$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa File: 5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa (raw, json) Hash identifier: fkeU2DA8Y+e8aCIKlgQbpt4fLDKW1wZj7xJOCikXtcQ= Subject key identifier: 4A:3D:71:C4:21:B7:E7:25:4D:5C:EF:D2:7B:89:BC:D4:3F:F3:39:10 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B95A79E21F6B5A249FABCE980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 3356 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9e:21:f6:b5:a2:49:fa:bc:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b2cc0949-e985-4664-acf1-61870f38d5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:69:07:c9:f9:fc:cc:bf:51:0a:47:cd:93: 75:76:0d:b9:83:6b:af:9e:a0:ab:3f:c0:f1:14:e6: db:d6:45:63:c3:53:09:3c:37:ea:86:01:fe:8d:89: 8f:e5:20:12:b1:7a:fa:99:5c:97:6a:92:a3:df:3d: 5a:c2:6e:20:e4:ec:e5:e1:3e:98:bf:b1:a0:69:9e: 9c:b5:d9:f7:d9:9e:e3:de:b4:0c:37:2e:e4:5d:4c: d8:b6:56:32:7b:38:cb:06:2b:e3:db:5d:c9:5f:96: f2:58:88:17:e1:95:5c:9b:47:27:09:2f:d1:3f:bd: a4:3d:0c:f2:7f:6c:22:81:7d:f9:87:f2:b6:cf:a8: 9b:1f:e4:31:02:83:aa:e7:46:ef:0d:ea:0a:73:69: f0:59:91:ef:5f:ff:22:54:b0:eb:30:40:c8:22:57: 8c:d1:fb:e6:37:2d:2e:db:82:36:e7:0f:4f:d5:6d: 86:45:24:b1:ce:9d:3b:fe:99:84:7a:19:9c:dd:ea: 64:54:e8:50:4a:c3:89:d7:c6:28:c7:7a:15:9d:a1: 17:e1:31:27:68:a8:4c:1f:22:91:ff:f8:f8:09:64: b3:83:41:22:f0:8b:7a:bf:d8:2c:0f:c5:45:36:e2: a8:6d:61:94:b4:99:65:1b:6b:59:57:b4:48:30:b8: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3D:71:C4:21:B7:E7:25:4D:5C:EF:D2:7B:89:BC:D4:3F:F3:39:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:38:46:ec:54:2c:2d:a3:a8:05:23:c0:3a:78:e0:c0:9e:ee: 66:7c:aa:82:f5:c7:a8:80:c9:d3:6c:c8:7d:9f:7a:a2:83:7e: f8:27:bb:0c:24:96:06:45:14:b8:4d:66:07:62:27:93:94:13: c7:34:9f:b6:9f:a6:1a:b8:87:75:3b:40:5d:41:bc:ad:ef:9f: 51:c9:4f:c3:7d:ae:e4:e5:d5:87:ce:05:b7:d0:f2:e0:05:9d: d8:63:7c:15:5b:06:e2:d9:1c:53:4b:91:f1:63:a2:82:f8:14: fd:7a:94:71:5d:f5:90:8e:81:90:9f:1a:d4:bb:6c:b6:17:8d: f8:d2:34:6b:c2:36:76:1f:bc:37:8f:80:64:a1:c3:b6:02:b4: 79:0a:07:f2:b7:2a:f6:51:eb:50:73:f5:97:e2:90:a8:16:eb: d5:3b:e6:1c:e1:1c:35:2f:da:03:7d:ba:0a:dc:63:42:2c:dc: ba:c6:7f:de:eb:22:0d:6d:83:48:fd:98:f6:55:10:22:7f:49: 29:c8:41:69:0e:1d:64:53:a4:95:0d:8b:55:d4:0a:d8:c3:31: 36:21:10:cb:de:e8:45:a6:c4:39:c9:9b:f1:e5:84:3a:11:36: 56:af:50:9a:20:d4:02:88:b1:bb:de:5f:b5:5b:56:80:3a:44: d9:fb:ff:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp54h9rWiSfq86YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjJjYzA5NDktZTk4NS00NjY0LWFjZjEtNjE4NzBmMzhkNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVVpB8n5/My/UQpHzZN1dg25g2uvnqCrP8Dx FObb1kVjw1MJPDfqhgH+jYmP5SASsXr6mVyXapKj3z1awm4g5Ozl4T6Yv7GgaZ6c tdn32Z7j3rQMNy7kXUzYtlYyezjLBivj213JX5byWIgX4ZVcm0cnCS/RP72kPQzy f2wigX35h/K2z6ibH+QxAoOq50bvDeoKc2nwWZHvX/8iVLDrMEDIIleM0fvmNy0u 24I25w9P1W2GRSSxzp07/pmEehmc3epkVOhQSsOJ18Yox3oVnaEX4TEnaKhMHyKR //j4CWSzg0Ei8It6v9gsD8VFNuKobWGUtJllG2tZV7RIMLj45wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo9ccQht+clTVzv0nuJvNQ/8zkQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWE3NWI1NGMtNzFiZC0z MjQzLTgwZDgtN2Q3OWQyNDY1YThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk4RuxULC2jqAUjwDp44MCe7mZ8qoL1x6iAydNsyH2feqKDfvgnuwwk lgZFFLhNZgdiJ5OUE8c0n7afphq4h3U7QF1BvK3vn1HJT8N9ruTl1YfOBbfQ8uAF ndhjfBVbBuLZHFNLkfFjooL4FP16lHFd9ZCOgZCfGtS7bLYXjfjSNGvCNnYfvDeP gGShw7YCtHkKB/K3KvZR61Bz9ZfikKgW69U75hzhHDUv2gN9ugrcY0Is3LrGf97r Ig1tg0j9mPZVECJ/SSnIQWkOHWRTpJUNi1XUCtjDMTYhEMve6EWmxDnJm/HlhDoR NlavUJog1AKIsbveX7VbVoA6RNn7/3g= -----END CERTIFICATE-----Generated at Wed Nov 5 01:11:36 2025 by rpki-client