$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6b906617-297c-3da1-996b-f422edaed094.roa File: 6b906617-297c-3da1-996b-f422edaed094.roa (raw, json) Hash identifier: 4jKrELVxz5IpDH41relUuIzNvDQ8b53T1o7hrpIs0FI= Subject key identifier: 0E:5C:B7:27:CF:91:5E:84:EE:F5:07:11:7F:D0:4D:EB:EF:D2:43:3B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B95A79DD60FC88C85042FA800 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6b906617-297c-3da1-996b-f422edaed094.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 202 IP address blocks: 20.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9d:d6:0f:c8:8c:85:04:2f:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2351da88-fd12-45a4-a4c1-a328f03ee2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a1:65:6b:fe:be:a9:5c:d5:b9:fa:08:d7:bc: 32:04:26:a3:8f:78:21:c1:15:a6:09:d4:7e:08:19: 4b:f4:2f:aa:8a:bb:68:b4:0e:fc:b7:1a:31:49:da: 0c:1d:a0:e9:80:06:c3:d7:23:b5:11:44:3b:97:12: c4:84:b5:87:3b:c0:e7:96:c8:79:77:13:fb:71:28: fb:12:aa:71:f6:57:59:de:fb:b7:4f:a8:84:b4:f3: a8:a3:43:d3:5b:6b:04:09:31:8a:2e:36:13:7a:eb: 61:cb:40:aa:dd:63:63:6a:ee:ef:07:7b:94:47:01: 79:d9:0c:77:72:85:5f:f6:5d:28:f1:82:95:ef:a2: 2d:77:41:16:67:00:e3:83:39:1b:78:e3:5c:28:21: 5e:d9:0d:7d:8e:6b:67:cd:0b:d4:5e:04:30:42:69: 19:29:bf:7a:f1:88:6a:22:53:3b:cd:8c:ef:84:5f: 06:54:d1:1b:c1:3c:86:a6:ec:d8:d5:0f:87:15:12: ba:c3:a1:67:33:03:03:79:d5:37:2e:85:89:e0:91: c9:7d:13:49:99:19:c3:92:99:32:1e:c1:db:30:c8: aa:0e:cb:51:f5:e6:28:2f:c4:d4:03:94:6b:ce:0a: 68:02:38:06:a8:04:ec:6e:25:d1:83:e9:70:3a:00: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5C:B7:27:CF:91:5E:84:EE:F5:07:11:7F:D0:4D:EB:EF:D2:43:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6b906617-297c-3da1-996b-f422edaed094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:90:89:cf:32:ce:47:5d:19:24:39:cf:21:81:76:9b:0e:d7: 8d:57:f9:7e:fc:02:ee:23:b4:83:04:b5:9b:f0:d6:43:6e:cf: 1f:a7:36:c5:2f:4e:09:94:26:c7:7d:bc:84:f8:2f:e2:09:c1: a4:95:b8:7f:34:f6:18:d8:98:5b:e1:8c:21:b1:ab:21:6e:76: 6a:9f:47:92:24:50:ac:e4:6b:b4:81:0e:b8:a1:49:fd:e3:1e: a7:f2:fd:c5:ac:af:df:5d:76:d5:ca:64:25:27:94:4b:8d:9c: 41:96:f0:26:3c:d9:66:c9:2e:06:fb:d2:ff:af:44:40:a0:e3: 15:80:af:bd:37:7d:bb:96:9a:72:ea:62:c0:58:34:4e:af:25: 7a:81:4f:27:43:aa:04:76:b7:a2:de:be:da:d8:81:71:02:b7: 05:ac:1e:74:ce:fe:d5:f0:32:19:2f:88:34:fc:5d:cc:85:d7: 69:08:bf:97:eb:e1:21:97:1b:cb:30:be:9a:fc:04:67:60:fa: 59:ea:36:d7:2b:e9:50:0f:c6:46:69:97:19:f4:16:12:bc:a0: 6b:b4:ff:0a:68:2d:a6:59:9c:55:a9:c0:0b:dd:02:5c:77:2a: 1d:00:9f:10:7e:47:c3:51:68:ce:f5:a2:6a:20:0a:92:86:2a: c5:fb:1b:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp53WD8iMhQQvqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjM1MWRhODgtZmQxMi00NWE0LWE0YzEtYTMyOGYwM2VlMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaFla/6+qVzVufoI17wyBCajj3ghwRWmCdR+ CBlL9C+qirtotA78txoxSdoMHaDpgAbD1yO1EUQ7lxLEhLWHO8Dnlsh5dxP7cSj7 Eqpx9ldZ3vu3T6iEtPOoo0PTW2sECTGKLjYTeuthy0Cq3WNjau7vB3uURwF52Qx3 coVf9l0o8YKV76Itd0EWZwDjgzkbeONcKCFe2Q19jmtnzQvUXgQwQmkZKb968Yhq IlM7zYzvhF8GVNEbwTyGpuzY1Q+HFRK6w6FnMwMDedU3LoWJ4JHJfRNJmRnDkpky HsHbMMiqDstR9eYoL8TUA5RrzgpoAjgGqATsbiXRg+lwOgCf3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5ctyfPkV6E7vUHEX/QTevv0kM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNmI5MDY2MTctMjk3Yy0z ZGExLTk5NmItZjQyMmVkYWVkMDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOQic8yzkddGSQ5zyGBdpsO141X+X78Au4jtIMEtZvw1kNuzx+nNsUv TgmUJsd9vIT4L+IJwaSVuH809hjYmFvhjCGxqyFudmqfR5IkUKzka7SBDrihSf3j Hqfy/cWsr99ddtXKZCUnlEuNnEGW8CY82WbJLgb70v+vRECg4xWAr703fbuWmnLq YsBYNE6vJXqBTydDqgR2t6LevtrYgXECtwWsHnTO/tXwMhkviDT8XcyF12kIv5fr 4SGXG8swvpr8BGdg+lnqNtcr6VAPxkZplxn0FhK8oGu0/wpoLaZZnFWpwAvdAlx3 Kh0AnxB+R8NRaM71omogCpKGKsX7G+I= -----END CERTIFICATE-----Generated at Wed Oct 22 13:04:29 2025 by rpki-client