$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8fdd8a8-03ee-3363-826a-3c00eb9f5f88.roa File: f8fdd8a8-03ee-3363-826a-3c00eb9f5f88.roa (raw, json) Hash identifier: L4MWbarcUCUDKABtTTJOad7W8x+3gEAqpanrOiEKRYI= Subject key identifier: 4F:19:C8:5E:EB:74:D4:7B:07:EE:97:6E:81:7A:EB:83:7D:80:91:D7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCB032C86EC1AFAD7E2200 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8fdd8a8-03ee-3363-826a-3c00eb9f5f88.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3360 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b0:32:c8:6e:c1:af:ad:7e:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=8e8b0d76-2c75-458f-af7e-abd9c774c63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:20:85:18:e4:20:df:af:9e:c1:18:12:9f:88: 53:c3:1d:ed:1f:d9:5b:55:7f:5f:9a:40:2e:a0:7b: f7:eb:e8:61:20:58:f9:a6:10:bb:00:02:d5:bf:57: ab:8e:fb:2a:38:42:68:53:7f:89:0e:8f:04:4b:38: 7c:28:6f:be:7b:6b:f3:9a:c6:73:15:ae:99:da:8d: 9f:02:0b:9b:65:97:b2:48:18:27:2c:47:8b:2d:4f: 51:e0:fa:12:99:85:4a:3e:e6:22:d5:a2:da:39:aa: 11:a3:4c:0f:ce:32:95:2e:99:9f:b4:5a:a7:86:fa: 64:85:a6:f5:41:02:64:51:f3:80:c7:e9:aa:f9:eb: e7:75:ca:bc:f1:b9:4f:5f:c9:62:8b:2a:cc:17:ec: e8:11:d4:89:ed:af:c4:05:d0:3b:37:aa:94:c9:ff: 8a:a7:d2:25:5c:78:68:33:c2:56:47:5d:74:36:01: e3:a5:1c:85:a4:db:48:ba:20:46:a9:68:92:2d:3d: 5a:3c:67:0a:aa:f3:03:86:41:6b:13:3e:f3:c4:c6: 54:51:a9:b5:1e:73:be:82:f1:36:67:ff:c7:07:bf: ba:43:c2:c8:b1:a6:b8:6b:aa:11:11:1e:f5:00:5d: 38:39:3b:c7:5d:5d:d8:16:36:da:62:2a:36:09:43: b3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:19:C8:5E:EB:74:D4:7B:07:EE:97:6E:81:7A:EB:83:7D:80:91:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8fdd8a8-03ee-3363-826a-3c00eb9f5f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d0:17:07:e1:45:87:f8:f9:76:95:02:40:ac:bc:18:9f:7f: c5:b7:dd:ed:ca:9f:b6:8d:d1:0f:e4:6d:bd:e4:33:82:92:e7: 71:92:54:dd:3a:ca:7d:bf:3e:62:4b:aa:27:d2:fa:c8:36:8f: 35:15:69:f0:b0:56:ca:35:18:a2:a6:20:fe:2c:a0:a5:1c:2b: 95:f5:d6:22:d0:21:fb:dd:f7:4c:96:81:43:41:ec:cc:f9:50: 2f:85:6d:f5:2e:a3:80:f6:a4:de:ad:18:f7:01:69:18:33:53: df:8a:08:3a:58:3c:75:e4:0b:3e:76:a7:2c:e2:15:01:5e:f5: b9:e9:f1:c5:ec:8e:27:13:9d:d7:32:45:12:26:d3:9b:0c:10: 5c:48:a2:8c:54:63:27:c4:88:24:69:02:1b:58:1f:ea:12:ba: 2f:20:34:7d:8c:ca:cf:fc:a8:45:f9:dd:e6:f2:3a:c0:9a:96: d7:4b:81:13:4c:98:85:f3:3d:df:4f:3d:a0:7c:60:b2:4b:0c: 9d:b4:fb:f7:87:fa:b0:67:d9:f8:d7:b2:da:0f:b5:0b:a3:de: 7a:e4:51:84:b4:30:19:b1:c0:be:1e:a9:26:5f:a8:e9:10:e8: 90:b8:48:db:f1:b4:f4:6b:7b:56:cc:c4:6a:5d:ed:81:7a:e0: ba:c2:8a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLAyyG7Br61+IgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OGU4YjBkNzYtMmM3NS00NThmLWFmN2UtYWJkOWM3NzRjNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiCFGOQg36+ewRgSn4hTwx3tH9lbVX9fmkAu oHv36+hhIFj5phC7AALVv1erjvsqOEJoU3+JDo8ESzh8KG++e2vzmsZzFa6Z2o2f AgubZZeySBgnLEeLLU9R4PoSmYVKPuYi1aLaOaoRo0wPzjKVLpmftFqnhvpkhab1 QQJkUfOAx+mq+evndcq88blPX8liiyrMF+zoEdSJ7a/EBdA7N6qUyf+Kp9IlXHho M8JWR110NgHjpRyFpNtIuiBGqWiSLT1aPGcKqvMDhkFrEz7zxMZUUam1HnO+gvE2 Z//HB7+6Q8LIsaa4a6oRER71AF04OTvHXV3YFjbaYio2CUOzEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8ZyF7rdNR7B+6XboF664N9gJHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjhmZGQ4YTgtMDNlZS0z MzYzLTgyNmEtM2MwMGViOWY1Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDQFwfhRYf4+XaVAkCsvBiff8W33e3Kn7aN0Q/kbb3kM4KS53GSVN06 yn2/PmJLqifS+sg2jzUVafCwVso1GKKmIP4soKUcK5X11iLQIfvd90yWgUNB7Mz5 UC+FbfUuo4D2pN6tGPcBaRgzU9+KCDpYPHXkCz52pyziFQFe9bnp8cXsjicTndcy RRIm05sMEFxIooxUYyfEiCRpAhtYH+oSui8gNH2Mys/8qEX53ebyOsCaltdLgRNM mIXzPd9PPaB8YLJLDJ20+/eH+rBn2fjXstoPtQuj3nrkUYS0MBmxwL4eqSZfqOkQ 6JC4SNvxtPRre1bMxGpd7YF64LrCit0= -----END CERTIFICATE-----Generated at Mon Oct 20 05:34:39 2025 by rpki-client