$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e1d923da-5465-3854-9de4-5bbaedd91b23.roa File: e1d923da-5465-3854-9de4-5bbaedd91b23.roa (raw, json) Hash identifier: Hxdy9QYw4zz2zbTXwTpjRYJiORUdTzPnF4dszMwjIR8= Subject key identifier: 10:98:B4:FC:68:38:6F:6C:4E:8F:FE:93:A5:C6:53:87:18:2A:3C:5D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B95A79DC3A011F5A2ED697F80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e1d923da-5465-3854-9de4-5bbaedd91b23.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 3360 IP address blocks: 20.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9d:c3:a0:11:f5:a2:ed:69:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9c857fe7-3627-40c6-9250-abff0c0c96b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cb:1f:a7:29:0e:c1:95:da:5a:ec:dc:5f:92: 12:f5:17:77:39:42:d9:85:bd:46:90:61:78:21:2e: 1f:6e:cd:33:2b:2f:e0:bf:19:98:53:a0:77:0d:7a: bb:df:c2:e1:b4:32:85:c0:80:d0:ea:e5:b5:4d:7e: 0b:1a:1a:28:db:36:5c:c2:41:45:11:9b:8b:18:54: 68:e8:15:3a:96:84:fc:c8:bf:f6:1a:ee:17:4a:db: bc:55:97:1a:fc:a8:d9:13:ae:a7:fe:01:93:16:ae: db:16:89:dc:22:38:84:01:66:cc:b2:91:d5:f3:56: e4:61:d2:dd:6a:a8:e4:a3:e0:3d:e3:62:f7:f4:61: 48:6b:8e:ea:cc:fc:17:07:54:7c:1c:b4:88:21:e7: cd:cd:d6:a6:1a:62:52:fe:28:61:f6:67:cf:5b:86: 88:6c:fd:23:77:2a:98:2c:10:1a:2a:b6:35:b1:ca: 99:fa:67:2e:b8:c5:63:bc:0d:5f:70:17:1c:cb:7f: e1:f5:44:66:0c:fc:9a:c8:4d:8d:16:5a:1f:f0:44: 32:a5:87:a0:59:01:76:b8:f6:e3:37:a3:f5:30:49: 99:3a:02:3a:98:b8:2c:64:d3:d2:9f:6d:34:35:84: e5:63:2e:9d:f5:98:fc:0a:61:93:91:7a:ed:57:44: db:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:98:B4:FC:68:38:6F:6C:4E:8F:FE:93:A5:C6:53:87:18:2A:3C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e1d923da-5465-3854-9de4-5bbaedd91b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b0:17:7a:02:ca:2c:16:6f:28:0b:b7:9e:9c:fa:f9:e0:4c: 7e:b1:f3:01:65:db:02:21:32:64:d7:a1:c1:53:ed:0a:77:2a: ab:5a:f0:c2:97:6c:54:26:b7:9d:4d:98:aa:7e:73:6f:c3:49: 2c:39:72:ba:d0:50:0a:15:1f:04:9b:b8:2c:48:4d:5b:82:51: d1:ef:06:87:b1:65:c6:e4:5e:1f:85:4d:43:8d:8e:8a:00:66: f9:09:26:1e:07:b4:4d:24:63:6c:5a:eb:3d:8a:1e:cb:78:16: 0a:a5:28:18:8b:ff:ef:6e:88:e0:32:a9:01:44:93:0a:c0:87: 96:8e:99:e4:1e:e9:db:4b:7f:d3:41:01:8f:ec:71:f3:f1:54: 97:73:a0:33:88:39:3d:b2:ca:d4:fc:18:1e:ee:f1:b9:6f:a4: 13:ff:20:b0:28:1f:9d:fe:1e:9a:b4:4f:64:9c:bf:53:aa:03: 51:8b:12:47:06:bd:cd:da:5b:f5:23:e9:74:b0:23:30:ed:f1: 1f:f0:6e:27:d5:a1:d3:1a:03:35:cc:4c:9e:02:8b:51:c5:68: 47:c4:63:74:ca:c3:e7:c0:e4:83:72:6b:9c:04:02:cd:e2:a1: 70:ff:2d:25:02:75:9b:9f:4d:7f:27:87:fe:8b:b7:93:f0:90: 4e:76:bd:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp53DoBH1ou1pf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OWM4NTdmZTctMzYyNy00MGM2LTkyNTAtYWJmZjBjMGM5NmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ssfpykOwZXaWuzcX5IS9Rd3OULZhb1GkGF4 IS4fbs0zKy/gvxmYU6B3DXq738LhtDKFwIDQ6uW1TX4LGhoo2zZcwkFFEZuLGFRo 6BU6loT8yL/2Gu4XStu8VZca/KjZE66n/gGTFq7bFoncIjiEAWbMspHV81bkYdLd aqjko+A942L39GFIa47qzPwXB1R8HLSIIefNzdamGmJS/ihh9mfPW4aIbP0jdyqY LBAaKrY1scqZ+mcuuMVjvA1fcBccy3/h9URmDPyayE2NFlof8EQypYegWQF2uPbj N6P1MEmZOgI6mLgsZNPSn200NYTlYy6d9Zj8CmGTkXrtV0TbgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCYtPxoOG9sTo/+k6XGU4cYKjxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTFkOTIzZGEtNTQ2NS0z ODU0LTlkZTQtNWJiYWVkZDkxYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+wF3oCyiwWbygLt56c+vngTH6x8wFl2wIhMmTXocFT7Qp3Kqta8MKX bFQmt51NmKp+c2/DSSw5crrQUAoVHwSbuCxITVuCUdHvBoexZcbkXh+FTUONjooA ZvkJJh4HtE0kY2xa6z2KHst4FgqlKBiL/+9uiOAyqQFEkwrAh5aOmeQe6dtLf9NB AY/scfPxVJdzoDOIOT2yytT8GB7u8blvpBP/ILAoH53+Hpq0T2Scv1OqA1GLEkcG vc3aW/Uj6XSwIzDt8R/wbifVodMaAzXMTJ4Ci1HFaEfEY3TKw+fA5INya5wEAs3i oXD/LSUCdZufTX8nh/6Lt5PwkE52vYg= -----END CERTIFICATE-----Generated at Tue Oct 28 17:56:19 2025 by rpki-client