$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa File: b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa (raw, json) Hash identifier: Rkk8bDrM31N4B/ObfyDBeVdSqCvtYKq6N0CdTl6kcCg= Subject key identifier: 2E:3F:48:0E:B8:25:D3:72:F2:0D:36:BC:7E:46:31:9F:2E:A7:CF:B1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCB1014591C7A0137257A6 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3360 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b1:01:45:91:c7:a0:13:72:57:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=f592a90a-9562-408b-8e93-d203ef45a467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:97:dd:aa:87:5c:ba:e1:25:1f:6e:9e:35:d8: 9c:fb:a4:2e:8d:27:d9:7e:c9:a6:45:0b:6f:61:9b: ae:99:06:6f:a3:5e:6d:6e:ef:3f:dc:f7:1f:51:39: d3:9b:57:73:f5:51:66:0d:fa:0c:75:8a:56:20:07: 94:58:b3:ea:55:0a:73:a9:3b:c8:95:b4:6d:f1:05: 48:4e:c2:b3:20:af:cc:a6:0a:63:5c:f5:0c:be:3f: 70:f0:4b:52:a5:52:26:4e:82:76:74:13:57:08:0c: fb:a6:e4:52:f1:c5:e4:f1:e4:2f:2e:c7:e1:62:6f: 7c:cc:91:63:51:67:5b:69:29:73:62:9e:15:5a:2c: 98:4a:d1:db:37:aa:7f:96:6a:42:bd:48:a9:58:e6: 0f:09:1b:ac:0a:76:42:aa:81:34:0e:8c:03:1c:2b: eb:8d:90:90:4b:3e:54:02:8e:17:5e:b4:16:55:66: cd:e9:ca:36:97:f5:4c:4c:58:47:ea:54:1c:b9:67: 6c:d4:9d:e4:b0:6c:a7:22:12:21:b6:f8:32:30:5f: da:3b:83:9e:4f:d3:74:4c:6e:ab:be:86:3a:3c:84: 4b:17:c2:a3:ed:e3:a7:c9:c9:fd:cc:69:4a:5d:31: b1:da:fa:7f:19:89:bc:ef:9b:11:9a:d1:49:27:7a: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3F:48:0E:B8:25:D3:72:F2:0D:36:BC:7E:46:31:9F:2E:A7:CF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c0:50:c3:06:9e:4c:32:dc:37:d7:9b:40:bf:f6:4e:c2:ea: 57:a7:ce:d4:f5:5d:21:7e:1a:c8:9d:9f:bb:da:a7:37:1f:78: e2:a8:7c:15:71:cd:29:0d:64:0b:b0:10:f4:80:02:7c:2a:6b: 62:05:84:26:2b:25:ee:f0:41:8f:d2:31:83:1c:1f:79:50:1d: 13:40:5f:5f:2b:31:65:fb:64:fc:60:e3:09:22:be:0b:4a:c2: bb:6e:4c:b4:b6:7c:fe:58:67:52:06:40:80:bd:30:39:c9:1d: 7e:58:75:79:ba:9a:1d:3f:61:19:d5:92:02:2b:6b:75:79:a4: d1:66:61:54:b3:b9:e6:9d:f9:d8:08:1d:55:82:71:00:88:e2: b6:02:e7:6b:cf:9c:04:93:a3:d5:bc:50:08:f2:57:c7:40:33: 04:61:4e:9c:13:3f:e1:eb:c2:23:43:73:ed:a5:61:58:96:e0: 16:38:2c:a5:b0:63:9a:21:8c:fe:75:c2:48:6a:0a:e2:3b:6a: ff:8d:53:5f:d1:75:1e:2e:cb:1d:4b:d2:25:30:96:ad:00:f2: 58:5d:d7:63:7e:f7:ed:dc:0d:58:d6:88:ed:a2:6f:05:a4:d6: 9f:52:46:8b:58:f0:9f:fe:70:f9:b6:03:97:06:f2:9e:ff:09: 1a:ac:e5:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLEBRZHHoBNyV6YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZjU5MmE5MGEtOTU2Mi00MDhiLThlOTMtZDIwM2VmNDVhNDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpfdqodcuuElH26eNdic+6QujSfZfsmmRQtv YZuumQZvo15tbu8/3PcfUTnTm1dz9VFmDfoMdYpWIAeUWLPqVQpzqTvIlbRt8QVI TsKzIK/MpgpjXPUMvj9w8EtSpVImToJ2dBNXCAz7puRS8cXk8eQvLsfhYm98zJFj UWdbaSlzYp4VWiyYStHbN6p/lmpCvUipWOYPCRusCnZCqoE0DowDHCvrjZCQSz5U Ao4XXrQWVWbN6co2l/VMTFhH6lQcuWds1J3ksGynIhIhtvgyMF/aO4OeT9N0TG6r voY6PIRLF8Kj7eOnycn9zGlKXTGx2vp/GYm875sRmtFJJ3rfkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4/SA64JdNy8g02vH5GMZ8up8+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjVlZGNlZTAtMjZmZC0z NGIzLTg2NmQtZGY0YjJkMmQyYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILAUMMGnkwy3DfXm0C/9k7C6lenztT1XSF+Gsidn7vapzcfeOKofBVx zSkNZAuwEPSAAnwqa2IFhCYrJe7wQY/SMYMcH3lQHRNAX18rMWX7ZPxg4wkivgtK wrtuTLS2fP5YZ1IGQIC9MDnJHX5YdXm6mh0/YRnVkgIra3V5pNFmYVSzuead+dgI HVWCcQCI4rYC52vPnASTo9W8UAjyV8dAMwRhTpwTP+HrwiNDc+2lYViW4BY4LKWw Y5ohjP51wkhqCuI7av+NU1/RdR4uyx1L0iUwlq0A8lhd12N+9+3cDVjWiO2ibwWk 1p9SRotY8J/+cPm2A5cG8p7/CRqs5eM= -----END CERTIFICATE-----Generated at Tue Oct 28 17:48:23 2025 by rpki-client