$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa File: 74c04573-b423-34d6-a92c-a33a7e85298a.roa (raw, json) Hash identifier: znAuN2yMqlCROizek/9CrdDQxpuAJsmLKwWpS65fGS8= Subject key identifier: E2:7B:85:BA:82:5A:CC:36:F6:2C:18:A1:1D:A1:A1:79:C1:95:C0:2D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B98724260A5E4D237BADE2340 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 203 IP address blocks: 20.139.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:42:60:a5:e4:d2:37:ba:de:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=aed1cf34-219f-418f-9833-92be79e8cae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:96:3f:b0:52:ef:2c:f9:7d:09:af:2a:ce:35: c9:1a:93:1e:05:cd:fb:e6:a6:21:fe:a5:1c:fb:c8: ec:86:ac:bb:72:a2:c4:0d:d4:bd:f9:51:11:9f:1b: 86:6a:5c:fb:9d:92:e9:ff:c5:a9:28:f9:30:9a:1a: 3e:2e:7f:03:50:e4:3f:6e:2d:05:5d:3a:09:e4:1a: 7c:9f:58:18:f9:89:42:74:fe:08:ca:57:5a:53:af: f4:64:0c:ef:22:6f:fb:77:98:20:4d:5c:19:54:2a: ad:db:cf:c2:f2:0c:9b:04:ed:ae:3a:3d:d9:7b:42: 89:e1:fb:e3:45:d6:82:47:2f:19:94:17:66:e7:0b: 71:2a:a5:d7:e2:df:b0:7b:53:31:5a:0c:4b:68:7d: d9:ee:f1:eb:3b:e5:a4:1a:92:30:3e:30:4f:46:50: 17:0e:06:9e:9d:57:a2:0c:16:ed:c6:94:c3:3d:8a: ca:e7:b2:06:18:5b:f8:5e:56:89:a1:19:02:92:ee: 86:ae:56:15:1b:30:52:c5:10:a5:d8:9e:27:c1:0d: cb:a4:56:02:72:41:5a:35:0e:56:db:17:ce:78:87: f5:90:af:f2:41:e3:91:9b:e5:9f:c6:be:ea:16:a5: 25:e5:2a:0e:db:1d:c6:e8:e4:d1:db:cd:29:98:78: 0c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7B:85:BA:82:5A:CC:36:F6:2C:18:A1:1D:A1:A1:79:C1:95:C0:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:6a:c2:65:f1:f3:4b:d9:9b:e4:c4:f4:e7:a5:75:e0:4e:cd: ed:e5:e6:52:ed:de:0e:d2:6e:11:f6:3c:f1:88:01:70:74:23: 10:03:3b:82:86:20:a3:c1:8c:62:02:f7:bb:64:41:11:12:30: e9:e9:61:6e:62:43:fc:41:58:31:c0:1e:8f:f4:74:37:94:2a: d1:91:5d:60:19:20:06:9d:88:83:1e:26:ad:da:f9:c5:b9:f4: aa:61:5c:cf:43:50:ff:93:62:92:33:64:42:4a:9b:70:e2:84: 18:c0:c0:5d:fa:63:e2:1c:2b:9a:00:20:34:71:0a:b9:01:1c: 7d:65:67:22:9f:f0:4f:7b:f6:0d:41:cc:9e:d8:97:dc:e8:3c: fb:4c:73:0a:67:8b:b7:53:80:70:bd:c4:01:19:69:01:96:21: 39:21:5c:26:c4:2a:82:48:71:eb:b1:f4:5b:90:86:e8:7e:05: 67:2c:e1:77:46:7f:3c:cf:99:c8:a0:51:1e:cc:22:44:54:3e: 1a:72:a3:30:32:11:82:d2:6c:c3:07:a7:7a:d8:90:fa:6d:38: db:5c:c7:4c:b7:c7:75:de:45:5b:44:fb:89:de:02:82:52:e2: 92:f8:00:c9:7a:77:f5:65:d4:ed:02:6b:c5:9f:dc:fe:83:86: ac:22:2a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckJgpeTSN7reI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk YWVkMWNmMzQtMjE5Zi00MThmLTk4MzMtOTJiZTc5ZThjYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Y/sFLvLPl9Ca8qzjXJGpMeBc375qYh/qUc +8jshqy7cqLEDdS9+VERnxuGalz7nZLp/8WpKPkwmho+Ln8DUOQ/bi0FXToJ5Bp8 n1gY+YlCdP4IyldaU6/0ZAzvIm/7d5ggTVwZVCqt28/C8gybBO2uOj3Ze0KJ4fvj RdaCRy8ZlBdm5wtxKqXX4t+we1MxWgxLaH3Z7vHrO+WkGpIwPjBPRlAXDgaenVei DBbtxpTDPYrK57IGGFv4XlaJoRkCku6GrlYVGzBSxRCl2J4nwQ3LpFYCckFaNQ5W 2xfOeIf1kK/yQeORm+Wfxr7qFqUl5SoO2x3G6OTR280pmHgMmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJ7hbqCWsw29iwYoR2hoXnBlcAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzRjMDQ1NzMtYjQyMy0z NGQ2LWE5MmMtYTMzYTdlODUyOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxqwmXx80vZm+TE9OeldeBOze3l5lLt3g7SbhH2PPGIAXB0IxADO4KG IKPBjGIC97tkQRESMOnpYW5iQ/xBWDHAHo/0dDeUKtGRXWAZIAadiIMeJq3a+cW5 9KphXM9DUP+TYpIzZEJKm3DihBjAwF36Y+IcK5oAIDRxCrkBHH1lZyKf8E979g1B zJ7Yl9zoPPtMcwpni7dTgHC9xAEZaQGWITkhXCbEKoJIceux9FuQhuh+BWcs4XdG fzzPmcigUR7MIkRUPhpyozAyEYLSbMMHp3rYkPptONtcx0y3x3XeRVtE+4neAoJS 4pL4AMl6d/Vl1O0Ca8Wf3P6DhqwiKoc= -----END CERTIFICATE-----Generated at Wed Oct 22 13:01:47 2025 by rpki-client