$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa File: 4f87b28e-b073-3165-93da-edbf13ef0a9d.roa (raw, json) Hash identifier: 5Cg4eK6O7Hywgo8l4EOiSfWAgvnxZbPZogkZdnVVejY= Subject key identifier: 35:E8:9A:39:98:96:C7:6C:54:FD:DF:83:FF:B8:3A:5F:FE:F0:B7:F1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B987240E1EA13A1E3643D3800 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 202 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:40:e1:ea:13:a1:e3:64:3d:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=8b949839-de76-405a-92e3-a5cf8f98b525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:32:7c:d2:38:20:b6:95:68:92:92:9a:5f:23: ef:96:0c:4f:0c:7e:96:9f:33:3f:76:55:d0:bc:41: 67:44:59:f1:9b:99:f0:02:6c:68:cc:8d:cb:f1:35: 0a:a9:23:e0:e5:aa:aa:87:0a:5e:b3:f2:1a:f6:d3: 06:9b:31:a8:69:4d:f9:e5:da:c1:01:3b:53:7a:a7: 32:be:39:64:eb:66:14:0d:f5:b4:0e:d4:a3:25:d4: 0d:c3:4d:a4:c8:b0:3f:69:7a:80:8d:8d:8c:07:2a: ee:ce:3d:cb:c7:48:15:a9:89:f5:33:49:af:b5:9d: 4a:c1:a3:fc:93:1c:57:e5:a5:bf:1f:82:49:30:db: c1:c8:93:15:a0:fd:7a:33:66:0f:06:5c:4e:c7:73: 90:f6:45:2a:cf:fb:4e:29:65:a7:74:6a:79:c8:27: 0c:f4:06:09:e0:6a:63:e0:a6:f5:e0:a2:bb:50:3d: 93:61:58:ee:30:e3:2b:8c:bd:85:42:32:92:df:e0: 28:3c:25:ab:53:22:3a:ae:13:3d:6e:84:cc:c6:34: fc:2e:0a:c5:d8:7f:ea:b3:79:4a:24:3f:74:7a:15: 7e:27:cc:37:0a:81:95:14:cd:bf:a6:8d:0f:2a:7c: b4:d1:5e:b8:83:a0:f9:35:62:2d:8c:e7:30:3f:30: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E8:9A:39:98:96:C7:6C:54:FD:DF:83:FF:B8:3A:5F:FE:F0:B7:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:cb:17:bc:de:d5:bd:2e:15:08:32:8f:a4:60:87:c0:02:a9: 2d:3d:9b:ab:6c:38:4b:4b:cf:c8:f1:88:70:69:3b:27:3b:75: 35:66:d2:18:a6:4f:18:cd:8b:df:f8:d0:49:91:cc:4c:17:7b: 54:1d:9e:f4:d4:66:1d:c3:7d:ed:ac:26:9c:af:a6:82:3c:68: ad:9d:61:db:8e:83:5a:44:2b:9b:0c:c3:82:01:7c:2e:f4:4e: 4d:f0:24:1e:9b:00:37:38:82:5c:1a:aa:fc:e7:61:d6:b0:85: 9e:4b:03:f9:f3:d4:0e:62:70:9f:07:ce:0a:4e:95:d8:74:1a: 89:27:f7:93:33:0c:c0:95:ba:df:0e:90:bf:08:83:3c:ac:8f: f3:7c:81:fc:03:8a:43:c9:ca:b6:6c:86:17:78:90:5e:e5:2d: c4:6f:cb:af:b6:76:2a:88:e1:96:77:82:f1:db:d5:f5:db:0b: 4b:cd:76:e0:54:ff:33:f5:44:8b:35:7d:7b:62:42:bd:61:bd: c6:c0:f5:c9:ca:93:7c:61:1d:dd:38:f9:19:99:65:bd:fc:35: 93:fc:7e:75:66:55:56:87:b5:7e:dd:b4:a7:6e:19:48:aa:ac: b5:9a:6d:81:ea:c5:7e:38:fc:1f:08:8e:c8:4b:6e:bb:0a:d4: 44:7b:2c:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckDh6hOh42Q9OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OGI5NDk4MzktZGU3Ni00MDVhLTkyZTMtYTVjZjhmOThiNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTJ80jggtpVokpKaXyPvlgxPDH6WnzM/dlXQ vEFnRFnxm5nwAmxozI3L8TUKqSPg5aqqhwpes/Ia9tMGmzGoaU355drBATtTeqcy vjlk62YUDfW0DtSjJdQNw02kyLA/aXqAjY2MByruzj3Lx0gVqYn1M0mvtZ1KwaP8 kxxX5aW/H4JJMNvByJMVoP16M2YPBlxOx3OQ9kUqz/tOKWWndGp5yCcM9AYJ4Gpj 4Kb14KK7UD2TYVjuMOMrjL2FQjKS3+AoPCWrUyI6rhM9boTMxjT8LgrF2H/qs3lK JD90ehV+J8w3CoGVFM2/po0PKny00V64g6D5NWItjOcwPzAvtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXomjmYlsdsVP3fg/+4Ol/+8LfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNGY4N2IyOGUtYjA3My0z MTY1LTkzZGEtZWRiZjEzZWYwYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbLF7ze1b0uFQgyj6Rgh8ACqS09m6tsOEtLz8jxiHBpOyc7dTVm0him TxjNi9/40EmRzEwXe1QdnvTUZh3Dfe2sJpyvpoI8aK2dYduOg1pEK5sMw4IBfC70 Tk3wJB6bADc4glwaqvznYdawhZ5LA/nz1A5icJ8HzgpOldh0Gokn95MzDMCVut8O kL8Igzysj/N8gfwDikPJyrZshhd4kF7lLcRvy6+2diqI4ZZ3gvHb1fXbC0vNduBU /zP1RIs1fXtiQr1hvcbA9cnKk3xhHd04+RmZZb38NZP8fnVmVVaHtX7dtKduGUiq rLWabYHqxX44/B8IjshLbrsK1ER7LNI= -----END CERTIFICATE-----Generated at Wed Oct 22 13:02:54 2025 by rpki-client