$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5f031e31-67c0-3135-9681-d0bb711aa7d1.roa File: 5f031e31-67c0-3135-9681-d0bb711aa7d1.roa (raw, json) Hash identifier: AYaUq7a4SxyyxPWP/csv81Y6CT51ArBlgClIhQxpFsk= Subject key identifier: D5:2E:51:9B:92:9E:5C:87:D0:A3:2B:95:EC:F8:34:AE:4D:10:4A:FC Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCC883B7175144F4883B80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5f031e31-67c0-3135-9681-d0bb711aa7d1.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 202 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c8:83:b7:17:51:44:f4:88:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=47b5080f-a4d1-4282-bbb0-247d0edd8936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:6a:2f:c3:e1:78:5c:8e:ff:f1:77:e3:6a: 6d:a0:51:62:20:e5:88:16:11:13:c0:e9:7e:84:da: 39:18:e6:cc:fa:df:d3:19:61:51:2c:7f:5e:ea:8f: b8:e7:45:97:d0:fd:0c:3d:21:c6:e2:8c:35:4d:e5: ba:b4:c0:7c:b5:e4:22:26:ef:29:97:22:1c:1e:81: 79:a2:ec:2a:c3:3b:9a:79:0b:fa:19:df:02:0b:0b: 54:07:5a:a2:8a:f4:2b:28:96:fb:a7:bb:3f:ef:6c: fc:db:63:d2:d6:9c:ca:5b:f7:71:d5:11:f5:db:ec: bc:ed:ed:34:b3:68:e9:45:99:c2:a0:c9:b9:2c:7d: 99:25:a9:bb:da:07:da:0d:50:35:09:d7:a6:7c:4a: 2b:3d:5e:60:4d:ec:77:13:ea:91:8d:88:ac:e8:52: a1:57:9b:34:16:b8:ab:0f:1a:e1:6a:d7:11:a1:3c: 4e:a0:fe:86:bf:06:fc:9a:c0:68:91:64:e6:6f:a7: 42:fc:38:a2:44:2e:dd:77:b5:d9:8f:2b:20:4b:5f: 92:ed:93:49:a1:82:81:27:a0:f7:aa:94:fa:8e:57: 84:e0:67:7e:e6:df:e1:58:2d:bc:0b:38:23:2d:67: 3e:30:83:cf:96:0d:fc:a3:a5:dd:16:b1:d6:da:80: 19:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2E:51:9B:92:9E:5C:87:D0:A3:2B:95:EC:F8:34:AE:4D:10:4A:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5f031e31-67c0-3135-9681-d0bb711aa7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:73:50:e4:a6:89:ef:52:44:2e:8d:43:61:66:82:33:09:a9: 19:81:9d:73:9e:00:94:a5:5c:27:e5:a7:30:9f:e1:f9:a8:84: 38:9c:49:87:94:7a:c1:bf:36:f1:43:46:a1:ee:34:0a:63:e9: e4:5c:97:57:7c:54:ce:7d:f4:56:46:4b:a8:15:b5:04:e3:97: aa:00:7e:11:ba:95:56:49:1b:f2:d9:6c:a4:89:18:ef:01:db: 1a:ed:b3:2b:05:ec:b4:4a:2c:32:11:43:05:90:78:ad:cf:5e: 81:98:c3:db:7e:c8:d4:b7:28:fa:ac:bd:5e:91:1c:34:54:ad: 8d:04:e7:99:2c:60:15:05:1b:f3:f3:3a:77:07:9a:7a:33:bc: fc:fa:30:95:0a:af:ef:1f:af:7f:17:9b:96:57:5e:13:50:e9: fc:8c:c6:f8:6f:b4:53:d7:44:49:92:4b:a5:ac:e9:42:f4:a4: 8f:a1:37:3a:0c:6b:6a:64:cc:e5:1f:e1:69:66:63:7b:7c:56: 17:96:7b:a7:9c:4d:b3:6c:b9:cd:a1:46:be:6f:f6:63:15:fd: 21:e1:e0:22:9d:3c:45:f8:b8:ff:3d:f3:77:fa:63:6f:7e:18: 97:48:c8:46:1e:67:e2:c3:03:1b:f8:7e:7a:c8:a1:0b:11:16: 39:1a:ee:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMiDtxdRRPSIO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NDdiNTA4MGYtYTRkMS00MjgyLWJiYjAtMjQ3ZDBlZGQ4OTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGBqL8PheFyO//F342ptoFFiIOWIFhETwOl+ hNo5GObM+t/TGWFRLH9e6o+450WX0P0MPSHG4ow1TeW6tMB8teQiJu8plyIcHoF5 ouwqwzuaeQv6Gd8CCwtUB1qiivQrKJb7p7s/72z822PS1pzKW/dx1RH12+y87e00 s2jpRZnCoMm5LH2ZJam72gfaDVA1CdemfEorPV5gTex3E+qRjYis6FKhV5s0Frir DxrhatcRoTxOoP6Gvwb8msBokWTmb6dC/DiiRC7dd7XZjysgS1+S7ZNJoYKBJ6D3 qpT6jleE4Gd+5t/hWC28CzgjLWc+MIPPlg38o6XdFrHW2oAZJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUuUZuSnlyH0KMrlez4NK5NEEr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWYwMzFlMzEtNjdjMC0z MTM1LTk2ODEtZDBiYjcxMWFhN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVzUOSmie9SRC6NQ2FmgjMJqRmBnXOeAJSlXCflpzCf4fmohDicSYeU esG/NvFDRqHuNApj6eRcl1d8VM599FZGS6gVtQTjl6oAfhG6lVZJG/LZbKSJGO8B 2xrtsysF7LRKLDIRQwWQeK3PXoGYw9t+yNS3KPqsvV6RHDRUrY0E55ksYBUFG/Pz OncHmnozvPz6MJUKr+8fr38Xm5ZXXhNQ6fyMxvhvtFPXREmSS6Ws6UL0pI+hNzoM a2pkzOUf4WlmY3t8VheWe6ecTbNsuc2hRr5v9mMV/SHh4CKdPEX4uP8983f6Y29+ GJdIyEYeZ+LDAxv4fnrIoQsRFjka7i0= -----END CERTIFICATE-----Generated at Wed Oct 22 13:02:57 2025 by rpki-client