$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4126ee82-288b-3022-99fa-acba46d2e16d.roa File: 4126ee82-288b-3022-99fa-acba46d2e16d.roa (raw, json) Hash identifier: RWaoFT2ECJYtxn8xw72mVUZ+U6KXKmzT8WxuOxX2zD8= Subject key identifier: 9E:51:AC:CA:6F:C4:DF:11:78:42:0C:29:BB:D2:DD:1B:08:E4:EF:4F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B95A79EA862E61E6BFF0D03C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4126ee82-288b-3022-99fa-acba46d2e16d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 3360 IP address blocks: 20.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9e:a8:62:e6:1e:6b:ff:0d:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=01b7abb4-0b03-4c84-b2a8-ab82b4d18384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:aa:f4:56:6a:ca:bd:96:dd:ea:b3:b8:5e: 5a:42:6e:c9:f4:4d:05:16:3b:ca:6a:e3:4a:b8:2a: 1c:cf:46:91:7e:c6:da:42:a9:7f:6c:dc:e0:57:14: 49:7f:6c:be:28:aa:be:76:dc:c2:8f:72:0f:89:74: 9c:87:e5:fb:80:ce:aa:f6:f2:a8:66:16:79:d1:03: 34:c4:5e:b9:58:63:e8:6a:38:66:7d:14:4e:e4:b0: ed:9d:46:e4:a4:0b:37:f0:7a:fa:93:bd:3c:eb:3b: 32:04:42:e7:b9:68:0b:24:c8:9b:e8:65:8f:c8:c2: f8:90:b0:11:7f:0e:4e:c0:2a:35:3c:7e:a5:63:d1: 4a:50:ad:87:b2:35:18:46:b9:5f:e1:33:39:a3:bf: 3d:b6:ad:18:aa:a8:c2:97:6f:20:94:4b:7e:a4:68: 59:45:d2:56:3c:1a:1e:6d:e7:d5:e8:ea:33:3a:51: 95:8f:31:8e:47:91:0c:18:c6:ab:c3:72:93:d7:e2: fc:e6:a4:ed:ed:b8:50:47:37:06:33:42:69:fa:42: 52:af:1e:0b:7d:5d:68:61:d8:52:fa:18:2e:57:91: 39:00:03:62:e2:17:ca:e3:b7:f7:b2:f4:1e:bd:9b: 81:4c:ba:f5:cc:3c:cd:21:c9:92:8b:ec:a8:b5:6c: a9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:51:AC:CA:6F:C4:DF:11:78:42:0C:29:BB:D2:DD:1B:08:E4:EF:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4126ee82-288b-3022-99fa-acba46d2e16d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:14:b9:74:18:91:3f:6f:4a:4d:d3:4a:2d:32:ff:03:89:c2: a0:b1:fa:4b:52:8f:0f:af:a4:9a:e1:67:c2:d2:81:28:b9:92: 2b:91:f0:e9:f9:b9:24:7e:0c:db:5d:3a:97:f1:38:c7:6e:59: f2:17:42:db:4e:83:1a:a7:79:93:6a:15:d1:9f:a8:34:34:d6: aa:22:ef:ba:be:15:ba:11:b8:c8:07:95:69:41:50:9f:2c:91: e8:f9:34:1c:75:90:37:30:c1:3d:51:3b:d4:a8:9f:b2:9c:13: 58:1e:62:d2:09:2e:04:23:af:08:5e:9b:e1:30:23:ba:2b:04: d3:b6:ff:cc:86:fb:ba:54:7a:27:b5:89:41:9a:97:83:70:1d: a9:f4:39:f0:0e:8d:17:b3:33:0a:bb:52:1e:16:3d:3b:d8:23: da:de:46:16:c3:cf:e7:4c:c4:6f:b0:63:91:b2:54:4e:50:ff: 21:8b:b3:12:ad:21:b9:10:ef:b4:2f:16:6d:d8:b6:a4:21:73: 20:e0:dc:1d:00:ec:86:74:70:4c:60:1d:a2:86:98:53:e4:30: 1d:26:bc:ef:15:b3:d8:93:8a:b8:0b:49:19:1f:f3:1d:ff:93: 0b:f2:65:ae:2e:60:05:1f:0d:57:b3:f2:e6:74:34:52:60:02: dc:06:35:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp56oYuYea/8NA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDFiN2FiYjQtMGIwMy00Yzg0LWIyYTgtYWI4MmI0ZDE4Mzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp46q9FZqyr2W3eqzuF5aQm7J9E0FFjvKauNK uCocz0aRfsbaQql/bNzgVxRJf2y+KKq+dtzCj3IPiXSch+X7gM6q9vKoZhZ50QM0 xF65WGPoajhmfRRO5LDtnUbkpAs38Hr6k7086zsyBELnuWgLJMib6GWPyML4kLAR fw5OwCo1PH6lY9FKUK2HsjUYRrlf4TM5o789tq0YqqjCl28glEt+pGhZRdJWPBoe befV6OozOlGVjzGOR5EMGMarw3KT1+L85qTt7bhQRzcGM0Jp+kJSrx4LfV1oYdhS +hguV5E5AANi4hfK47f3svQevZuBTLr1zDzNIcmSi+yotWypjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5RrMpvxN8ReEIMKbvS3RsI5O9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDEyNmVlODItMjg4Yi0z MDIyLTk5ZmEtYWNiYTQ2ZDJlMTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcUuXQYkT9vSk3TSi0y/wOJwqCx+ktSjw+vpJrhZ8LSgSi5kiuR8On5 uSR+DNtdOpfxOMduWfIXQttOgxqneZNqFdGfqDQ01qoi77q+FboRuMgHlWlBUJ8s kej5NBx1kDcwwT1RO9Son7KcE1geYtIJLgQjrwhem+EwI7orBNO2/8yG+7pUeie1 iUGal4NwHan0OfAOjRezMwq7Uh4WPTvYI9reRhbDz+dMxG+wY5GyVE5Q/yGLsxKt IbkQ77QvFm3YtqQhcyDg3B0A7IZ0cExgHaKGmFPkMB0mvO8Vs9iTirgLSRkf8x3/ kwvyZa4uYAUfDVez8uZ0NFJgAtwGNQo= -----END CERTIFICATE-----Generated at Tue Oct 28 17:52:04 2025 by rpki-client