd:7a:03:ad:d7:dc:24: 00:4a:b1:c1:52:d6:a3:4e:b2:fe:da:4f:72:18:aa:23:19:8e: bd:d9:b4:86:42:9e:7b:fc:a0:12:36:4f:33:ad:d7:66:97:37: a7:a2:11:b7:5b:83:89:6c:c5:45:ea:a5:d8:ed:96:2e:4c:30: 9c:5b:0b:ce:06:fb:b3:2f:07:9c:51:4c:ef:a7:3b:b3:c0:d6: 30:54:41:b5:e6:0a:ac:7c:1d:d4:8c:d3:ef:89:87:49:5a:84: 1e:fc:a2:25:7a:93:66:7b:b0:ca:55:f2:cf:0f:03:44:5a:c3: b0:bf:13:d1:8b:ae:1d:71:34:df:df:9e:ce:ab:c9:b8:e8:0e: 5e:39:7b:54:c3:fc:76:87:4d:00:9e:2c:31:49:08:ad:b8:81: ae:d8:49:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vu3r+zXUJJ71IGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk Mzg2ZGNmZjAtNDAyNS00NGM4LTk1ZDUtMGNmZTEwNDQxMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3bhx62cA0O+FuFSLtQxphO2E5yEVKir1QAq 2UBFf2NJoWmiTpsp0TUKBoZmEgl7V/5kJu95P5ABM9PHxJ6EAzCjtuvUa9GuFgXG LHFQTelkSuzvdJpm2LiU9TxpUUVgKJoxMmFxYUChq4IrB2o2PhJ3XetHT/MNOGkO Ocjhe6VfESH6GXdg2wDl6NsGQlL9Ot4HyqFi4j5azJ/3Qqf0iMoN9tSI9kGiMVhL tYtUw3av88M//hE9YNod3NWy3fXXbB7fIkiQPUNUOgFuZ0hqle9TQsSET/wS95AS zzX+/k+aN2XFgMlE+X9mUzYN+Emm3f8lpNdaWlzINN7rMLaZIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb6U0zJSc2J+G+t7kYM06FLbb+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2FiMTc3MGItZGRjYi0z YWEzLTkzYmMtYjRhOTVlZjZkZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRsbtgnmCRHlgHXUzx/fvot/rpipCHAxB/pEQoxv/DKj0WUA9sXTAXD 6PxhTFpxvZUSOpYS5aDXkuRzB72slytP4CVNR13W1XPlEooq5h7o4ogn4GfeHXi9 2eg0PUwr9tQ0EPaOvXoDrdfcJABKscFS1qNOsv7aT3IYqiMZjr3ZtIZCnnv8oBI2 TzOt12aXN6eiEbdbg4lsxUXqpdjtli5MMJxbC84G+7MvB5xRTO+nO7PA1jBUQbXm Cqx8HdSM0++Jh0lahB78oiV6k2Z7sMpV8s8PA0Raw7C/E9GLrh1xNN/fns6rybjo Dl45e1TD/HaHTQCeLDFJCK24ga7YSXQ= -----END CERTIFICATE-----Generated at Sun Oct 19 21:01:14 2025 by rpki-client