$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa File: 0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa (raw, json) Hash identifier: SC0OjmAxvkEjUXoA87nI57Hvy5Uiy0n8HRV8l7CYmNw= Subject key identifier: AC:31:AF:DF:70:BB:22:BF:B4:98:F8:43:CA:A2:A9:DF:FF:0E:15:35 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B9872420F512C3BDA53A68980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 3356 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:42:0f:51:2c:3b:da:53:a6:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=7d38c639-481b-420e-b38c-e85c095f70a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:66:f9:83:e4:c4:89:74:6e:7e:c3:9d:ec:39: b0:3c:00:8d:f2:88:7b:2d:ad:06:9b:c7:ca:3b:1c: 86:bd:3e:f7:93:f7:db:7a:14:9c:dd:5c:f5:47:2e: 5c:05:56:96:83:73:8e:be:f8:6d:71:40:b2:e0:24: 55:43:13:c7:b7:40:54:44:3e:93:9b:b4:61:33:27: e9:eb:c1:15:05:47:06:5b:aa:ef:bd:2a:b8:70:0b: 42:59:5e:ee:9e:1d:da:f4:ba:24:e7:b7:6c:9c:23: b0:73:b3:40:56:fa:ce:35:3d:88:d0:08:41:2d:a5: b4:ce:49:7f:04:84:dc:44:9e:d1:f6:63:7c:e2:c3: 21:a3:31:b6:64:2f:f4:0f:0e:8f:b0:51:7a:c7:a9: 00:3f:06:01:da:f9:80:70:e0:fc:39:d9:f0:b5:a8: 27:14:67:ef:2c:17:cf:5f:83:9f:7d:da:42:5d:e4: 78:1c:7a:e6:c8:4d:d0:28:ed:35:07:40:50:6f:5e: c9:3e:77:45:25:f5:c6:78:ca:8e:b9:e7:5b:b8:c7: 5e:d7:59:03:01:66:cd:ea:e2:32:22:dd:9a:47:16: 2e:75:c5:83:d1:0e:42:b5:51:c3:1b:75:d7:ea:b6: a0:fe:ac:ac:f5:54:20:41:c7:05:f5:65:97:c3:a7: e0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:31:AF:DF:70:BB:22:BF:B4:98:F8:43:CA:A2:A9:DF:FF:0E:15:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c2:3f:59:0c:40:66:02:6f:5f:65:4e:64:4e:59:d0:04:18: 4c:fb:35:d8:31:17:a2:69:ce:48:fe:28:39:9f:6e:73:2a:9c: 7b:da:bc:60:a2:57:ee:b1:86:7e:bd:38:84:df:1a:1e:c0:3d: d4:d8:e1:f2:3b:1f:62:5b:bc:f8:e8:53:dc:f2:65:c0:9d:f8: df:11:b7:06:f1:55:6e:e9:51:e7:3a:12:ca:cd:db:7d:e0:0f: 76:0b:d6:14:9d:46:72:05:87:6b:ce:78:a6:56:0e:46:03:7e: 62:2b:7b:fb:07:b7:90:ef:7f:77:20:79:0e:7c:2d:a4:88:97: 33:0b:3a:2e:9d:98:bc:69:89:c8:25:55:f1:17:8a:f2:a4:79: 57:bd:a4:e7:78:8b:ff:27:46:95:e6:8f:d0:8c:54:55:ff:d9: a7:e7:e6:09:bc:41:77:b0:37:72:54:cb:b5:ed:af:03:b8:79: 2d:0e:a3:88:42:88:e4:8f:a4:27:7a:60:ff:ad:e8:d0:f5:6c: a3:f2:6f:7c:ff:e8:f2:0b:1d:d2:62:0e:a2:e2:55:94:21:2f: d6:ad:4f:c5:c6:eb:7f:f8:6c:49:4b:7b:4a:f3:7c:c4:4f:37: a9:ce:dd:56:8c:71:39:ee:eb:9c:9a:51:5f:74:b2:72:43:b2: 2a:ab:5e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckIPUSw72lOmiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk N2QzOGM2MzktNDgxYi00MjBlLWIzOGMtZTg1YzA5NWY3MGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWb5g+TEiXRufsOd7DmwPACN8oh7La0Gm8fK OxyGvT73k/fbehSc3Vz1Ry5cBVaWg3OOvvhtcUCy4CRVQxPHt0BURD6Tm7RhMyfp 68EVBUcGW6rvvSq4cAtCWV7unh3a9Lok57dsnCOwc7NAVvrONT2I0AhBLaW0zkl/ BITcRJ7R9mN84sMhozG2ZC/0Dw6PsFF6x6kAPwYB2vmAcOD8OdnwtagnFGfvLBfP X4OffdpCXeR4HHrmyE3QKO01B0BQb17JPndFJfXGeMqOuedbuMde11kDAWbN6uIy It2aRxYudcWD0Q5CtVHDG3XX6rag/qys9VQgQccF9WWXw6fg5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwxr99wuyK/tJj4Q8qiqd//DhU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGFjMGE5ZWYtNjY1ZS0z MjRjLWI3MGQtZTU2ZjViZDNhOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3CP1kMQGYCb19lTmROWdAEGEz7NdgxF6Jpzkj+KDmfbnMqnHvavGCi V+6xhn69OITfGh7APdTY4fI7H2JbvPjoU9zyZcCd+N8RtwbxVW7pUec6EsrN233g D3YL1hSdRnIFh2vOeKZWDkYDfmIre/sHt5Dvf3cgeQ58LaSIlzMLOi6dmLxpicgl VfEXivKkeVe9pOd4i/8nRpXmj9CMVFX/2afn5gm8QXewN3JUy7XtrwO4eS0Oo4hC iOSPpCd6YP+t6ND1bKPyb3z/6PILHdJiDqLiVZQhL9atT8XG63/4bElLe0rzfMRP N6nO3VaMcTnu65yaUV90snJDsiqrXl8= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:29 2025 by rpki-client