$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa File: 81b11565-f8a6-38ca-8987-5a25512a7a32.roa (raw, json) Hash identifier: wqB8johm74EsgUs3DsRbMYHXY9RdKhA9lCt9eqSKsXM= Subject key identifier: 32:49:B4:30:0B:99:57:4A:DF:C4:AB:0C:1B:6B:B4:A4:5F:C8:74:5A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B1AD1969AF214E09D485B56D0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 3356 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:96:9a:f2:14:e0:9d:48:5b:56:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=b09ce2aa-81ad-4f6e-bafc-d7306ec76ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:14:ae:5f:8c:ba:06:ef:9e:80:d3:03:2f: ca:4f:56:2e:a7:a8:89:d5:b2:c6:06:13:7d:19:99: 95:e9:6a:d0:fc:42:60:d9:69:4f:01:9b:2d:45:5b: f3:3a:22:47:85:fb:2f:4f:47:8e:e8:60:36:57:e6: c4:b1:db:2d:71:c4:49:d4:5c:f3:c2:a4:a7:28:c9: 1d:d0:39:4c:46:65:39:93:6d:fd:eb:bb:73:8f:f8: d9:8f:33:ce:eb:52:10:8f:bf:57:02:84:3e:8b:ca: 43:c9:da:8a:3c:61:5b:63:a1:de:2c:78:93:4c:9a: bd:18:21:a4:c1:66:06:4d:52:2e:2b:9e:da:b7:1b: 06:3b:dd:8c:f6:bc:5a:6a:35:42:d6:ea:6c:56:2b: ff:b5:3b:66:0a:99:6f:a6:7e:59:c1:9d:79:6d:d3: 1d:bb:59:4d:98:6a:4d:e6:e6:d8:a7:c8:64:df:50: a9:cc:fc:1a:63:fc:61:b8:26:74:5b:53:23:c2:f0: c9:69:85:4b:37:fd:74:60:42:59:c4:a5:f7:68:14: 2e:f9:00:6e:38:31:ba:5a:c9:01:d0:ee:45:34:21: b7:c1:39:da:3c:7d:b5:cf:b3:15:56:05:a4:41:1e: 33:51:0d:32:75:80:67:90:dc:8f:af:fc:2c:ef:e3: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:49:B4:30:0B:99:57:4A:DF:C4:AB:0C:1B:6B:B4:A4:5F:C8:74:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5e:15:ef:ae:86:a0:fd:5c:9f:a6:0d:ea:d9:cf:d2:d4:cb: f6:61:62:38:03:af:31:06:41:b1:d7:75:1b:57:ca:47:ab:94: f3:81:d7:1f:2b:9e:06:57:7a:58:54:d6:0c:b3:29:4d:d0:37: 11:6e:23:80:c4:6e:b6:a9:6f:e6:86:57:b3:b4:0d:72:ba:d5: 4e:84:11:98:eb:d3:54:ff:98:15:7c:c5:fd:65:9b:b8:47:e3: 18:61:dc:2a:30:85:4f:98:5e:73:d0:e4:8b:b5:7b:c6:e3:1a: 5f:68:2d:e8:19:0a:08:c9:31:4a:cf:10:bf:cf:26:c2:4d:f1: cc:fc:a3:6e:ec:82:d7:92:ff:9c:83:65:e2:0d:e5:df:0a:3c: 71:97:3e:3e:a6:9a:ba:d1:fa:53:fa:d4:33:17:05:a7:1f:62: b2:41:4d:0d:e2:3e:1a:50:90:d4:de:23:33:01:f0:e0:1e:21: d0:2a:75:28:ee:69:a0:f0:64:85:a5:70:c6:63:e9:f3:a5:21: cf:3c:4c:00:df:c9:e1:7a:5f:d9:90:f2:f0:8d:f7:67:40:2c: 05:b9:c8:a7:44:a3:b5:f5:35:10:bc:92:ac:70:f8:b7:98:cb: 84:02:b0:33:3c:1a:60:81:61:8d:18:75:ba:e8:42:09:42:cc: c4:eb:48:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Zaa8hTgnUhbVtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YjA5Y2UyYWEtODFhZC00ZjZlLWJhZmMtZDczMDZlYzc2YWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXIUrl+MugbvnoDTAy/KT1Yup6iJ1bLGBhN9 GZmV6WrQ/EJg2WlPAZstRVvzOiJHhfsvT0eO6GA2V+bEsdstccRJ1FzzwqSnKMkd 0DlMRmU5k23967tzj/jZjzPO61IQj79XAoQ+i8pDydqKPGFbY6HeLHiTTJq9GCGk wWYGTVIuK57atxsGO92M9rxaajVC1upsViv/tTtmCplvpn5ZwZ15bdMdu1lNmGpN 5ubYp8hk31CpzPwaY/xhuCZ0W1MjwvDJaYVLN/10YEJZxKX3aBQu+QBuODG6WskB 0O5FNCG3wTnaPH21z7MVVgWkQR4zUQ0ydYBnkNyPr/ws7+PEzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJJtDALmVdK38SrDBtrtKRfyHRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODFiMTE1NjUtZjhhNi0z OGNhLTg5ODctNWEyNTUxMmE3YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxeFe+uhqD9XJ+mDerZz9LUy/ZhYjgDrzEGQbHXdRtXykerlPOB1x8r ngZXelhU1gyzKU3QNxFuI4DEbrapb+aGV7O0DXK61U6EEZjr01T/mBV8xf1lm7hH 4xhh3CowhU+YXnPQ5Iu1e8bjGl9oLegZCgjJMUrPEL/PJsJN8cz8o27sgteS/5yD ZeIN5d8KPHGXPj6mmrrR+lP61DMXBacfYrJBTQ3iPhpQkNTeIzMB8OAeIdAqdSju aaDwZIWlcMZj6fOlIc88TADfyeF6X9mQ8vCN92dALAW5yKdEo7X1NRC8kqxw+LeY y4QCsDM8GmCBYY0YdbroQglCzMTrSCc= -----END CERTIFICATE-----Generated at Wed Sep 17 04:08:41 2025 by rpki-client