$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa File: 3cb30814-1743-3f4c-9f2b-43e764333641.roa (raw, json) Hash identifier: 3JZtijSEJSa7wmVI0CzRE+tevi1d1+w7RGeJPrvKOzg= Subject key identifier: 82:04:5C:1C:A2:E2:76:B5:20:F1:0B:7D:2C:21:B6:13:CB:43:0E:CF Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B987240AAA53E261092082780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 202 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:40:aa:a5:3e:26:10:92:08:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=3403651c-d58a-482f-8941-c45bbe05d719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:8e:bc:c8:f5:aa:80:fd:0f:0c:ca:fe:60: 69:1c:25:b4:fe:e0:94:e7:e7:cd:f9:f5:45:5a:33: d5:a8:b0:7f:f3:97:04:78:d7:4f:48:ea:27:6f:2a: b0:7b:12:aa:25:fd:3e:29:51:50:79:b9:4a:b2:ef: c8:37:5a:da:23:89:07:aa:2f:a8:99:27:c0:51:de: 0f:76:50:32:e3:94:1f:89:21:d8:c4:5c:ba:48:4f: 5d:6e:b3:cc:fb:f3:26:e6:52:6d:68:d5:9f:14:c2: 1b:44:fd:8e:b5:f4:de:58:3a:79:a4:f6:34:16:1e: 0d:e7:dd:57:62:93:5e:c4:54:16:4f:14:37:54:3b: 89:e9:99:ca:37:fd:b6:7c:94:6e:c6:80:e9:57:10: 8b:14:da:21:bb:dc:72:b5:ad:cc:3f:ea:8b:fb:b4: 20:ac:27:e1:7b:f1:67:7a:3d:e9:7c:a0:97:6b:1a: ca:a0:93:ac:a7:32:8f:3b:4d:5c:e9:c2:94:f0:2d: 9f:93:c4:85:11:d9:25:c7:54:7c:d5:9d:3e:33:22: b6:05:f9:1f:73:f4:f5:e3:06:25:df:35:e2:7b:8d: c9:be:55:fa:42:7e:b3:44:31:f9:b8:b8:78:fe:13: 65:91:27:b4:d0:02:ca:3f:6f:ad:35:c0:8e:2c:89: 39:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:04:5C:1C:A2:E2:76:B5:20:F1:0B:7D:2C:21:B6:13:CB:43:0E:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:51:70:ad:df:91:fb:40:38:2a:fb:0e:1c:b3:60:a8:83:70: 16:8f:f9:61:d1:90:5f:e1:83:e9:be:a4:23:ff:86:33:f7:b4: 56:f0:1c:a7:db:fd:c8:64:d0:26:1d:cf:32:43:ac:03:4d:25: 5b:54:9e:15:d4:1c:51:9a:7a:4a:b0:2a:22:00:93:2f:ec:32: 5b:3a:77:81:d0:ec:bf:df:8c:3d:96:dc:74:c9:10:f8:06:53: 51:b3:9b:2c:74:a9:45:9d:97:cc:3f:67:55:cb:ea:d4:d3:72: 7c:37:30:66:31:3c:75:1a:38:72:86:b3:4e:75:d4:c3:21:5d: 4d:b0:25:3f:56:0a:15:bf:b1:22:bd:9f:c5:64:0e:11:5d:31: 93:80:4e:cf:9b:27:04:b6:d5:cc:50:1c:7e:12:a8:76:59:9f: 6d:07:41:f1:55:f5:7d:81:62:a7:6c:62:b8:01:eb:6b:2c:73: 39:9e:6c:67:3f:e1:61:35:9f:c0:aa:67:6d:d1:68:8e:7c:d8: 21:58:b0:ca:db:d1:ed:50:f1:35:14:f7:d6:6f:d3:d5:ce:8d: fa:65:7c:81:47:30:80:17:4e:fc:fa:0f:6e:4e:00:24:d1:d2: 73:1c:65:1c:6d:23:3b:58:82:5e:37:fd:2a:35:15:11:77:55: 49:d3:17:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckCqpT4mEJIIJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MzQwMzY1MWMtZDU4YS00ODJmLTg5NDEtYzQ1YmJlMDVkNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqluOvMj1qoD9DwzK/mBpHCW0/uCU5+fN+fVF WjPVqLB/85cEeNdPSOonbyqwexKqJf0+KVFQeblKsu/IN1raI4kHqi+omSfAUd4P dlAy45QfiSHYxFy6SE9dbrPM+/Mm5lJtaNWfFMIbRP2OtfTeWDp5pPY0Fh4N591X YpNexFQWTxQ3VDuJ6ZnKN/22fJRuxoDpVxCLFNohu9xyta3MP+qL+7QgrCfhe/Fn ej3pfKCXaxrKoJOspzKPO01c6cKU8C2fk8SFEdklx1R81Z0+MyK2Bfkfc/T14wYl 3zXie43JvlX6Qn6zRDH5uLh4/hNlkSe00ALKP2+tNcCOLIk5cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIEXByi4na1IPELfSwhthPLQw7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2NiMzA4MTQtMTc0My0z ZjRjLTlmMmItNDNlNzY0MzMzNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxRcK3fkftAOCr7DhyzYKiDcBaP+WHRkF/hg+m+pCP/hjP3tFbwHKfb /chk0CYdzzJDrANNJVtUnhXUHFGaekqwKiIAky/sMls6d4HQ7L/fjD2W3HTJEPgG U1Gzmyx0qUWdl8w/Z1XL6tTTcnw3MGYxPHUaOHKGs0511MMhXU2wJT9WChW/sSK9 n8VkDhFdMZOATs+bJwS21cxQHH4SqHZZn20HQfFV9X2BYqdsYrgB62ssczmebGc/ 4WE1n8CqZ23RaI582CFYsMrb0e1Q8TUU99Zv09XOjfplfIFHMIAXTvz6D25OACTR 0nMcZRxtIztYgl43/So1FRF3VUnTF/s= -----END CERTIFICATE-----Generated at Wed Oct 22 13:04:30 2025 by rpki-client