$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa File: 480a876e-f9de-3a86-b420-40e0c9062435.roa (raw, json) Hash identifier: sLbAplRJScpQizqaqaRS+687cXTgLPZBjx0fOX8Q91Y= Subject key identifier: 0D:1B:34:DB:B2:2E:E7:21:31:EC:33:8E:8B:D0:B7:80:8D:87:C6:47 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B987241297A94EEC868D19780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 203 IP address blocks: 20.134.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:41:29:7a:94:ee:c8:68:d1:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=f95e0701-fa0f-46b0-a331-200631b61cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:b0:0d:39:91:5a:69:05:1e:5d:28:c3:f6: 96:9b:69:7f:fe:d0:a2:51:e6:cb:5c:66:d9:37:f5: 95:2f:86:46:30:da:bc:be:b6:d3:b8:17:d9:6e:fb: 84:fe:69:6e:5f:29:1b:b0:9b:77:da:da:3b:2e:8f: cb:3a:94:7a:6e:8a:7c:d9:bd:8d:ba:60:b6:74:3b: 8f:76:3d:b0:7f:66:b3:4c:b5:f0:6c:59:50:72:d1: b8:9b:67:dd:9a:90:40:18:5c:2e:f3:4b:d5:66:5c: b7:47:93:73:38:66:56:bb:53:e8:d8:1f:b9:95:70: b6:a7:f5:0a:5a:f5:be:16:56:cd:f2:86:bc:43:bc: e4:f1:be:b9:41:27:d6:ee:b0:a0:50:31:f2:06:9c: 9c:c9:20:fa:8a:20:ad:79:2f:30:2a:34:b1:eb:d4: 99:e6:d6:5f:15:ef:8a:24:cb:ef:dd:04:a1:aa:02: 57:53:9a:60:c8:20:3d:a2:3d:e0:fc:3c:e1:da:4d: 1f:47:03:cb:ba:b5:08:a2:90:5c:12:25:d9:07:63: b2:15:84:7d:9a:50:5e:cd:ed:7b:57:34:54:e4:67: 49:6b:51:a2:39:0a:53:d0:18:5d:2a:62:50:6c:de: e8:08:d9:ae:1f:49:18:fe:4f:2b:d7:a9:c3:9f:ee: 56:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1B:34:DB:B2:2E:E7:21:31:EC:33:8E:8B:D0:B7:80:8D:87:C6:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:82:2f:4d:33:38:4e:6e:37:9d:e3:9b:91:9a:a2:9c:1d:b9: 27:d6:4d:ac:48:ba:5f:1f:d4:f4:1d:c0:23:fe:6a:8d:d3:32: 6b:54:16:87:f1:06:be:a2:68:26:2d:f6:d8:b7:2e:9d:cb:87: aa:2f:b3:4b:61:66:f2:3e:a7:6c:bb:75:5d:37:fe:8b:d9:17: 6d:38:c6:97:b8:cc:ec:e6:8e:f4:0d:2c:8a:9d:ae:51:a8:a9: 8e:5e:d9:dc:bc:a1:d2:14:8a:b9:65:cd:11:a6:35:f0:71:0e: 01:5f:fd:64:dd:75:db:98:8c:38:80:19:5f:e6:a2:03:15:2c: 70:cb:8c:d8:92:bf:3c:2e:2c:3e:11:bd:6b:e6:c9:50:4e:92: 5a:04:f3:ef:a3:c8:bc:8e:ac:ab:53:60:b3:55:ab:32:1b:18: db:1c:11:7a:db:c1:86:ce:c6:91:0b:41:9b:0e:fa:ef:0f:09: 05:d5:f8:7c:1f:46:c9:21:11:39:9d:bc:de:02:57:5c:b0:52: 40:ce:01:3f:98:83:4e:7c:d9:cb:e2:52:d3:99:01:b3:72:3a: 7b:1f:8a:da:4d:fd:6a:d7:ec:b4:ba:83:71:da:bf:87:d3:21: 76:00:d2:55:f3:ee:7c:e2:3d:dd:26:37:86:08:3f:cc:61:3b: cd:8a:bb:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckEpepTuyGjRl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk Zjk1ZTA3MDEtZmEwZi00NmIwLWEzMzEtMjAwNjMxYjYxY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW+wDTmRWmkFHl0ow/aWm2l//tCiUebLXGbZ N/WVL4ZGMNq8vrbTuBfZbvuE/mluXykbsJt32to7Lo/LOpR6bop82b2NumC2dDuP dj2wf2azTLXwbFlQctG4m2fdmpBAGFwu80vVZly3R5NzOGZWu1Po2B+5lXC2p/UK WvW+FlbN8oa8Q7zk8b65QSfW7rCgUDHyBpycySD6iiCteS8wKjSx69SZ5tZfFe+K JMvv3QShqgJXU5pgyCA9oj3g/Dzh2k0fRwPLurUIopBcEiXZB2OyFYR9mlBeze17 VzRU5GdJa1GiOQpT0BhdKmJQbN7oCNmuH0kY/k8r16nDn+5WOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0bNNuyLuchMewzjovQt4CNh8ZHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDgwYTg3NmUtZjlkZS0z YTg2LWI0MjAtNDBlMGM5MDYyNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqCL00zOE5uN53jm5GaopwduSfWTaxIul8f1PQdwCP+ao3TMmtUFofx Br6iaCYt9ti3Lp3Lh6ovs0thZvI+p2y7dV03/ovZF204xpe4zOzmjvQNLIqdrlGo qY5e2dy8odIUirllzRGmNfBxDgFf/WTddduYjDiAGV/mogMVLHDLjNiSvzwuLD4R vWvmyVBOkloE8++jyLyOrKtTYLNVqzIbGNscEXrbwYbOxpELQZsO+u8PCQXV+Hwf RskhETmdvN4CV1ywUkDOAT+Yg0582cviUtOZAbNyOnsfitpN/WrX7LS6g3Hav4fT IXYA0lXz7nziPd0mN4YIP8xhO82Ku3M= -----END CERTIFICATE-----Generated at Wed Oct 22 13:05:16 2025 by rpki-client