$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa File: 59a83d47-6316-3fc5-9032-22b42a178341.roa (raw, json) Hash identifier: pcuSbvJSfqAdAZrqv/zgaXOb0kxCckZT2GnL22naoEY= Subject key identifier: 2B:13:92:27:39:71:A7:3B:3F:8E:6F:9C:38:AA:EF:27:14:8E:E4:33 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B987241BF9F8573C1F85804A0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 202 IP address blocks: 20.134.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:41:bf:9f:85:73:c1:f8:58:04:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=7fa0e798-31a6-4980-9bb7-09cd9834d6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:20:64:40:17:0d:e8:18:20:72:31:7d:98: 9c:7b:0c:ab:5f:29:2c:35:21:57:54:63:37:09:8b: 32:3f:fb:d3:02:a4:50:55:9a:54:3a:83:cd:6a:d4: ea:d4:b4:4a:f9:ff:33:7b:f6:42:c9:99:ab:72:5a: a1:a2:81:fb:9a:8b:47:e8:9d:7a:0e:12:34:cc:ce: 28:7d:d5:37:aa:2a:e0:86:ce:1a:72:83:d1:3f:86: 37:20:6a:5d:85:8d:44:ee:58:d0:5a:d5:85:e7:33: 73:46:92:33:e5:89:b7:c8:0b:67:e4:dc:b0:af:61: cc:8c:6b:dc:27:52:e6:53:d2:83:33:7a:c2:7e:04: 00:80:9f:5f:9c:a2:84:9f:7a:ef:3e:12:51:d6:e5: ae:aa:92:e0:08:ea:81:38:9e:e6:44:64:1c:3d:97: 36:1e:c1:ce:e7:40:15:d3:6f:e1:7d:49:5b:0e:f4: 81:6b:fa:92:5e:ef:50:96:61:9e:5c:d3:3f:e9:87: 88:57:dc:a5:2a:c2:1c:f7:14:d2:bd:dc:33:da:6f: 90:d0:f5:0e:26:d9:2f:3c:e2:fa:48:0b:18:d7:b6: fc:af:68:36:52:1c:8c:5c:bb:e3:40:9c:44:95:fe: 3c:e1:c9:44:f0:98:b5:e7:96:ab:c1:c6:36:b6:8a: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:13:92:27:39:71:A7:3B:3F:8E:6F:9C:38:AA:EF:27:14:8E:E4:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:67:71:c0:89:9c:83:7c:8d:7b:d3:7d:b7:63:66:65:f7:8c: 35:1a:62:d4:7a:9f:a4:35:60:33:cc:d4:15:71:2e:89:52:c5: 43:fd:c9:d1:7e:c9:77:89:13:e4:69:c4:db:1e:05:20:f2:e8: 6a:19:7a:6e:ce:59:4b:bd:cf:99:f7:93:ff:b3:12:c9:7d:9e: c3:b6:00:ef:23:0e:62:d1:c8:67:7f:87:4f:4f:34:9c:85:01: b3:fb:01:28:6c:ce:29:38:4b:69:b4:26:6b:e6:1d:bc:71:86: 33:d0:bb:ee:23:68:8b:cc:14:69:6a:61:66:2a:40:e0:a3:f9: ee:df:49:33:e5:d2:b4:dd:e5:a7:fc:e1:ef:b5:9d:ea:2e:7b: ca:8e:d8:8d:49:5e:d3:1b:b0:a8:30:19:96:94:f8:dc:36:1b: a5:27:4a:b1:61:ca:97:f5:46:bc:ac:ae:f9:e0:13:5e:c0:8e: 69:df:0f:37:ae:75:93:25:d0:f2:86:8d:b2:56:55:2a:05:6e: b2:b8:99:c8:76:0d:83:9c:3f:24:00:4b:83:20:43:f0:ea:22: 70:bd:0d:bc:cc:0f:5a:8f:f7:36:98:cb:79:4a:71:78:ab:31: 3a:0b:9f:1e:f1:19:5e:00:05:7a:f1:e7:03:39:11:9f:1b:7c: 7b:cd:e6:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckG/n4VzwfhYBKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk N2ZhMGU3OTgtMzFhNi00OTgwLTliYjctMDljZDk4MzRkNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPcgZEAXDegYIHIxfZicewyrXyksNSFXVGM3 CYsyP/vTAqRQVZpUOoPNatTq1LRK+f8ze/ZCyZmrclqhooH7motH6J16DhI0zM4o fdU3qirghs4acoPRP4Y3IGpdhY1E7ljQWtWF5zNzRpIz5Ym3yAtn5Nywr2HMjGvc J1LmU9KDM3rCfgQAgJ9fnKKEn3rvPhJR1uWuqpLgCOqBOJ7mRGQcPZc2HsHO50AV 02/hfUlbDvSBa/qSXu9QlmGeXNM/6YeIV9ylKsIc9xTSvdwz2m+Q0PUOJtkvPOL6 SAsY17b8r2g2UhyMXLvjQJxElf484clE8Ji155arwcY2top3OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsTkic5cac7P45vnDiq7ycUjuQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTlhODNkNDctNjMxNi0z ZmM1LTkwMzItMjJiNDJhMTc4MzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBnccCJnIN8jXvTfbdjZmX3jDUaYtR6n6Q1YDPM1BVxLolSxUP9ydF+ yXeJE+RpxNseBSDy6GoZem7OWUu9z5n3k/+zEsl9nsO2AO8jDmLRyGd/h09PNJyF AbP7AShszik4S2m0JmvmHbxxhjPQu+4jaIvMFGlqYWYqQOCj+e7fSTPl0rTd5af8 4e+1neoue8qO2I1JXtMbsKgwGZaU+Nw2G6UnSrFhypf1RrysrvngE17AjmnfDzeu dZMl0PKGjbJWVSoFbrK4mch2DYOcPyQAS4MgQ/DqInC9DbzMD1qP9zaYy3lKcXir MToLnx7xGV4ABXrx5wM5EZ8bfHvN5lo= -----END CERTIFICATE-----Generated at Wed Oct 22 13:04:27 2025 by rpki-client