$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa File: d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa (raw, json) Hash identifier: C1YjFPMWHhc1U128VCI6IXDTzNDiMc6ZoKGQLbGvWh0= Subject key identifier: C4:C4:1E:C9:8F:21:3A:DD:C7:9E:5E:F4:4F:D4:F5:45:EA:AB:C2:C7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCC7D300543E44C0471F00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3360 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c7:d3:00:54:3e:44:c0:47:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=40f5cf65-1b88-4c88-b169-a20a9385fc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:23:60:31:4c:6d:bc:dd:7d:76:63:c8:aa:2d: 67:38:96:36:55:c9:8b:dc:ab:d0:fa:7f:d8:04:76: 95:ba:44:21:54:30:26:2d:d3:f5:fd:ec:e0:9e:20: 2a:79:ad:f0:59:9a:9c:7f:a5:13:57:72:94:4d:a1: 39:17:d9:cf:49:12:1e:55:fa:08:cc:fe:e2:70:f8: 37:d6:a3:83:33:bf:69:86:61:f1:d1:e1:34:d2:a5: 85:0d:e8:e0:5e:dc:52:2d:6f:38:2d:0b:69:c8:98: 19:17:d1:1e:10:f7:ce:f3:2c:e5:b6:6f:04:d5:da: a7:e0:17:8b:48:20:0b:9e:a4:2f:0a:12:79:1c:b4: ea:ec:80:38:ce:ad:7b:26:ef:fd:4c:6f:ce:d9:4a: 79:4b:eb:57:ec:d2:bb:51:60:df:4a:0c:41:b3:69: 5e:94:e8:b1:d0:e2:dc:69:20:3d:aa:8c:88:1c:e8: 73:97:cb:98:6a:b8:30:59:e8:87:8d:9e:3e:91:a3: 9b:c6:bb:ef:64:e0:ce:fb:57:d5:e6:60:e6:2c:4d: d3:e0:e5:67:00:ac:48:53:db:f3:43:85:ab:a6:f4: 9b:0d:ba:2d:38:0e:cf:69:9e:42:18:fc:15:9b:48: 01:df:91:53:f0:b9:b1:e0:46:39:d8:7b:eb:49:f7: 3a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C4:1E:C9:8F:21:3A:DD:C7:9E:5E:F4:4F:D4:F5:45:EA:AB:C2:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:78:43:68:6d:97:58:45:ed:c8:0a:a3:9c:54:04:04:aa:de: 52:d3:b1:3f:e1:15:0e:61:d3:f4:83:99:ae:ec:dd:60:ea:44: 34:b7:0a:6a:cb:70:d3:56:43:e4:f5:fa:c3:b0:45:30:83:ca: 5d:8d:80:58:b1:bb:f0:1a:4c:ef:62:35:7b:0a:47:f4:52:a8: aa:84:25:5c:a1:2f:6d:30:8c:85:ae:e3:6d:ac:a6:2d:d2:43: df:a3:96:b0:05:60:1b:f4:1e:6a:24:5f:83:7d:3d:bc:7c:64: 89:a0:2c:a3:28:ac:c4:a7:2e:47:96:bb:22:10:be:d9:90:44: 0f:9b:c2:49:67:1a:63:dd:7c:ae:44:f5:cc:d0:eb:14:bc:8f: 35:5f:51:4a:55:12:7d:e5:b8:51:f0:da:b8:c5:68:fb:ef:a1: 47:d2:4c:04:57:34:a9:d5:b0:04:b2:aa:12:df:98:3b:08:fa: 38:38:65:b7:25:25:0a:76:bc:f3:7f:b2:f0:96:1d:33:e8:09: 0d:11:80:c6:09:4c:ad:71:d4:0b:6a:e4:c9:ca:13:90:1a:54: 00:3a:8d:ca:49:d2:3b:dd:bb:72:17:a0:ab:3b:af:3c:c9:f1: f1:2f:98:09:f9:44:4f:6e:74:87:99:d8:3b:5f:40:95:28:47: b2:26:fe:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMfTAFQ+RMBHHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NDBmNWNmNjUtMWI4OC00Yzg4LWIxNjktYTIwYTkzODVmYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyNgMUxtvN19dmPIqi1nOJY2VcmL3KvQ+n/Y BHaVukQhVDAmLdP1/ezgniAqea3wWZqcf6UTV3KUTaE5F9nPSRIeVfoIzP7icPg3 1qODM79phmHx0eE00qWFDejgXtxSLW84LQtpyJgZF9EeEPfO8yzltm8E1dqn4BeL SCALnqQvChJ5HLTq7IA4zq17Ju/9TG/O2Up5S+tX7NK7UWDfSgxBs2lelOix0OLc aSA9qoyIHOhzl8uYargwWeiHjZ4+kaObxrvvZODO+1fV5mDmLE3T4OVnAKxIU9vz Q4WrpvSbDbotOA7PaZ5CGPwVm0gB35FT8Lmx4EY52HvrSfc6uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTEHsmPITrdx55e9E/U9UXqq8LHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDhhODg5NGQtZDAzNC0z OWM3LWFhNzEtY2UzOWZiMGQ4YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId4Q2htl1hF7cgKo5xUBASq3lLTsT/hFQ5h0/SDma7s3WDqRDS3CmrL cNNWQ+T1+sOwRTCDyl2NgFixu/AaTO9iNXsKR/RSqKqEJVyhL20wjIWu422spi3S Q9+jlrAFYBv0HmokX4N9Pbx8ZImgLKMorMSnLkeWuyIQvtmQRA+bwklnGmPdfK5E 9czQ6xS8jzVfUUpVEn3luFHw2rjFaPvvoUfSTARXNKnVsASyqhLfmDsI+jg4Zbcl JQp2vPN/svCWHTPoCQ0RgMYJTK1x1Atq5MnKE5AaVAA6jcpJ0jvdu3IXoKs7rzzJ 8fEvmAn5RE9udIeZ2DtfQJUoR7Im/vk= -----END CERTIFICATE-----Generated at Mon Oct 20 05:23:13 2025 by rpki-client