$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa File: b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa (raw, json) Hash identifier: NFqMIqlEk/kyQkzZDWLPLyGz/z10j2MC4rFco+xoO+Y= Subject key identifier: 31:B3:BC:DD:F8:DA:1D:63:3F:77:95:BE:EC:E3:7E:7A:69:C8:0C:43 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B95A79E95F5075A2155C6E600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 3360 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9e:95:f5:07:5a:21:55:c6:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4a6c257d-8733-4d59-84ef-08f5240bb991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:35:ea:86:02:87:fb:85:79:94:2f:55:34:e7: 15:8f:08:59:6e:f5:c7:db:d2:02:5c:ca:7b:c7:7f: b2:f0:35:dd:ae:db:08:79:bd:95:df:12:fc:1f:80: eb:b9:15:9f:b9:25:8f:35:9e:6c:b0:1f:5f:b9:8e: 63:03:c5:45:22:bd:db:30:1c:b8:f2:3f:59:66:38: 5b:b0:dc:93:18:9e:08:03:39:60:a3:88:7e:a5:c0: 05:7b:1e:23:8c:a4:be:47:5f:ec:56:66:80:b8:53: 56:49:56:ff:e5:e1:29:3b:71:3b:50:ae:2b:fc:9b: de:b9:a6:d9:f3:4c:57:a7:60:d0:58:75:10:db:89: ee:c7:93:54:92:74:31:09:be:64:ea:47:48:b6:bd: c2:06:ad:e5:83:77:03:29:d9:a2:0a:bb:57:0d:77: 2d:6c:ba:54:9d:b4:c8:3c:30:fe:ef:04:13:2c:bf: 37:00:61:79:11:ba:10:a1:18:b2:98:74:2e:e7:a1: 84:c6:83:05:40:7d:b4:bb:10:43:01:92:fe:3a:0c: cd:55:8b:97:ac:5c:02:0a:85:37:d2:30:2f:7d:76: ad:7b:a7:b2:af:64:72:07:a0:fd:64:55:1c:55:5d: b4:f0:76:ba:3f:59:47:df:c3:b3:d5:e2:c0:f4:bf: 0c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B3:BC:DD:F8:DA:1D:63:3F:77:95:BE:EC:E3:7E:7A:69:C8:0C:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:57:8c:d9:f1:a3:4e:f0:52:82:df:14:dd:fa:56:83:91:e1: 0f:7d:44:14:03:4b:31:e6:3f:7d:bd:d2:ec:23:9d:39:dc:a9: 2d:53:dd:78:69:c5:46:97:57:ea:03:c2:f3:8d:67:36:06:ed: 21:56:b0:84:51:0d:7b:f9:af:71:a3:01:6c:52:9a:88:a9:9c: b1:25:d2:24:22:bc:8d:a7:28:e2:59:5a:81:31:52:39:fb:cc: a3:3b:a9:70:c3:c2:63:13:92:ff:e4:af:10:8d:ad:1e:e1:d0: 03:ed:16:e3:68:38:5f:02:de:75:bb:31:93:d4:de:ff:0b:40: 28:85:94:1c:fb:88:1d:ed:3d:67:3b:68:bb:e3:37:6e:35:cf: 73:ec:2a:19:65:05:de:2a:b1:0c:df:7c:af:9b:2e:eb:5e:45: bb:6b:48:70:0c:08:1c:82:b5:0b:60:c0:b8:7b:1d:2a:42:79: 2f:b4:48:ca:b2:6b:81:fb:ad:57:5d:f8:79:d2:8a:6f:5a:77: 02:64:7c:9a:1f:e2:7e:68:fc:26:be:e1:7f:6c:86:f5:eb:2b: 09:93:4e:cf:84:21:cc:21:a5:4b:e9:7d:2c:f1:33:3e:9f:3a: e6:b6:67:9a:78:7b:15:86:aa:68:6d:cb:ce:d2:d8:22:ce:73: 3d:7b:bc:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp56V9QdaIVXG5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGE2YzI1N2QtODczMy00ZDU5LTg0ZWYtMDhmNTI0MGJiOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DXqhgKH+4V5lC9VNOcVjwhZbvXH29ICXMp7 x3+y8DXdrtsIeb2V3xL8H4DruRWfuSWPNZ5ssB9fuY5jA8VFIr3bMBy48j9ZZjhb sNyTGJ4IAzlgo4h+pcAFex4jjKS+R1/sVmaAuFNWSVb/5eEpO3E7UK4r/JveuabZ 80xXp2DQWHUQ24nux5NUknQxCb5k6kdItr3CBq3lg3cDKdmiCrtXDXctbLpUnbTI PDD+7wQTLL83AGF5EboQoRiymHQu56GExoMFQH20uxBDAZL+OgzNVYuXrFwCCoU3 0jAvfXate6eyr2RyB6D9ZFUcVV208Ha6P1lH38Oz1eLA9L8MXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGzvN342h1jP3eVvuzjfnppyAxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjlmMjAyNGMtZGE1Yy0z ZTVlLWIyMTUtYTVhZWZiZTJmMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFXjNnxo07wUoLfFN36VoOR4Q99RBQDSzHmP3290uwjnTncqS1T3Xhp xUaXV+oDwvONZzYG7SFWsIRRDXv5r3GjAWxSmoipnLEl0iQivI2nKOJZWoExUjn7 zKM7qXDDwmMTkv/krxCNrR7h0APtFuNoOF8C3nW7MZPU3v8LQCiFlBz7iB3tPWc7 aLvjN241z3PsKhllBd4qsQzffK+bLuteRbtrSHAMCByCtQtgwLh7HSpCeS+0SMqy a4H7rVdd+HnSim9adwJkfJof4n5o/Ca+4X9shvXrKwmTTs+EIcwhpUvpfSzxMz6f Oua2Z5p4exWGqmhty87S2CLOcz17vPI= -----END CERTIFICATE-----Generated at Tue Oct 28 17:55:49 2025 by rpki-client