$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa File: 5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa (raw, json) Hash identifier: AHBvOd6XHkhfXl/JI3gTIvYajk0k8OdpPzQx+ZodROw= Subject key identifier: 54:A1:3D:99:83:85:F5:07:A0:A6:46:5E:EC:F4:A2:BA:0B:CC:39:73 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B6D2CB6D3D64EB879CFEF4E60 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 203 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b6:d3:d6:4e:b8:79:cf:ef:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=fa98f2ca-2af0-46cf-9f95-600ba0c06212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:59:e4:f7:4e:15:b9:73:65:ec:af:40:5c:02: c8:47:04:35:f8:3b:00:85:8e:7b:a8:87:8c:ff:92: ab:aa:73:00:34:4b:00:ad:74:9e:47:70:16:a1:a1: 11:04:d5:22:d2:bf:73:8e:0b:d7:f0:09:10:a7:3c: 55:e4:f0:d5:76:68:3f:a9:51:cd:38:15:f9:7d:0e: ec:e1:39:21:75:b3:f4:50:d6:9f:b3:75:da:98:b6: a1:3c:3d:fa:58:b5:7b:b7:d7:7d:d0:fe:d5:a4:1e: df:4f:5a:9a:ab:09:a0:e2:d5:97:80:99:fe:0a:9e: 57:b8:e0:50:08:c9:8c:8d:1b:8f:52:12:86:e1:90: 15:a8:49:80:c9:c3:45:c2:32:bb:fd:97:8b:d6:f6: 5b:f5:9a:80:10:19:be:48:96:15:2d:ed:dc:74:f9: 9d:d5:d5:ce:02:97:d0:73:87:6c:59:33:ad:1a:fa: 5f:31:58:30:4a:10:03:63:4e:e4:a0:9d:05:0a:da: 52:cf:04:ec:60:b8:c9:de:84:f0:89:70:7c:9b:a2: 3d:e4:f4:1d:0e:3a:02:17:51:ec:b7:c8:8a:7e:05: cf:62:34:5d:b3:e6:65:eb:a2:4c:da:71:1f:bd:07: a7:72:c9:ef:e1:da:03:a3:2c:3d:53:67:99:b3:e4: 31:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A1:3D:99:83:85:F5:07:A0:A6:46:5E:EC:F4:A2:BA:0B:CC:39:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f8:fc:bd:65:7b:f4:52:0f:29:6d:22:e5:c1:f7:b9:39:6c: bf:d7:7f:68:cb:13:ae:cd:28:50:83:26:36:1c:79:8c:f7:5b: b9:89:f1:ad:94:3b:23:85:ae:ef:40:e0:8a:d4:53:6c:4a:54: 61:70:52:ea:c0:38:dd:9a:db:a0:56:81:e4:8b:90:07:ce:4a: a8:4d:c0:54:63:e1:c8:c5:a2:93:10:ea:cb:1b:d3:4c:78:86: aa:89:16:7a:ee:2d:75:17:c2:b1:5c:25:54:fb:8b:7a:81:8c: e2:db:c0:62:50:81:71:8d:9f:b2:b5:73:94:9f:06:9a:9a:ea: 92:eb:dd:4e:d0:4f:f1:a6:1a:1c:15:3c:97:32:85:d3:a2:b4: ab:78:2a:4d:fc:a3:f7:1b:96:c0:b6:18:9f:77:70:ab:27:22: 52:a3:dd:c2:b5:1f:c3:7e:08:27:d6:4e:22:be:9b:3f:63:26: f4:9c:2b:6f:49:26:ea:19:80:29:e2:d4:2d:95:ac:7a:6c:e0: d3:fe:88:36:b3:e9:71:ff:05:a0:e9:59:20:1d:ce:a3:9e:b3: 2b:32:6f:9b:29:d6:5f:15:c9:26:85:0a:94:e8:e4:54:dd:c1: 06:10:8f:b3:9a:3b:33:7e:51:3e:2b:10:ba:7d:c1:ed:83:0a: 99:77:5b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLLbT1k64ec/vTmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmE5OGYyY2EtMmFmMC00NmNmLTlmOTUtNjAwYmEwYzA2MjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlnk904VuXNl7K9AXALIRwQ1+DsAhY57qIeM /5KrqnMANEsArXSeR3AWoaERBNUi0r9zjgvX8AkQpzxV5PDVdmg/qVHNOBX5fQ7s 4TkhdbP0UNafs3XamLahPD36WLV7t9d90P7VpB7fT1qaqwmg4tWXgJn+Cp5XuOBQ CMmMjRuPUhKG4ZAVqEmAycNFwjK7/ZeL1vZb9ZqAEBm+SJYVLe3cdPmd1dXOApfQ c4dsWTOtGvpfMVgwShADY07koJ0FCtpSzwTsYLjJ3oTwiXB8m6I95PQdDjoCF1Hs t8iKfgXPYjRds+Zl66JM2nEfvQencsnv4doDoyw9U2eZs+QxUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFShPZmDhfUHoKZGXuz0oroLzDlzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWEyYTZkMzEtOGNkMC0z NTIxLWJlYjEtZjY5YzA0NmNiMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD74/L1le/RSDyltIuXB97k5bL/Xf2jLE67NKFCDJjYceYz3W7mJ8a2U OyOFru9A4IrUU2xKVGFwUurAON2a26BWgeSLkAfOSqhNwFRj4cjFopMQ6ssb00x4 hqqJFnruLXUXwrFcJVT7i3qBjOLbwGJQgXGNn7K1c5SfBpqa6pLr3U7QT/GmGhwV PJcyhdOitKt4Kk38o/cblsC2GJ93cKsnIlKj3cK1H8N+CCfWTiK+mz9jJvScK29J JuoZgCni1C2VrHps4NP+iDaz6XH/BaDpWSAdzqOesysyb5sp1l8VySaFCpTo5FTd wQYQj7OaOzN+UT4rELp9we2DCpl3Wxw= -----END CERTIFICATE-----Generated at Wed Oct 22 13:04:27 2025 by rpki-client