$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9e1788ff-7b46-3f2f-be90-735de54b62ca.roa File: 9e1788ff-7b46-3f2f-be90-735de54b62ca.roa (raw, json) Hash identifier: WNaXUyksqoExWLlfD0DkaTb/EcZYsyJOhRmxtITBLAg= Subject key identifier: B1:9B:0B:C7:61:A1:26:27:43:9A:05:BF:34:EF:FA:72:5E:1D:37:1A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584BBB7595FB4B4BE41B6FE87080 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9e1788ff-7b46-3f2f-be90-735de54b62ca.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 4237 IP address blocks: 20.139.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:95:fb:4b:4b:e4:1b:6f:e8:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=4502ba28-d5ac-4238-9dad-c5d3579488d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:25:59:1e:8b:b3:cb:a3:d0:53:d7:8d:f9: bb:de:91:b6:38:56:e4:00:20:9a:78:2f:64:3f:32: df:12:0a:24:5e:06:70:97:2f:b9:49:a9:ec:f5:bd: 51:2c:a5:85:56:2a:d7:62:77:17:61:5f:98:00:9d: 86:11:90:e1:db:0b:1a:83:63:59:d2:04:32:39:99: a5:f4:04:cd:dd:3f:4a:5c:c4:fb:4a:2b:3f:79:b6: 40:74:f9:c5:0b:80:62:ef:1a:53:f2:48:3d:5c:4c: f6:80:6e:8d:8e:32:b5:51:04:4a:7f:91:95:e6:f2: 86:a5:e9:22:91:ca:be:b5:23:f2:cd:68:43:87:7a: 87:81:ea:e0:cf:9f:ac:2e:4b:68:f5:66:ce:e3:d3: aa:fe:e3:d2:ee:1b:76:6d:71:cb:54:a4:d5:26:d4: 21:70:45:4e:ad:2f:31:6e:63:74:26:46:c2:ac:a1: 6e:39:39:db:1b:bb:ef:7a:04:d5:df:75:ea:92:76: 80:62:d2:d2:08:77:68:a6:60:92:a7:9a:4d:bf:4f: 23:ae:a2:68:23:55:17:f1:bd:8b:97:05:68:2b:c2: 45:31:a7:5b:ab:f4:72:26:41:f9:89:0d:5e:17:5a: ca:d9:fd:f1:e9:d8:cc:69:8a:2d:b4:2d:d2:c2:84: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9B:0B:C7:61:A1:26:27:43:9A:05:BF:34:EF:FA:72:5E:1D:37:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9e1788ff-7b46-3f2f-be90-735de54b62ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e3:fe:ac:4c:4f:6d:e6:69:ab:32:bc:59:33:4c:b9:29:a1: c3:c8:a1:3e:5d:de:e3:11:e3:15:2e:5e:9f:f1:63:8d:99:cd: 9e:2b:0a:1a:af:b8:48:61:94:8d:1a:0a:4d:d5:48:f2:5c:fb: 6e:b7:85:98:7d:29:f0:f1:84:02:ca:0c:5b:52:cb:13:f6:69: 16:0c:05:5c:79:25:30:5b:7a:49:43:d0:f0:e8:f7:52:c0:a7: 95:56:b4:eb:bb:9e:5d:46:7a:73:68:3e:24:45:e9:01:39:74: 46:8a:68:ef:f4:69:5a:9b:91:a7:9a:e1:d2:b1:4a:b7:81:73: 10:fd:88:69:70:d9:15:e2:fd:e8:0e:79:7e:c1:09:5a:7f:6f: 29:60:2d:96:5d:46:d3:be:48:9d:32:2e:db:69:5e:41:96:96: 43:fa:36:68:e9:02:0d:88:42:dd:d7:af:66:8a:a3:00:3d:5c: 76:4d:df:92:57:e8:70:75:3d:cb:1f:34:7b:75:56:77:7e:23: 4d:33:d0:3d:1a:d3:c1:7d:56:63:fe:d7:a2:03:a2:b9:4e:49: 76:7a:99:42:ed:fd:c6:76:80:48:3c:df:99:f1:72:b4:d3:23: 4e:cc:ad:2c:a6:7a:3a:41:68:e3:66:bf:f9:cc:ef:35:89:48: 88:eb:25:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZX7S0vkG2/ocIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NDUwMmJhMjgtZDVhYy00MjM4LTlkYWQtYzVkMzU3OTQ4OGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+olWR6Ls8uj0FPXjfm73pG2OFbkACCaeC9k PzLfEgokXgZwly+5Sans9b1RLKWFVirXYncXYV+YAJ2GEZDh2wsag2NZ0gQyOZml 9ATN3T9KXMT7Sis/ebZAdPnFC4Bi7xpT8kg9XEz2gG6NjjK1UQRKf5GV5vKGpeki kcq+tSPyzWhDh3qHgergz5+sLkto9WbO49Oq/uPS7ht2bXHLVKTVJtQhcEVOrS8x bmN0JkbCrKFuOTnbG7vvegTV33XqknaAYtLSCHdopmCSp5pNv08jrqJoI1UX8b2L lwVoK8JFMadbq/RyJkH5iQ1eF1rK2f3x6djMaYottC3SwoSSsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGbC8dhoSYnQ5oFvzTv+nJeHTcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWUxNzg4ZmYtN2I0Ni0z ZjJmLWJlOTAtNzM1ZGU1NGI2MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPj/qxMT23maasyvFkzTLkpocPIoT5d3uMR4xUuXp/xY42ZzZ4rChqv uEhhlI0aCk3VSPJc+263hZh9KfDxhALKDFtSyxP2aRYMBVx5JTBbeklD0PDo91LA p5VWtOu7nl1GenNoPiRF6QE5dEaKaO/0aVqbkaea4dKxSreBcxD9iGlw2RXi/egO eX7BCVp/bylgLZZdRtO+SJ0yLttpXkGWlkP6NmjpAg2IQt3Xr2aKowA9XHZN35JX 6HB1PcsfNHt1Vnd+I00z0D0a08F9VmP+16IDorlOSXZ6mULt/cZ2gEg835nxcrTT I07MrSymejpBaONmv/nM7zWJSIjrJRU= -----END CERTIFICATE-----Generated at Wed Nov 5 03:56:51 2025 by rpki-client