$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/039255e4-c9fb-35a5-8184-772546666ac4.roa File: 039255e4-c9fb-35a5-8184-772546666ac4.roa (raw, json) Hash identifier: X7qhc5GJpI3hLWg+Gkq3hOFp1ckROmH1q8A01TWepOc= Subject key identifier: 1E:58:2D:D8:06:06:D0:1E:7F:A1:98:3E:11:6B:38:00:30:77:81:0D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B95A79E5D04647088CB15F120 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/039255e4-c9fb-35a5-8184-772546666ac4.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 3360 IP address blocks: 20.134.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9e:5d:04:64:70:88:cb:15:f1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c6138c95-31ad-498f-8618-6d5df7d14691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e8:fb:43:db:89:80:2d:0f:13:fb:c3:e5:85: 88:47:3f:47:b3:ac:d9:eb:de:e3:a6:11:0b:ae:1c: f0:db:33:e1:0b:99:a1:ff:79:77:09:81:84:46:f5: be:5d:18:f5:66:5e:c9:e3:ae:23:88:6b:69:29:7f: 7e:3e:69:fa:77:b8:dc:19:d6:e9:20:94:50:34:52: 72:97:84:7a:57:20:39:d2:70:86:fd:e3:05:d7:91: 4d:5f:b8:03:55:c6:c3:9c:b6:b9:37:e9:62:90:8b: 5c:b9:6b:82:68:fd:e8:ad:1c:67:f1:3a:59:9e:39: 30:58:4b:41:df:ba:f8:69:c4:f1:c9:13:e1:93:9a: 7e:3d:16:fc:86:58:ba:db:6d:cd:82:f2:1d:4c:80: f8:a7:95:f7:12:45:66:b0:79:b3:9f:94:ad:d2:68: 5c:af:b4:00:62:f7:e7:ce:24:54:c8:e6:97:c4:87: 55:43:d9:f1:5c:e0:22:eb:c5:08:30:66:95:4b:58: 8a:02:22:5c:ab:37:79:26:c3:de:f6:1c:85:92:e4: 42:1e:76:cf:eb:8b:f0:fe:2b:aa:30:a9:b1:31:4c: 48:60:8b:56:ad:5a:91:09:bd:cf:78:43:1b:4a:aa: 89:fe:59:61:b5:45:2c:35:a1:ab:34:de:33:5c:33: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:58:2D:D8:06:06:D0:1E:7F:A1:98:3E:11:6B:38:00:30:77:81:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/039255e4-c9fb-35a5-8184-772546666ac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f4:7b:35:3a:80:ca:7f:78:cc:e5:9e:c4:47:89:5e:c8:10: 96:fe:f8:96:8e:37:56:25:c3:a9:69:ef:08:e4:a6:5d:1a:29: 82:a4:42:c9:27:8d:a0:fa:d2:9e:cb:97:8a:f9:b8:62:8c:89: a5:a9:99:24:22:b7:39:96:25:ee:25:9b:b8:21:85:ce:99:71: f1:0c:4e:25:45:28:95:3e:ba:47:37:2d:b5:44:e2:35:8a:c4: 24:42:96:90:c9:6d:d8:5d:43:15:9c:b3:e4:58:fb:62:77:48: 50:d4:34:4d:9e:95:c4:0b:e3:94:6f:3b:7d:3f:58:28:2b:f1: dc:31:fc:e5:44:01:22:12:c4:64:4b:09:b6:10:a4:af:03:4d: c0:8a:fe:f1:9f:c0:95:1c:ec:aa:3b:78:35:cc:44:84:6d:d2: 98:b6:66:49:e1:42:97:20:57:45:c4:eb:b1:a3:ea:7b:e1:df: 22:9a:5c:c4:da:e0:54:b5:8b:8c:66:d6:b0:b7:48:9f:e0:96: 51:e7:79:ff:c6:a7:14:a8:75:f1:b6:9b:e3:aa:d9:a1:ee:6d: 26:49:50:23:30:8c:de:07:ba:a5:34:a9:b9:16:cf:7c:88:37: af:08:84:10:de:a3:3d:20:1a:5c:3c:a8:f1:7f:5b:73:3f:82: 08:f4:d0:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp55dBGRwiMsV8SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzYxMzhjOTUtMzFhZC00OThmLTg2MTgtNmQ1ZGY3ZDE0NjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguj7Q9uJgC0PE/vD5YWIRz9Hs6zZ697jphEL rhzw2zPhC5mh/3l3CYGERvW+XRj1Zl7J464jiGtpKX9+Pmn6d7jcGdbpIJRQNFJy l4R6VyA50nCG/eMF15FNX7gDVcbDnLa5N+likItcuWuCaP3orRxn8TpZnjkwWEtB 37r4acTxyRPhk5p+PRb8hli6223NgvIdTID4p5X3EkVmsHmzn5St0mhcr7QAYvfn ziRUyOaXxIdVQ9nxXOAi68UIMGaVS1iKAiJcqzd5JsPe9hyFkuRCHnbP64vw/iuq MKmxMUxIYItWrVqRCb3PeEMbSqqJ/llhtUUsNaGrNN4zXDMF+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5YLdgGBtAef6GYPhFrOAAwd4ENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDM5MjU1ZTQtYzlmYi0z NWE1LTgxODQtNzcyNTQ2NjY2YWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv0ezU6gMp/eMzlnsRHiV7IEJb++JaON1Ylw6lp7wjkpl0aKYKkQskn jaD60p7Ll4r5uGKMiaWpmSQitzmWJe4lm7ghhc6ZcfEMTiVFKJU+ukc3LbVE4jWK xCRClpDJbdhdQxWcs+RY+2J3SFDUNE2elcQL45RvO30/WCgr8dwx/OVEASISxGRL CbYQpK8DTcCK/vGfwJUc7Ko7eDXMRIRt0pi2ZknhQpcgV0XE67Gj6nvh3yKaXMTa 4FS1i4xm1rC3SJ/gllHnef/GpxSodfG2m+Oq2aHubSZJUCMwjN4HuqU0qbkWz3yI N68IhBDeoz0gGlw8qPF/W3M/ggj00NI= -----END CERTIFICATE-----Generated at Tue Oct 28 17:52:04 2025 by rpki-client