$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/01a58354-6718-38cb-adc5-f6f4e562db01.roa File: 01a58354-6718-38cb-adc5-f6f4e562db01.roa (raw, json) Hash identifier: UTPtY6Rz03eGLOhmCIukisSQtwZQbFYG4Vc1bZWbTE8= Subject key identifier: 9D:CB:1E:E3:52:99:68:CA:2E:24:E5:35:46:93:71:F4:EE:9F:8B:08 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B987241FA2E9EF038522F88C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/01a58354-6718-38cb-adc5-f6f4e562db01.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 202 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:41:fa:2e:9e:f0:38:52:2f:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=35ad4411-100c-4425-b401-42307d9735f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:39:d1:5a:63:a5:08:6e:b4:7a:17:a3:4d:c6: 95:8f:ac:41:d9:87:92:ed:7f:d4:54:83:73:bd:f2: af:63:f2:1c:b4:b2:96:17:cd:db:7c:2b:03:29:74: c1:e0:4f:d8:cd:d1:5a:31:4f:d1:7f:73:8a:09:e1: 1e:70:77:9c:1f:6e:e3:d0:5b:22:c9:01:40:82:31: e3:d2:50:a2:a1:63:f1:d4:dd:3f:23:a5:d7:dc:2b: 39:5b:0d:48:c8:82:f5:3d:03:68:e5:a0:ad:7a:99: 8a:af:9e:8c:7b:81:e7:43:1d:6a:2e:0c:48:90:c6: 30:6b:89:be:28:38:e0:58:b5:b3:5a:f7:9f:d4:9e: d3:00:f8:3c:bf:14:ba:06:dd:87:d7:a1:27:eb:cc: a0:5d:60:f4:6b:7c:9e:aa:05:c4:ed:75:da:77:b4: 1c:e9:d4:54:a5:d4:76:ce:46:a7:59:36:8c:68:d1: 32:fb:89:c0:0d:52:11:64:2c:1e:2a:88:f7:28:f1: 6b:57:b9:88:05:ad:3b:4f:b2:a5:f6:60:ee:13:2d: cb:22:03:e8:96:f5:45:81:8d:e6:87:c1:f6:28:4d: a3:ee:2f:b5:ea:5b:bc:e4:5a:08:1a:c6:9b:6b:5b: 4d:a6:1b:28:2c:5e:54:9a:c2:02:68:ab:2c:24:17: 0c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CB:1E:E3:52:99:68:CA:2E:24:E5:35:46:93:71:F4:EE:9F:8B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/01a58354-6718-38cb-adc5-f6f4e562db01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ae:7d:16:a5:01:f8:57:9e:5f:ad:d4:14:eb:0f:33:a1:88: ff:b8:4f:46:b5:17:d8:19:54:ff:41:13:9b:94:a5:74:8f:9b: 6f:17:65:ea:9e:c3:f9:84:95:01:41:e9:24:ca:6c:e3:7d:97: 9c:91:f3:44:22:82:14:6b:fd:0f:3b:13:f1:44:0f:e4:36:95: 19:99:8a:f6:34:cb:73:ec:27:d0:8a:b7:ce:65:60:77:a1:dc: 81:ec:9b:00:60:d6:3e:6a:6b:fc:68:55:9f:37:cc:db:3a:58: 16:13:d3:58:92:9c:a8:0d:0d:91:e6:cb:55:7a:21:7c:0b:5a: 3a:e8:7a:ae:58:a0:5d:a2:16:7e:fa:c4:7a:e6:7d:78:79:72: 86:b9:6b:d1:81:0a:0e:71:c8:c3:04:eb:ba:23:b0:27:2c:38: 00:83:48:e8:b9:61:58:60:74:e5:be:41:99:6c:d5:20:3d:14: f5:0e:8f:10:73:ee:7d:3e:b1:3f:32:77:55:bd:25:21:78:64: 02:f9:99:40:fb:14:40:2b:06:b3:1a:5c:ab:3e:17:47:9b:68: bc:ba:57:d9:3b:1d:f4:5a:fd:1e:a6:80:45:08:f5:2d:d2:a1: 4a:73:67:0f:99:c4:a0:39:22:a2:80:0c:a2:7d:b4:36:bb:98: 57:7b:f6:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckH6Lp7wOFIviMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MzVhZDQ0MTEtMTAwYy00NDI1LWI0MDEtNDIzMDdkOTczNWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjnRWmOlCG60ehejTcaVj6xB2YeS7X/UVINz vfKvY/IctLKWF83bfCsDKXTB4E/YzdFaMU/Rf3OKCeEecHecH27j0FsiyQFAgjHj 0lCioWPx1N0/I6XX3Cs5Ww1IyIL1PQNo5aCtepmKr56Me4HnQx1qLgxIkMYwa4m+ KDjgWLWzWvef1J7TAPg8vxS6Bt2H16En68ygXWD0a3yeqgXE7XXad7Qc6dRUpdR2 zkanWTaMaNEy+4nADVIRZCweKoj3KPFrV7mIBa07T7Kl9mDuEy3LIgPolvVFgY3m h8H2KE2j7i+16lu85FoIGsaba1tNphsoLF5UmsICaKssJBcMIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3LHuNSmWjKLiTlNUaTcfTun4sIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDFhNTgzNTQtNjcxOC0z OGNiLWFkYzUtZjZmNGU1NjJkYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASufRalAfhXnl+t1BTrDzOhiP+4T0a1F9gZVP9BE5uUpXSPm28XZeqe w/mElQFB6STKbON9l5yR80QighRr/Q87E/FED+Q2lRmZivY0y3PsJ9CKt85lYHeh 3IHsmwBg1j5qa/xoVZ83zNs6WBYT01iSnKgNDZHmy1V6IXwLWjroeq5YoF2iFn76 xHrmfXh5coa5a9GBCg5xyMME67ojsCcsOACDSOi5YVhgdOW+QZls1SA9FPUOjxBz 7n0+sT8yd1W9JSF4ZAL5mUD7FEArBrMaXKs+F0ebaLy6V9k7HfRa/R6mgEUI9S3S oUpzZw+ZxKA5IqKADKJ9tDa7mFd79lg= -----END CERTIFICATE-----Generated at Wed Oct 22 13:05:10 2025 by rpki-client