$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa File: 9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa (raw, json) Hash identifier: 6wHxTgT451K09FEeKk5DoLSrdkJpMa7oaN4tv6/OlB0= Subject key identifier: 7C:13:F2:88:2A:BD:AC:F8:13:AD:DB:C6:F0:7C:57:E0:D9:F7:60:C8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B987240BE21D31273583D3840 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 203 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:40:be:21:d3:12:73:58:3d:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=a2998cd6-24f3-48d8-b8db-97f23d93f055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:00:36:8d:43:67:28:d2:80:03:30:60:5c: 41:d1:c8:51:0a:15:c8:6b:25:0d:b6:00:f3:24:a7: dd:85:f6:84:0d:df:17:d2:5c:a2:54:8a:4c:64:1f: fa:5a:f7:7f:4c:cb:a5:2d:9c:e0:12:33:1b:c7:d1: 4b:24:fb:45:c4:c8:dc:47:89:49:31:03:08:81:28: 71:45:df:fe:52:86:cd:0e:26:fc:1a:ae:7b:c3:1f: 4c:b6:46:ae:5a:c4:5d:d3:ce:fd:d4:b5:de:2c:63: 58:1c:04:5d:73:36:0c:a3:e6:27:a5:b4:18:ec:78: 8a:ea:00:6b:f0:c5:81:26:05:07:c2:28:28:58:19: bb:25:fe:ae:1f:cd:cd:6e:c4:b2:6e:c8:05:7a:ce: e4:77:b0:6f:a8:01:1b:32:c2:93:4c:04:fe:8d:4f: 07:f3:38:35:1b:bd:d5:0f:b0:c2:b5:1f:52:f2:1c: 77:cd:dc:86:4d:c7:f5:6c:0c:cb:83:d2:22:4a:bf: 22:4b:4f:17:f5:c8:44:bd:da:4d:98:3c:6e:11:f8: e8:41:ba:4a:c2:50:06:bc:12:50:ba:7f:ab:41:78: e3:ba:85:76:3a:ce:32:14:0e:9b:b0:0c:5d:b1:67: 75:e5:8a:05:ff:a4:6e:cd:43:d0:9b:43:6f:6b:f5: 93:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:13:F2:88:2A:BD:AC:F8:13:AD:DB:C6:F0:7C:57:E0:D9:F7:60:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:48:70:28:fd:5c:25:1d:b8:3a:8d:67:85:c3:51:40:27:97: e8:74:38:df:a2:bd:bc:7a:43:35:c9:80:4d:88:8f:07:90:f9: 78:99:38:7c:0a:36:95:aa:9c:7a:5f:8e:b6:68:6c:78:08:db: f5:d2:94:45:6c:52:a7:82:21:4b:a4:0a:21:82:f6:29:a0:b3: 88:35:4a:3c:b3:9a:92:fb:b2:c6:35:54:21:a6:92:e9:65:c2: f3:82:96:d2:c5:5e:0e:d1:9f:a1:8c:5a:19:e0:2d:85:f2:76: 20:2e:1c:37:6c:0a:89:d7:a3:3c:a8:81:9c:5a:55:42:21:17: 90:70:ba:a7:19:6b:e6:df:e3:71:89:ac:f5:ae:c3:e1:41:0d: 71:64:b4:b4:d1:1c:ff:d2:4b:5e:e2:90:a0:d4:64:d7:b8:6d: 16:16:0e:eb:1a:9e:3c:c9:40:df:45:5a:1d:a5:c4:8d:07:3b: f7:b7:1b:b8:68:6a:fc:e0:cd:d8:d2:f1:56:01:71:fa:64:66: b2:36:0a:22:75:c6:9a:8a:16:d3:85:de:d3:a0:b5:cd:39:57: 49:00:5d:7b:dc:8d:a3:d4:03:0f:7c:a9:43:bb:1b:4d:44:8f: bf:86:ed:bf:18:3b:b1:7b:ee:aa:77:98:d1:b7:f9:d4:74:e1: 60:a9:1a:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckC+IdMSc1g9OEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk YTI5OThjZDYtMjRmMy00OGQ4LWI4ZGItOTdmMjNkOTNmMDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQUANo1DZyjSgAMwYFxB0chRChXIayUNtgDz JKfdhfaEDd8X0lyiVIpMZB/6Wvd/TMulLZzgEjMbx9FLJPtFxMjcR4lJMQMIgShx Rd/+UobNDib8Gq57wx9MtkauWsRd08791LXeLGNYHARdczYMo+YnpbQY7HiK6gBr 8MWBJgUHwigoWBm7Jf6uH83NbsSybsgFes7kd7BvqAEbMsKTTAT+jU8H8zg1G73V D7DCtR9S8hx3zdyGTcf1bAzLg9IiSr8iS08X9chEvdpNmDxuEfjoQbpKwlAGvBJQ un+rQXjjuoV2Os4yFA6bsAxdsWd15YoF/6RuzUPQm0Nva/WT9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwT8ogqvaz4E63bxvB8V+DZ92DIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWRkMGVkZDktNjIzNS0z ZDIzLWI3YTMtNmY5NzA4ZGY2NWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBIcCj9XCUduDqNZ4XDUUAnl+h0ON+ivbx6QzXJgE2IjweQ+XiZOHwK NpWqnHpfjrZobHgI2/XSlEVsUqeCIUukCiGC9imgs4g1SjyzmpL7ssY1VCGmkull wvOCltLFXg7Rn6GMWhngLYXydiAuHDdsConXozyogZxaVUIhF5BwuqcZa+bf43GJ rPWuw+FBDXFktLTRHP/SS17ikKDUZNe4bRYWDusanjzJQN9FWh2lxI0HO/e3G7ho avzgzdjS8VYBcfpkZrI2CiJ1xpqKFtOF3tOgtc05V0kAXXvcjaPUAw98qUO7G01E j7+G7b8YO7F77qp3mNG3+dR04WCpGvQ= -----END CERTIFICATE-----Generated at Wed Oct 22 13:06:23 2025 by rpki-client