$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa File: 20daa57e-6e7f-3026-95b0-e7896bc91c38.roa (raw, json) Hash identifier: MKs4szfLLTKHwAyLWxCNnZ8KDeOZwT9UXpdGLy07saM= Subject key identifier: 47:9B:71:D7:D5:C5:48:71:9D:86:AD:B5:21:68:FD:38:62:0C:5B:84 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5243868C34EE8EADA713A0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 20115 IP address blocks: 172.220.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:43:86:8c:34:ee:8e:ad:a7:13:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=deb9a767-0980-4015-87dc-d2c48e45d464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9d:d7:6b:26:81:54:e2:6b:e9:37:a9:b0:a0: 90:5a:24:af:6e:74:39:05:c1:35:f2:06:c9:79:5e: b9:41:17:62:85:25:34:5c:9d:94:38:5b:d8:3b:d4: 27:ff:11:9d:b4:1d:1b:ea:16:a4:88:ac:ab:89:e5: e7:f4:75:ea:ce:f7:ce:03:2e:3b:5a:fe:ba:fb:07: b9:98:b2:14:ae:34:8f:5a:a4:c1:b5:7f:7a:56:09: f8:5c:7c:c1:35:91:72:87:c2:be:2f:5d:e4:a8:02: b4:80:01:65:1e:f4:e6:bd:1a:7f:2a:15:e8:10:fe: 98:98:fe:d5:24:60:b3:c0:6c:59:e2:4c:9c:71:05: 24:81:3b:ca:09:a0:08:5a:ef:0a:45:6e:f5:af:c4: 1d:95:6f:63:99:db:48:0c:28:ab:b3:42:f2:d6:23: e1:19:3a:a3:65:45:f2:69:8d:f3:1e:ab:61:5c:92: b6:c3:b2:13:03:63:6a:bf:7c:a2:17:39:5c:db:d3: b5:25:4a:ea:b4:7a:08:e9:be:fc:07:56:88:6e:cd: 49:a7:e5:49:49:e4:f8:7a:28:8d:90:c5:9d:2e:6f: 39:c2:ec:06:63:69:ce:41:39:b6:5b:b4:90:26:81: b8:78:7a:3e:0f:a3:ec:85:bb:4c:09:76:1d:19:89: dc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9B:71:D7:D5:C5:48:71:9D:86:AD:B5:21:68:FD:38:62:0C:5B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.220.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:bf:39:3c:e6:7f:4e:4d:54:23:88:76:54:66:2f:eb:31:2a: 66:7b:76:2d:2c:1f:63:a6:f2:47:98:13:27:5c:95:8d:1b:86: d7:31:72:51:74:76:2b:d2:42:cf:18:f2:29:42:ea:da:f6:25: b6:31:9d:02:6f:98:76:e2:88:e8:cc:44:fa:34:02:16:78:57: fe:11:fc:4f:65:0d:e6:3c:2f:db:3b:de:28:19:54:93:0e:ba: 28:7e:4d:1b:d1:7c:c3:b1:a1:e0:e0:ad:f2:6e:b4:eb:49:f1: 64:6a:85:5d:a8:f2:17:d0:97:ee:2c:81:f1:fc:77:a0:ec:e9: 01:1d:77:0f:28:54:51:1d:57:1c:85:0d:0a:85:d1:f6:1f:af: b6:a0:8d:d6:fa:97:7b:23:10:af:af:e6:0d:f1:f9:bf:98:8d: 4a:82:8d:09:3c:e2:4e:bf:39:78:7d:53:0f:e6:8c:80:db:8e: 99:e1:73:1d:70:9d:63:52:50:c2:ef:01:3e:f7:be:bb:0b:80: 53:93:3c:ed:d2:8a:0c:3f:4a:a7:b2:87:1b:5a:2d:3a:24:bd: 75:1a:ad:a4:48:03:78:16:95:4b:0a:09:fc:cf:0f:d5:9a:f1: 89:ce:61:cd:eb:7a:1c:89:a3:e0:e8:17:09:1a:cc:83:cf:69: c3:d3:c0:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkOGjDTujq2nE6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZGViOWE3NjctMDk4MC00MDE1LTg3ZGMtZDJjNDhlNDVkNDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ3XayaBVOJr6TepsKCQWiSvbnQ5BcE18gbJ eV65QRdihSU0XJ2UOFvYO9Qn/xGdtB0b6hakiKyrieXn9HXqzvfOAy47Wv66+we5 mLIUrjSPWqTBtX96Vgn4XHzBNZFyh8K+L13kqAK0gAFlHvTmvRp/KhXoEP6YmP7V JGCzwGxZ4kyccQUkgTvKCaAIWu8KRW71r8QdlW9jmdtIDCirs0Ly1iPhGTqjZUXy aY3zHqthXJK2w7ITA2Nqv3yiFzlc29O1JUrqtHoI6b78B1aIbs1Jp+VJSeT4eiiN kMWdLm85wuwGY2nOQTm2W7SQJoG4eHo+D6PshbtMCXYdGYnciQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEebcdfVxUhxnYattSFo/ThiDFuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMjBkYWE1N2UtNmU3Zi0z MDI2LTk1YjAtZTc4OTZiYzkxYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrNyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm/OTzmf05NVCOIdlRmL+sxKmZ7di0sH2Om8keYEydclY0bhtcxclF0 divSQs8Y8ilC6tr2JbYxnQJvmHbiiOjMRPo0AhZ4V/4R/E9lDeY8L9s73igZVJMO uih+TRvRfMOxoeDgrfJutOtJ8WRqhV2o8hfQl+4sgfH8d6Ds6QEddw8oVFEdVxyF DQqF0fYfr7agjdb6l3sjEK+v5g3x+b+YjUqCjQk84k6/OXh9Uw/mjIDbjpnhcx1w nWNSUMLvAT73vrsLgFOTPO3Sigw/SqeyhxtaLTokvXUaraRIA3gWlUsKCfzPD9Wa 8YnOYc3rehyJo+DoFwkazIPPacPTwF4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:14 2025 by rpki-client