$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa File: da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa (raw, json) Hash identifier: RUcStL/kS+sH1LdFtvbPhINy2zqdsa+YKe7NCFeMyQ4= Subject key identifier: BA:DF:3A:A6:00:B8:6C:B8:5E:F1:3B:9E:81:1B:87:FA:82:B2:B2:FD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCC566D0D67D510ED69340 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 203 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c5:66:d0:d6:7d:51:0e:d6:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=9b23c9e8-b55d-4b34-9964-7804ebe11b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ae:b8:c9:7c:8c:74:54:91:57:f2:cc:66:46: 96:c5:ea:50:a7:3e:f4:ea:6a:16:21:b1:7c:cd:2e: 33:57:a7:ef:6a:cf:ac:38:09:3f:2c:92:32:e9:31: 16:43:dc:21:c1:d5:8a:20:9b:fe:db:2e:22:b9:45: ab:d1:45:dc:72:6b:db:73:88:41:fc:48:9c:30:28: 53:f6:ef:2a:a2:df:4b:22:e8:35:03:a2:92:71:be: 97:4e:df:0e:35:1a:1e:67:21:89:76:f5:71:13:77: 39:0a:bd:04:5c:83:21:52:62:e6:82:2e:6e:90:04: 70:30:56:d1:f0:12:fa:42:2b:65:0d:ed:4d:18:2e: 3d:17:10:7c:60:af:79:92:5a:66:e4:d8:77:5c:df: 8c:cd:f3:85:2d:fd:ed:33:d4:09:e6:7a:e9:1f:64: 88:d5:a9:c7:62:75:8c:ae:1a:3c:e9:2d:60:14:f4: bc:27:a5:04:8f:f3:fb:b4:48:3d:a1:25:6a:42:dc: 4d:bf:08:af:84:05:96:ba:15:f5:1f:2f:45:fb:f0: 58:ec:d7:21:98:50:22:a2:1a:a9:f2:2a:60:96:de: ad:5d:01:61:1b:40:42:1b:00:74:ba:a3:d7:72:df: 72:aa:36:b0:90:3c:be:53:13:cc:3a:23:0f:74:92: 5a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DF:3A:A6:00:B8:6C:B8:5E:F1:3B:9E:81:1B:87:FA:82:B2:B2:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c8:f5:12:f6:ad:28:df:8f:fa:b3:15:07:f3:31:f3:c8:83: a9:37:28:da:68:61:8e:8d:e5:ce:2f:4c:11:c3:7f:f3:d2:aa: fb:42:ae:fa:40:ad:53:49:4f:d1:c5:1d:fc:b1:e6:90:61:d5: 80:3d:ce:d2:71:b7:94:2b:59:24:4c:bf:99:50:99:c7:46:1d: f1:d5:77:4d:b6:15:72:d9:3a:35:3c:33:38:d5:c6:96:ab:e2: 8b:51:73:8f:43:18:bd:c4:0a:45:33:40:a0:f1:af:2b:3a:74: d1:db:3f:45:7d:ed:0d:15:22:43:f5:12:b0:00:0b:e9:9d:a7: f0:af:4a:92:48:fb:c2:bd:9f:13:fd:47:92:82:85:52:76:b8: 57:26:3a:4c:c6:49:2a:e0:a4:0f:cb:5a:ea:3f:d4:08:c7:5c: 7e:e8:4f:e0:b4:de:5e:18:c1:16:45:6c:9d:1f:bc:41:0d:de: bd:92:bc:a5:75:68:30:8a:f2:52:0b:49:66:c6:c3:79:c7:bf: 0f:7b:bb:d5:fa:3d:8b:ae:21:32:c0:25:68:8f:72:70:fb:f1: d0:70:37:6c:ce:d1:c9:fd:03:9a:f3:87:3d:e8:84:70:86:b1: 95:3f:28:a1:ca:41:55:0b:6e:65:1c:3c:b1:74:3b:88:f0:e0: 94:e0:20:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMVm0NZ9UQ7Wk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OWIyM2M5ZTgtYjU1ZC00YjM0LTk5NjQtNzgwNGViZTExYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla64yXyMdFSRV/LMZkaWxepQpz706moWIbF8 zS4zV6fvas+sOAk/LJIy6TEWQ9whwdWKIJv+2y4iuUWr0UXccmvbc4hB/EicMChT 9u8qot9LIug1A6KScb6XTt8ONRoeZyGJdvVxE3c5Cr0EXIMhUmLmgi5ukARwMFbR 8BL6QitlDe1NGC49FxB8YK95klpm5Nh3XN+MzfOFLf3tM9QJ5nrpH2SI1anHYnWM rho86S1gFPS8J6UEj/P7tEg9oSVqQtxNvwivhAWWuhX1Hy9F+/BY7NchmFAiohqp 8ipglt6tXQFhG0BCGwB0uqPXct9yqjawkDy+UxPMOiMPdJJaFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrfOqYAuGy4XvE7noEbh/qCsrL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwYWE1ZjEtNTllNi0z ZmRkLTgyYmItYTA0OTI0MWY2MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/I9RL2rSjfj/qzFQfzMfPIg6k3KNpoYY6N5c4vTBHDf/PSqvtCrvpA rVNJT9HFHfyx5pBh1YA9ztJxt5QrWSRMv5lQmcdGHfHVd022FXLZOjU8MzjVxpar 4otRc49DGL3ECkUzQKDxrys6dNHbP0V97Q0VIkP1ErAAC+mdp/CvSpJI+8K9nxP9 R5KChVJ2uFcmOkzGSSrgpA/LWuo/1AjHXH7oT+C03l4YwRZFbJ0fvEEN3r2SvKV1 aDCK8lILSWbGw3nHvw97u9X6PYuuITLAJWiPcnD78dBwN2zO0cn9A5rzhz3ohHCG sZU/KKHKQVULbmUcPLF0O4jw4JTgIAs= -----END CERTIFICATE-----Generated at Sun Oct 19 21:00:03 2025 by rpki-client