$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa File: f8da539f-a988-3038-8316-0c63126db070.roa (raw, json) Hash identifier: XTandYvCund0SWkU+ro+QJ2HfkDzzaUclgdHLNVdfrc= Subject key identifier: 3A:00:47:0A:DA:5C:44:F8:A8:F0:C7:2F:F1:E5:CB:2B:FB:22:5F:7D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCAF3C14292BA2EB4A6020 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 203 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:af:3c:14:29:2b:a2:eb:4a:60:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=baf6e966-d870-4647-bc93-7f7debea7c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b1:1a:f1:7a:49:a8:8a:e9:c1:4d:80:41:68: 62:42:04:09:12:e6:65:19:fe:dd:05:29:8b:f5:f1: fa:29:af:7a:39:db:27:aa:62:c3:ed:51:6c:44:57: 0c:ad:da:04:b7:6a:7b:de:8d:4e:81:a0:0f:3d:48: 69:5a:01:57:76:ce:34:46:1e:33:4c:01:23:6d:e3: 91:e7:47:3e:8e:82:69:a6:2c:08:a4:24:3e:ce:41: b3:80:14:85:8e:1d:54:72:c2:b0:88:f0:cc:ef:b8: 1a:c3:f4:54:30:85:65:c9:cb:7c:a7:a8:4c:13:9b: 8f:09:ce:a0:92:99:f7:24:08:a6:3d:7e:2d:69:91: 31:23:93:d5:6b:c4:87:b0:1f:5f:66:71:00:46:e4: b2:f2:e5:2c:aa:c8:7a:f4:a4:1c:45:60:4e:3b:8d: 8b:b5:3a:a3:40:48:d0:88:90:87:a3:8a:1d:89:a4: 6f:1e:bc:d2:d8:23:18:ec:9e:a9:8e:26:ce:19:0a: 82:cc:10:94:4f:fd:bd:05:82:04:a7:96:33:89:ff: 78:ba:4c:21:76:af:61:a4:bd:16:20:16:df:6f:fb: 47:65:21:41:c8:13:56:a3:6e:9c:ab:c2:1d:ed:e0: 10:3c:6d:a2:51:c5:42:c4:09:03:a9:fa:3b:80:6c: 2c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:00:47:0A:DA:5C:44:F8:A8:F0:C7:2F:F1:E5:CB:2B:FB:22:5F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ff:63:44:a4:95:70:21:5e:69:cd:64:9e:6b:67:07:33:81: 99:2c:9f:f0:46:61:eb:d3:5e:d5:f9:ba:9a:9a:80:f6:9d:fc: 0b:48:d4:29:b2:88:29:41:75:99:25:c3:57:3f:11:dc:b3:64: d5:df:d0:69:21:8c:69:d1:b0:04:c6:34:98:87:59:f6:2e:db: 8f:67:e7:63:08:a0:5e:21:9a:5b:ef:2e:b3:df:11:11:c2:32: fc:ae:e1:ac:9e:83:00:24:e7:d0:a8:d5:95:f7:90:80:01:33: 9f:75:11:96:78:56:e4:e1:c9:27:2a:d1:72:a4:d0:53:4f:09: 65:bc:6d:20:68:7c:e5:ce:ce:0b:12:05:9b:a4:f9:40:45:f5: 46:5d:2f:97:74:d6:5a:77:4a:9f:b1:e2:92:95:ff:e6:2c:84: 76:56:78:32:7f:0e:2e:3c:9d:ee:3e:0e:80:70:15:69:2a:ee: cd:88:d8:a6:e8:e1:7a:6c:ab:08:23:22:91:c4:bc:35:7b:b2: 0c:1a:29:f4:c4:4d:38:ab:00:26:36:cb:e8:b2:17:a6:28:1e: 5c:59:39:39:b2:83:34:99:00:b9:45:0b:58:d0:e2:7a:24:2d: 71:20:29:4e:c1:94:68:db:e1:d9:0c:2b:5b:98:9c:ea:58:44: 9b:bd:b7:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vK88FCkroutKYCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YmFmNmU5NjYtZDg3MC00NjQ3LWJjOTMtN2Y3ZGViZWE3YzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bEa8XpJqIrpwU2AQWhiQgQJEuZlGf7dBSmL 9fH6Ka96OdsnqmLD7VFsRFcMrdoEt2p73o1OgaAPPUhpWgFXds40Rh4zTAEjbeOR 50c+joJppiwIpCQ+zkGzgBSFjh1UcsKwiPDM77gaw/RUMIVlyct8p6hME5uPCc6g kpn3JAimPX4taZExI5PVa8SHsB9fZnEARuSy8uUsqsh69KQcRWBOO42LtTqjQEjQ iJCHo4odiaRvHrzS2CMY7J6pjibOGQqCzBCUT/29BYIEp5Yzif94ukwhdq9hpL0W IBbfb/tHZSFByBNWo26cq8Id7eAQPG2iUcVCxAkDqfo7gGwsuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoARwraXET4qPDHL/Hlyyv7Il99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjhkYTUzOWYtYTk4OC0z MDM4LTgzMTYtMGM2MzEyNmRiMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb/Y0SklXAhXmnNZJ5rZwczgZksn/BGYevTXtX5upqagPad/AtI1Cmy iClBdZklw1c/EdyzZNXf0GkhjGnRsATGNJiHWfYu249n52MIoF4hmlvvLrPfERHC Mvyu4ayegwAk59Co1ZX3kIABM591EZZ4VuThyScq0XKk0FNPCWW8bSBofOXOzgsS BZuk+UBF9UZdL5d01lp3Sp+x4pKV/+YshHZWeDJ/Di48ne4+DoBwFWkq7s2I2Kbo 4XpsqwgjIpHEvDV7sgwaKfTETTirACY2y+iyF6YoHlxZOTmygzSZALlFC1jQ4nok LXEgKU7BlGjb4dkMK1uYnOpYRJu9t/A= -----END CERTIFICATE-----Generated at Sun Oct 19 21:00:59 2025 by rpki-client