$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa458d0c-b835-3cf5-80ee-a0ec7c96e6cf.roa File: aa458d0c-b835-3cf5-80ee-a0ec7c96e6cf.roa (raw, json) Hash identifier: OCfl+u525P33Wp94ntMMumPfS2ndgwCyTKpbKPWr1pE= Subject key identifier: 7B:04:48:E5:29:DB:92:F3:5F:87:D6:2E:C4:93:74:26:72:2E:6B:26 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B52A755253D2733B0A7A5D8C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa458d0c-b835-3cf5-80ee-a0ec7c96e6cf.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 3360 IP address blocks: 20.155.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:55:25:3d:27:33:b0:a7:a5:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=c073de6a-5680-4319-bf7c-3829c0505420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:cc:15:dc:6b:e2:05:e6:90:de:32:23:99: 12:5b:6b:46:9d:39:97:12:dc:e6:0e:c3:1b:11:28: ae:22:53:3a:7e:a0:99:9d:3a:10:92:3d:b4:7b:73: ef:79:0a:40:12:47:16:ec:60:76:9a:3e:52:69:e8: 3e:7a:3e:cd:8a:50:04:a3:d3:6f:66:91:b6:a1:67: e8:5e:17:99:b3:f3:d7:d2:a0:76:6c:8c:1b:fc:ce: c0:26:05:5b:54:94:56:72:79:e8:e4:00:33:8d:2d: 14:93:a1:85:6a:9f:8e:c0:c4:b6:d8:c1:09:5b:a1: 4f:03:6a:39:80:be:6d:00:88:17:45:84:76:6d:e8: 0a:f6:5a:c9:1d:90:34:a3:0c:d2:18:98:9f:b5:3e: ea:12:ee:22:b7:98:fa:aa:f2:83:d8:a6:9b:20:25: 99:9d:00:5e:40:03:45:60:f0:00:7c:1c:7e:ef:b1: 75:bd:7a:17:44:db:8a:75:41:68:39:02:33:6e:4f: c4:8d:42:8d:31:b1:5a:fc:97:a9:42:2d:28:64:7c: 41:17:f2:98:80:b8:0c:60:fd:2e:b2:97:03:18:6d: 02:4b:53:4b:43:04:75:7e:cf:b1:f9:60:4e:f0:00: 06:f2:ad:4a:87:de:d4:6d:78:d6:0d:42:26:e5:0f: 97:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:04:48:E5:29:DB:92:F3:5F:87:D6:2E:C4:93:74:26:72:2E:6B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa458d0c-b835-3cf5-80ee-a0ec7c96e6cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.155.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:36:51:15:aa:9d:44:b6:c4:03:9e:83:ec:a4:b1:63:63:ac: 04:b5:d6:4b:5d:66:4e:ae:4e:64:77:0f:5a:ec:26:80:aa:a6: 12:f4:3c:ca:94:1b:3f:dd:29:62:cb:24:41:c2:5b:11:f5:3e: 0c:6b:e1:c7:26:8d:40:62:28:e7:19:50:19:2b:2d:dc:10:d3: 7a:b3:0e:f3:0e:81:82:c9:f0:b8:02:da:19:fb:41:16:e0:90: d3:1e:e9:8c:94:78:7d:91:63:a1:19:20:c2:93:8f:b0:35:3c: 0f:2f:59:41:6e:6f:85:5d:c6:d2:d8:ad:cd:2a:fa:63:d7:0e: f8:ae:51:ff:a7:26:2b:64:c5:d6:25:d6:63:8d:67:97:bc:70: ca:d4:11:23:94:8d:7a:ab:22:43:f9:cc:b6:2d:18:1e:10:ba: 32:83:c9:8c:2d:a2:2d:ad:51:da:69:96:20:d8:c9:f8:ee:49: 50:dd:84:36:c9:50:e6:66:bc:c2:81:a5:3e:f7:d9:33:6e:fc: e3:cd:38:a6:cd:be:e1:4e:c4:96:b0:8b:d2:66:47:63:4f:62: 5f:90:40:ec:9a:df:f2:ad:6b:f3:2a:9f:82:68:1e:4a:43:ee: 92:69:b0:6e:49:ca:e6:f1:95:8d:a7:ae:f1:d8:37:87:81:1d: 72:82:39:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1UlPSczsKel2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YzA3M2RlNmEtNTY4MC00MzE5LWJmN2MtMzgyOWMwNTA1NDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhPMFdxr4gXmkN4yI5kSW2tGnTmXEtzmDsMb ESiuIlM6fqCZnToQkj20e3PveQpAEkcW7GB2mj5Saeg+ej7NilAEo9NvZpG2oWfo XheZs/PX0qB2bIwb/M7AJgVbVJRWcnno5AAzjS0Uk6GFap+OwMS22MEJW6FPA2o5 gL5tAIgXRYR2begK9lrJHZA0owzSGJiftT7qEu4it5j6qvKD2KabICWZnQBeQANF YPAAfBx+77F1vXoXRNuKdUFoOQIzbk/EjUKNMbFa/JepQi0oZHxBF/KYgLgMYP0u spcDGG0CS1NLQwR1fs+x+WBO8AAG8q1Kh97UbXjWDUIm5Q+XiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsESOUp25LzX4fWLsSTdCZyLmsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWE0NThkMGMtYjgzNS0z Y2Y1LTgwZWUtYTBlYzdjOTZlNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFJtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ2URWqnUS2xAOeg+yksWNjrAS11ktdZk6uTmR3D1rsJoCqphL0PMqU Gz/dKWLLJEHCWxH1Pgxr4ccmjUBiKOcZUBkrLdwQ03qzDvMOgYLJ8LgC2hn7QRbg kNMe6YyUeH2RY6EZIMKTj7A1PA8vWUFub4VdxtLYrc0q+mPXDviuUf+nJitkxdYl 1mONZ5e8cMrUESOUjXqrIkP5zLYtGB4QujKDyYwtoi2tUdppliDYyfjuSVDdhDbJ UOZmvMKBpT732TNu/OPNOKbNvuFOxJawi9JmR2NPYl+QQOya3/Kta/Mqn4JoHkpD 7pJpsG5JyubxlY2nrvHYN4eBHXKCObk= -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:43 2025 by rpki-client