$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa File: 0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa (raw, json) Hash identifier: ugWKvuK+nbAREa7XYGEhwfHdTGKelzUIM73wxq/L3U8= Subject key identifier: EC:70:8E:E9:70:6A:3C:93:25:1A:63:CC:13:33:15:F1:DE:16:4C:F3 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B95A79DFD99F6A077EB349840 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 3356 IP address blocks: 20.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9d:fd:99:f6:a0:77:eb:34:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9eacf1d9-40ca-4a4c-baa7-13fe78ef83c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:48:0e:85:15:58:93:3c:97:3f:97:25:cd:68: b3:be:cd:c0:cf:c0:30:c0:e3:bc:72:68:72:7a:6a: ad:ba:a2:cb:25:87:a0:37:8d:95:8c:19:64:3f:52: ea:95:f9:9c:b7:a5:93:b1:8f:06:02:03:23:86:2d: 13:f9:08:ed:12:63:8d:56:00:79:be:c1:0d:fa:7e: 86:a0:c0:b9:fa:9b:89:4a:20:e2:0d:da:ab:00:df: 56:1d:78:48:46:dd:ea:9b:c9:5b:76:27:09:0c:e5: b7:11:7b:38:50:ba:eb:06:aa:e1:c2:cb:01:db:09: 00:cb:2a:c3:8f:a2:6c:2c:7b:48:7e:1c:6f:07:65: 7a:c5:20:ca:8f:07:e6:bd:bc:3c:d9:14:5e:1d:ba: 40:06:9f:87:d4:83:55:36:84:07:ad:4f:76:3b:c6: 51:ae:37:f2:15:13:5a:5d:93:5d:49:77:37:5a:8b: 34:7e:76:fa:aa:80:6b:cd:cf:f1:49:73:35:5b:09: 21:0b:00:2b:03:d7:6c:4d:47:ba:78:61:81:de:8d: cf:2e:9f:29:db:47:fa:5d:5a:2e:99:a5:db:27:f3: 1d:a2:47:c9:4b:bf:c2:98:bf:ec:59:d7:0d:78:89: 66:8f:8d:af:2f:38:9e:9f:95:9d:63:1a:1e:07:1e: 8d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:70:8E:E9:70:6A:3C:93:25:1A:63:CC:13:33:15:F1:DE:16:4C:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e7:d6:37:53:41:a9:af:ba:96:43:f8:48:c1:1e:a2:d1:86: ff:2e:9a:21:c4:f2:2c:da:68:7a:8d:bb:d2:93:3c:dd:62:4d: 91:98:df:ac:9b:10:9a:d7:f5:25:17:12:f6:69:da:e6:2d:fe: c3:8b:b5:30:be:22:dc:ea:56:6f:78:c3:b9:8a:9b:6f:d1:f5: 85:12:e9:e0:7d:cd:5f:66:86:1e:a6:c7:13:d6:e6:13:0d:82: 9e:18:ae:e7:bf:52:ae:73:a1:92:d6:8e:03:20:2e:69:1c:75: f7:ec:46:af:e3:d9:9b:42:de:5c:72:73:ac:c1:c6:c9:6c:5e: f1:7c:ad:c3:ae:a8:91:64:8e:43:9a:97:ba:53:8d:ed:ef:34: 55:94:8e:7a:21:7a:d0:71:93:92:1b:05:5e:cb:4a:35:8d:48: f4:3e:ac:7f:2c:42:24:6b:69:c8:43:fd:ff:2c:91:9b:5b:29: c6:47:87:c4:6d:f4:09:55:eb:e0:93:60:0b:13:89:c0:86:e2: cc:6f:0c:85:20:0c:2b:8f:cc:98:12:ab:80:bf:f8:dc:fa:c6: 36:c5:e0:c3:ae:a4:f8:4c:4d:55:5a:94:72:53:5d:d1:52:03: be:ca:91:19:2f:09:7b:90:c5:2a:92:67:b9:67:d7:f0:fd:d5: 3b:c6:c0:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp539mfagd+s0mEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OWVhY2YxZDktNDBjYS00YTRjLWJhYTctMTNmZTc4ZWY4M2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUgOhRVYkzyXP5clzWizvs3Az8AwwOO8cmhy emqtuqLLJYegN42VjBlkP1Lqlfmct6WTsY8GAgMjhi0T+QjtEmONVgB5vsEN+n6G oMC5+puJSiDiDdqrAN9WHXhIRt3qm8lbdicJDOW3EXs4ULrrBqrhwssB2wkAyyrD j6JsLHtIfhxvB2V6xSDKjwfmvbw82RReHbpABp+H1INVNoQHrU92O8ZRrjfyFRNa XZNdSXc3Wos0fnb6qoBrzc/xSXM1WwkhCwArA9dsTUe6eGGB3o3PLp8p20f6XVou maXbJ/MdokfJS7/CmL/sWdcNeIlmj42vLzien5WdYxoeBx6NgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxwjulwajyTJRpjzBMzFfHeFkzzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGVjZTQxODEtZWExMi0z OWM0LThiNDctNTNkMmY0ZjI4MDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTn1jdTQamvupZD+EjBHqLRhv8umiHE8izaaHqNu9KTPN1iTZGY36yb EJrX9SUXEvZp2uYt/sOLtTC+ItzqVm94w7mKm2/R9YUS6eB9zV9mhh6mxxPW5hMN gp4Yrue/Uq5zoZLWjgMgLmkcdffsRq/j2ZtC3lxyc6zBxslsXvF8rcOuqJFkjkOa l7pTje3vNFWUjnohetBxk5IbBV7LSjWNSPQ+rH8sQiRrachD/f8skZtbKcZHh8Rt 9AlV6+CTYAsTicCG4sxvDIUgDCuPzJgSq4C/+Nz6xjbF4MOupPhMTVValHJTXdFS A77KkRkvCXuQxSqSZ7ln1/D91TvGwEE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:12:48 2025 by rpki-client