$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa File: a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa (raw, json) Hash identifier: RNRdWU2RWf9pDiY4+sCNdl1fUJo4Xr3VgVaG6O7iqww= Subject key identifier: 06:F8:DE:54:EE:3B:C9:8B:E7:1C:75:58:06:7D:0C:B2:13:4D:B0:29 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B3C51A88390BEB53471E12380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 17916 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:a8:83:90:be:b5:34:71:e1:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=3e58c4f0-8efe-4232-9695-30b32f244894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7a:61:10:81:2a:79:ad:81:39:b1:23:11:59: 0c:2c:59:c1:21:66:6b:62:2d:1d:9e:4b:be:f5:46: 84:80:4d:3b:b9:34:18:8d:e2:11:8e:6d:dd:99:e9: 33:95:71:e5:51:e4:5a:b8:08:41:39:4f:63:46:96: df:c6:0b:c7:4e:0a:0a:65:69:95:ab:51:48:ba:52: f3:7f:67:7d:fc:6a:9c:25:1b:11:52:e4:21:90:fa: eb:98:9c:44:d0:f8:7a:cc:01:7d:39:4d:dd:33:95: 08:b9:0e:22:9b:86:fe:ea:da:a9:ec:4d:70:00:0f: 1d:72:b0:d1:13:20:0a:ba:cd:30:30:58:f1:6e:e1: 42:58:8c:86:63:b9:f1:32:7c:b8:3d:0e:88:5d:6f: 79:bc:02:e3:0b:c6:6d:c0:91:3a:a9:9e:b7:34:88: 15:3f:a2:47:5c:33:7d:a7:c0:91:a1:ce:24:cb:7f: 8b:f9:3a:5d:55:ce:87:01:84:7a:41:a5:f0:fa:1e: ef:7b:f4:0d:03:d0:20:28:62:17:67:b2:d3:97:0a: c7:e7:61:3d:82:79:1d:be:5b:d5:c4:70:23:6c:28: e5:8b:7f:83:70:4d:b9:6a:60:e5:16:68:89:e4:db: 3f:dd:9c:96:0a:a6:0c:7f:71:66:d2:b8:3c:c7:b5: 28:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F8:DE:54:EE:3B:C9:8B:E7:1C:75:58:06:7D:0C:B2:13:4D:B0:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:71:af:5c:08:b3:c6:75:41:77:6f:93:a8:4b:ba:89:a3:bc: 43:5d:62:34:0b:c1:f9:f9:86:af:6c:c5:9a:d3:d9:f5:8f:57: 56:f0:6d:9c:c7:43:b9:62:f7:fe:48:1d:8e:e6:e8:eb:d5:c7: bc:4a:9f:7e:c4:84:a8:96:ce:42:88:b7:8b:ec:d6:ed:b2:ab: 5d:26:4e:22:ae:9f:b7:ab:13:07:f2:c8:78:90:48:a6:8b:15: f2:67:f5:4b:7c:33:6d:66:ce:ec:96:33:66:49:8b:8a:d4:be: a8:2a:4c:bb:71:07:f4:5c:b9:32:0a:a7:36:0d:d2:a5:51:d2: db:53:5a:cc:9a:08:a8:9f:f4:db:6f:b1:d6:29:34:94:04:3e: e2:8a:25:ae:28:68:fd:3e:20:ed:53:1c:16:7f:2e:c8:7b:33: 19:5e:79:a1:57:09:46:3d:c8:39:47:50:e9:55:b3:ec:6c:d4: c8:22:19:23:d6:34:22:ff:48:c3:26:1a:3e:5b:5b:0c:d5:be: b6:07:8f:c0:9b:d0:7b:cd:a6:dc:5e:1c:60:de:2d:e1:11:10: 43:77:c9:04:3e:cc:e0:29:1d:16:02:01:84:06:b1:1e:1f:19: 3f:20:1a:02:06:55:7b:82:75:fc:c7:90:d5:96:2c:70:17:1e: 65:5d:47:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UaiDkL61NHHhI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk M2U1OGM0ZjAtOGVmZS00MjMyLTk2OTUtMzBiMzJmMjQ0ODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnphEIEqea2BObEjEVkMLFnBIWZrYi0dnku+ 9UaEgE07uTQYjeIRjm3dmekzlXHlUeRauAhBOU9jRpbfxgvHTgoKZWmVq1FIulLz f2d9/GqcJRsRUuQhkPrrmJxE0Ph6zAF9OU3dM5UIuQ4im4b+6tqp7E1wAA8dcrDR EyAKus0wMFjxbuFCWIyGY7nxMny4PQ6IXW95vALjC8ZtwJE6qZ63NIgVP6JHXDN9 p8CRoc4ky3+L+TpdVc6HAYR6QaXw+h7ve/QNA9AgKGIXZ7LTlwrH52E9gnkdvlvV xHAjbCjli3+DcE25amDlFmiJ5Ns/3ZyWCqYMf3Fm0rg8x7Uo7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAb43lTuO8mL5xx1WAZ9DLITTbApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTJjNDllZTUtZmJlMC0z ZDU5LTlmZDMtOWFhNzg4OTA4YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtxr1wIs8Z1QXdvk6hLuomjvENdYjQLwfn5hq9sxZrT2fWPV1bwbZzH Q7li9/5IHY7m6OvVx7xKn37EhKiWzkKIt4vs1u2yq10mTiKun7erEwfyyHiQSKaL FfJn9Ut8M21mzuyWM2ZJi4rUvqgqTLtxB/RcuTIKpzYN0qVR0ttTWsyaCKif9Ntv sdYpNJQEPuKKJa4oaP0+IO1THBZ/Lsh7MxleeaFXCUY9yDlHUOlVs+xs1MgiGSPW NCL/SMMmGj5bWwzVvrYHj8Cb0HvNptxeHGDeLeEREEN3yQQ+zOApHRYCAYQGsR4f GT8gGgIGVXuCdfzHkNWWLHAXHmVdR90= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:34 2025 by rpki-client