$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7a103545-6613-3147-9308-1839fdacc155.roa File: 7a103545-6613-3147-9308-1839fdacc155.roa (raw, json) Hash identifier: okKUrflzJgKG/QxZ3AjKYnOMEUFmX0N3QTka5VFBr7s= Subject key identifier: 28:C2:4F:41:65:CE:2C:B2:5C:9F:A6:46:36:5F:00:C5:8B:53:8D:2D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCB187309DEEE5355EA6C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7a103545-6613-3147-9308-1839fdacc155.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3360 IP address blocks: 20.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b1:87:30:9d:ee:e5:35:5e:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=930c9d0b-bc19-43b0-9c93-816b0cacacaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:93:81:88:36:36:9f:b6:10:c3:c6:aa:3d:95: d5:ad:14:c2:f2:e4:07:b2:21:92:7f:be:54:c4:14: 4f:05:2d:77:39:1f:b2:bd:e0:f6:99:29:c3:ee:fb: 10:c1:f8:2a:6d:8f:62:3b:fd:60:6f:0e:7c:6d:48: c5:b1:f5:f6:f9:a8:c0:f4:e7:d2:5d:a5:c6:75:e1: b1:0b:d6:ed:25:44:25:54:73:eb:f6:1e:cd:46:b6: 8c:9f:41:0c:5c:53:72:ab:b2:d9:30:1a:08:06:bf: 73:33:a7:07:4c:0c:4f:99:86:1c:6f:4b:83:1f:1e: 11:d2:a6:ef:be:23:7d:15:e3:9d:a2:d9:f6:e2:4c: 99:dc:04:69:63:de:a4:58:96:39:39:d1:f6:23:20: 44:07:8e:f6:1f:2c:17:1b:14:7f:46:ab:a8:e9:16: 6e:e6:24:c5:82:55:ae:62:73:a0:11:f2:74:23:6d: 04:1e:c3:02:7e:80:69:39:a1:62:9d:9b:02:1d:fa: f6:01:e5:43:4d:8e:0d:b5:3c:3d:6f:3d:04:51:28: ab:de:b7:33:c3:36:b9:16:7c:e2:15:40:ed:79:c4: de:a0:b7:0a:c4:a6:ab:36:a2:87:42:1e:6e:58:1b: 41:e6:87:d4:47:e4:ae:dd:1d:c6:d9:78:6b:12:5a: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C2:4F:41:65:CE:2C:B2:5C:9F:A6:46:36:5F:00:C5:8B:53:8D:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7a103545-6613-3147-9308-1839fdacc155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0a:be:c3:13:aa:37:d9:95:11:78:49:73:3d:58:12:29:ab: 0d:6e:a3:0d:fa:26:68:65:9a:69:d7:35:b9:c0:15:21:b0:38: 7d:6c:04:56:ec:af:53:fe:87:6a:4f:4c:0c:7b:e7:cd:4c:53: 10:2b:34:7f:15:9c:67:70:b7:aa:57:47:1c:9a:f5:f7:e8:1e: d0:24:a3:76:db:05:68:db:b2:b3:d6:04:db:e6:08:06:7f:e9: fb:0f:f8:50:bb:d8:a0:16:fd:c1:f9:b9:8a:c0:e9:7d:cf:8b: c6:d7:0f:8b:25:20:49:24:6a:9f:9c:78:cc:e2:ac:3a:ef:ad: 55:3e:f0:4b:d8:ac:5a:e8:9a:50:c8:3c:42:6c:3e:7e:18:2b: f9:b1:85:9f:7a:0d:ff:f2:e6:e7:46:8e:d7:53:2d:02:5f:f2: a8:0f:eb:d9:5f:e9:b9:19:af:bd:62:f4:59:cc:a1:09:92:24: 92:32:e5:ea:60:05:7e:c5:7f:b5:75:a7:2e:72:98:0c:02:88: 63:5e:55:3d:40:62:fc:f1:d6:e8:64:f8:9e:d8:3d:40:f4:bd: cc:3b:74:a6:13:33:12:26:cb:b7:09:4d:08:4d:96:f6:2a:e5: 42:2f:43:f3:77:c1:9f:19:b4:9c:46:1d:e5:0c:bc:1a:3a:f4: 8a:f1:5c:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLGHMJ3u5TVepsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OTMwYzlkMGItYmMxOS00M2IwLTljOTMtODE2YjBjYWNhY2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJOBiDY2n7YQw8aqPZXVrRTC8uQHsiGSf75U xBRPBS13OR+yveD2mSnD7vsQwfgqbY9iO/1gbw58bUjFsfX2+ajA9OfSXaXGdeGx C9btJUQlVHPr9h7NRraMn0EMXFNyq7LZMBoIBr9zM6cHTAxPmYYcb0uDHx4R0qbv viN9FeOdotn24kyZ3ARpY96kWJY5OdH2IyBEB472HywXGxR/Rquo6RZu5iTFglWu YnOgEfJ0I20EHsMCfoBpOaFinZsCHfr2AeVDTY4NtTw9bz0EUSir3rczwza5Fnzi FUDtecTeoLcKxKarNqKHQh5uWBtB5ofUR+Su3R3G2XhrElrI4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjCT0FlziyyXJ+mRjZfAMWLU40tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2ExMDM1NDUtNjYxMy0z MTQ3LTkzMDgtMTgzOWZkYWNjMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEKvsMTqjfZlRF4SXM9WBIpqw1uow36JmhlmmnXNbnAFSGwOH1sBFbs r1P+h2pPTAx7581MUxArNH8VnGdwt6pXRxya9ffoHtAko3bbBWjbsrPWBNvmCAZ/ 6fsP+FC72KAW/cH5uYrA6X3Pi8bXD4slIEkkap+ceMzirDrvrVU+8EvYrFromlDI PEJsPn4YK/mxhZ96Df/y5udGjtdTLQJf8qgP69lf6bkZr71i9FnMoQmSJJIy5epg BX7Ff7V1py5ymAwCiGNeVT1AYvzx1uhk+J7YPUD0vcw7dKYTMxImy7cJTQhNlvYq 5UIvQ/N3wZ8ZtJxGHeUMvBo69IrxXJI= -----END CERTIFICATE-----Generated at Tue Oct 28 17:56:18 2025 by rpki-client