$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c63304e-66b9-3726-9842-2f821bb164fd.roa File: 4c63304e-66b9-3726-9842-2f821bb164fd.roa (raw, json) Hash identifier: PC+1Hwkg6ZkwSqpuZhseVe6iASsilin4gge/t/roIY4= Subject key identifier: F2:E1:05:C8:B9:5D:99:BF:45:22:E2:AA:DE:0D:97:98:46:65:F8:83 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B95A79E34F03F9953EF65C680 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c63304e-66b9-3726-9842-2f821bb164fd.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 3360 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9e:34:f0:3f:99:53:ef:65:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b5ec82ec-ce8c-4358-a9c6-d84aa33d86b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:0c:0e:86:30:f1:da:77:8c:21:2d:49:07: 25:59:ad:df:1f:fa:fd:b4:9e:59:00:b4:81:96:12: 45:0f:3d:03:79:16:9f:c7:ee:95:e3:f8:6b:0b:32: 60:dd:92:f8:f2:8e:92:43:0f:34:14:dd:ad:c1:63: 35:65:93:de:56:74:d0:c1:56:69:e8:dd:79:fb:0d: a4:89:45:50:b3:0b:56:ee:93:01:b4:2b:5e:d3:37: c8:48:d2:73:96:a9:67:51:94:c7:1f:ed:1c:a9:84: cc:d4:cf:dd:7e:99:54:16:11:d2:20:d4:fb:72:cd: 1e:ef:c6:4f:66:27:02:3b:11:27:7d:7e:9c:86:98: 8f:81:8d:02:80:32:b6:e4:8c:fb:9c:95:a6:fb:3e: f5:36:e2:48:29:ad:74:f1:9c:f3:f9:52:8b:58:b0: 55:13:87:84:ca:e1:81:5c:34:b9:2b:de:5c:e7:b2: c6:41:23:1d:38:fc:81:8c:c7:a3:42:0b:ab:b8:80: 55:dd:ea:bf:25:f5:a9:7d:a5:dd:1c:67:65:7e:bd: 9a:d2:ae:9d:20:85:cd:8c:ce:49:6c:42:43:d5:59: 2e:8b:6c:46:28:a5:a1:89:f3:96:04:42:f5:3f:fc: 82:87:3b:d7:84:5e:be:d8:0d:ba:8c:8a:14:11:23: 4f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E1:05:C8:B9:5D:99:BF:45:22:E2:AA:DE:0D:97:98:46:65:F8:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c63304e-66b9-3726-9842-2f821bb164fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c0:03:8a:7e:1b:86:75:3e:9c:56:50:cb:8c:49:61:00:41: 98:b1:8f:39:db:a9:33:dc:80:ba:ec:c8:6e:0f:c7:29:1a:59: bf:46:4e:b9:9f:d6:4a:e8:50:5f:e9:5f:a0:f2:98:ce:b4:cd: 0c:de:18:1b:6c:d9:d5:9f:4a:4e:c2:d8:d8:7c:27:05:c6:8f: 7a:56:06:f7:48:d5:ba:21:ac:83:71:54:45:45:ee:25:e6:39: 1e:11:a9:62:1d:e8:bc:89:52:a2:3b:fb:65:8d:02:e8:ec:c8: 1a:9a:95:d6:33:1f:e2:70:bd:ea:29:e3:65:f9:66:e6:13:05: 52:08:63:6e:0a:fa:8f:c6:27:cc:65:47:c1:ca:53:5a:ee:b8: 09:79:fe:c6:69:aa:5c:62:52:76:5b:9f:53:f1:eb:4e:cb:89: da:46:2a:42:0c:29:e0:b9:5b:49:3a:62:de:8c:64:f5:93:cd: be:90:d9:13:1d:3e:f1:cf:c9:9f:31:00:ed:e5:ea:a5:0a:df: 26:33:4c:a5:a4:0f:73:3a:e4:78:13:ad:96:f9:1e:fd:af:d0: a3:a3:be:f5:08:e4:4c:60:43:d1:03:ef:f9:b5:3e:ab:6f:de: aa:6e:43:4c:e9:0c:10:06:34:b5:61:f9:22:37:64:bb:3e:28: 4f:f3:a7:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5408D+ZU+9lxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjVlYzgyZWMtY2U4Yy00MzU4LWE5YzYtZDg0YWEzM2Q4NmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKMMDoYw8dp3jCEtSQclWa3fH/r9tJ5ZALSB lhJFDz0DeRafx+6V4/hrCzJg3ZL48o6SQw80FN2twWM1ZZPeVnTQwVZp6N15+w2k iUVQswtW7pMBtCte0zfISNJzlqlnUZTHH+0cqYTM1M/dfplUFhHSINT7cs0e78ZP ZicCOxEnfX6chpiPgY0CgDK25Iz7nJWm+z71NuJIKa108Zzz+VKLWLBVE4eEyuGB XDS5K95c57LGQSMdOPyBjMejQguruIBV3eq/JfWpfaXdHGdlfr2a0q6dIIXNjM5J bEJD1Vkui2xGKKWhifOWBEL1P/yChzvXhF6+2A26jIoUESNPdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLhBci5XZm/RSLiqt4Nl5hGZfiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNGM2MzMwNGUtNjZiOS0z NzI2LTk4NDItMmY4MjFiYjE2NGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrAA4p+G4Z1PpxWUMuMSWEAQZixjznbqTPcgLrsyG4PxykaWb9GTrmf 1kroUF/pX6DymM60zQzeGBts2dWfSk7C2Nh8JwXGj3pWBvdI1bohrINxVEVF7iXm OR4RqWId6LyJUqI7+2WNAujsyBqaldYzH+Jwveop42X5ZuYTBVIIY24K+o/GJ8xl R8HKU1ruuAl5/sZpqlxiUnZbn1Px607LidpGKkIMKeC5W0k6Yt6MZPWTzb6Q2RMd PvHPyZ8xAO3l6qUK3yYzTKWkD3M65HgTrZb5Hv2v0KOjvvUI5ExgQ9ED7/m1Pqtv 3qpuQ0zpDBAGNLVh+SI3ZLs+KE/zp3g= -----END CERTIFICATE-----Generated at Tue Oct 28 17:52:34 2025 by rpki-client