$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa File: b012200c-09b0-31d7-a7d9-1df154b56fae.roa (raw, json) Hash identifier: tOIip8fiJqOtruEwJhO4rj2wZMLgH0YoteToOmvrz8M= Subject key identifier: 43:08:7C:F5:8B:2C:D7:4A:ED:39:CD:2F:DD:9D:46:A0:74:B3:1A:35 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B987241837A37D6A62E27F080 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 202 IP address blocks: 20.134.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:41:83:7a:37:d6:a6:2e:27:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=8db9f6b0-493b-4bed-9773-14d45a8dd364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:72:25:92:30:91:8c:23:0f:cd:1d:09:72:bc: eb:a8:20:b8:b2:4c:54:63:24:a4:d6:4c:a1:04:a5: 8f:32:3d:89:22:04:da:23:14:3b:35:e7:2d:a8:c4: 79:71:2d:65:42:9c:2d:4a:ac:4d:20:af:c4:00:82: 03:5a:9f:1a:f7:f3:a6:6b:b4:0c:b4:ed:ba:e8:90: 5d:2a:02:08:16:78:1e:dc:44:3c:56:40:1a:ec:12: b4:71:6c:7b:5f:ac:1c:22:0d:30:20:54:63:92:23: dc:e9:14:ac:04:ae:a6:99:64:c1:ff:51:c7:c9:67: a1:79:4a:0a:88:17:ab:58:01:8f:95:17:7e:58:6f: cd:4f:a8:d4:08:06:b8:f5:2d:51:c9:fd:14:3a:05: a8:96:42:f8:98:ab:37:34:48:8f:41:6c:4a:8c:bd: af:82:30:4a:d0:31:35:6c:fe:64:2a:2b:25:eb:65: e0:f7:7f:3d:83:5b:55:28:52:8e:e4:ae:2e:10:08: 17:f0:3a:42:a1:03:3c:ba:50:d5:96:c0:e2:96:e4: 7e:d8:17:f6:d3:f2:60:d2:5f:62:97:75:56:1d:1a: 81:6a:a2:4d:e6:0b:29:e6:09:ac:dc:ca:ea:f2:2e: 8c:22:b3:2d:e1:a5:4b:5f:ba:d1:ea:c8:e6:87:56: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:08:7C:F5:8B:2C:D7:4A:ED:39:CD:2F:DD:9D:46:A0:74:B3:1A:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5a:08:30:c7:64:a5:84:91:44:2b:f5:b3:41:ff:ec:da:38: de:22:34:7b:10:18:b5:0f:15:13:5c:00:f8:38:b4:af:e0:f4: 6a:cb:81:44:1b:7e:9e:d3:e7:2f:d4:1b:da:d6:b4:6b:21:65: 2d:e9:69:c3:44:ac:c8:72:e0:54:1d:7c:d1:bd:f7:4f:8e:94: e0:52:0c:a2:92:17:54:83:5c:6b:85:42:2c:f6:3b:a8:7c:59: a9:f3:33:6e:6b:b8:0c:b9:3e:9d:7c:03:14:19:b6:f3:eb:4c: b2:be:2d:63:25:6a:14:c5:d4:9d:51:84:7a:69:82:94:53:bf: 75:d7:4f:80:36:05:bf:2b:2a:ea:70:f6:f3:18:58:4d:5e:35: 4c:ca:c8:ab:a6:c4:78:ea:ae:0e:be:5c:e1:f4:d8:14:62:2b: 61:73:4d:84:cb:a2:42:37:6e:8a:5b:42:42:a1:ae:fb:d3:48: 68:83:25:65:29:9b:24:a2:9a:24:89:bc:91:40:5a:b5:6c:e0: 36:a4:f2:97:0a:b7:b1:29:e6:fa:85:f0:73:fa:6c:31:82:53: 5f:b0:c8:c4:e3:29:3a:57:0b:3d:ee:95:d7:15:72:29:1e:05: a5:8d:40:76:0d:16:d9:b3:37:47:72:89:ca:49:a0:56:8c:ea: a5:e8:7c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckGDejfWpi4n8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OGRiOWY2YjAtNDkzYi00YmVkLTk3NzMtMTRkNDVhOGRkMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnIlkjCRjCMPzR0JcrzrqCC4skxUYySk1kyh BKWPMj2JIgTaIxQ7NectqMR5cS1lQpwtSqxNIK/EAIIDWp8a9/Oma7QMtO266JBd KgIIFnge3EQ8VkAa7BK0cWx7X6wcIg0wIFRjkiPc6RSsBK6mmWTB/1HHyWeheUoK iBerWAGPlRd+WG/NT6jUCAa49S1Ryf0UOgWolkL4mKs3NEiPQWxKjL2vgjBK0DE1 bP5kKisl62Xg9389g1tVKFKO5K4uEAgX8DpCoQM8ulDVlsDiluR+2Bf20/Jg0l9i l3VWHRqBaqJN5gsp5gms3Mrq8i6MIrMt4aVLX7rR6sjmh1YViwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMIfPWLLNdK7TnNL92dRqB0sxo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjAxMjIwMGMtMDliMC0z MWQ3LWE3ZDktMWRmMTU0YjU2ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFaCDDHZKWEkUQr9bNB/+zaON4iNHsQGLUPFRNcAPg4tK/g9GrLgUQb fp7T5y/UG9rWtGshZS3pacNErMhy4FQdfNG990+OlOBSDKKSF1SDXGuFQiz2O6h8 WanzM25ruAy5Pp18AxQZtvPrTLK+LWMlahTF1J1RhHppgpRTv3XXT4A2Bb8rKupw 9vMYWE1eNUzKyKumxHjqrg6+XOH02BRiK2FzTYTLokI3bopbQkKhrvvTSGiDJWUp mySimiSJvJFAWrVs4Dak8pcKt7Ep5vqF8HP6bDGCU1+wyMTjKTpXCz3uldcVcike BaWNQHYNFtmzN0dyicpJoFaM6qXofEE= -----END CERTIFICATE-----Generated at Wed Oct 22 12:58:45 2025 by rpki-client