$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa File: a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa (raw, json) Hash identifier: DjfkdVKVowNvwb97gFdl9s1F56tzfNpzbC8RUF3j5KM= Subject key identifier: 9F:B3:D5:AE:71:07:1F:18:C9:75:33:04:9B:E3:34:00:B8:D0:63:E1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B987241A9EEC8657F3057FE4C Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 203 IP address blocks: 20.134.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:41:a9:ee:c8:65:7f:30:57:fe:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=a5ef1593-08ba-47c9-a0e5-a725817b6b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:c1:69:e2:34:ac:84:20:ab:66:dc:d7:7b: c9:ed:28:b5:d5:52:1d:1c:1a:11:c4:0b:52:e5:7a: 38:1f:4d:2f:22:be:05:03:b5:16:2f:ca:15:5e:3d: 7c:42:44:ac:77:63:7a:3a:f5:b9:66:4a:60:f3:0a: 59:a8:b8:b4:d7:ee:93:43:e7:b4:d7:40:c8:76:9d: a7:f8:a0:d8:33:09:90:2c:4b:1f:09:87:a7:2c:18: db:a8:6c:a8:a1:f6:3f:0b:0c:1d:9b:39:44:a7:16: d9:85:15:81:af:3a:3d:92:e3:75:ae:56:7e:77:20: 70:ef:eb:98:bc:a0:5f:fc:6a:6f:3a:10:ab:6a:c9: ff:bb:04:b3:00:77:62:9c:5c:c6:3e:2b:05:a8:5b: 09:6b:7d:93:92:56:7e:11:60:33:f5:87:d2:ee:1f: be:0e:16:13:33:c7:16:fb:c4:00:b7:d3:ce:ed:f3: ba:c4:f0:b6:1e:12:e1:6b:e5:26:51:2b:b3:10:d1: 4b:33:8c:65:93:a1:0b:b7:61:e5:37:b8:e1:de:4e: ac:b0:2d:75:d6:49:e3:51:2a:02:30:3c:14:17:c4: 6a:01:a5:10:37:58:48:59:dd:ea:8b:76:2f:c7:c1: 98:7d:ac:82:ce:80:d0:4a:76:33:df:e1:fe:6d:cb: 27:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B3:D5:AE:71:07:1F:18:C9:75:33:04:9B:E3:34:00:B8:D0:63:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:32:50:30:a9:43:e5:b9:21:6b:4c:79:7d:0d:a2:c2:f6:09: 1e:63:17:98:21:1d:ec:af:75:57:61:26:8f:6f:11:96:94:4a: 66:5f:0b:d0:2b:bb:c5:bb:bf:d4:83:35:69:bd:1d:14:2a:97: 46:e2:bd:9b:fa:42:c2:fa:11:fd:6c:ff:8e:df:56:44:a9:3c: 9c:a7:53:1b:88:fb:2c:5c:0d:f8:de:55:2c:2d:e2:b7:21:02: d7:68:e3:95:1c:d5:ff:07:f8:f7:25:5c:97:64:22:5c:4b:57: b0:54:1c:e1:d1:34:5b:38:08:51:db:49:27:a3:77:cc:55:e5: 10:f8:c4:06:28:87:ed:25:77:62:23:6d:6b:7e:95:38:aa:ba: ae:9e:b0:96:73:86:a4:d5:b2:dd:cf:a6:2a:61:26:0c:58:a4: 96:be:e8:ce:3e:36:58:5d:c0:c8:4a:50:47:0b:a1:51:a6:ee: 18:76:5d:48:dc:21:ba:de:47:15:34:51:a4:75:61:9a:09:62: ed:36:da:b4:c8:10:8d:df:6f:f7:79:f5:2c:7d:0f:a3:c1:e9: 79:69:d8:36:79:1d:59:88:49:76:80:2b:e8:d7:b1:5e:52:72: 72:d1:0f:b9:34:2a:4b:01:e5:29:5a:ed:3b:76:2b:63:9a:37: 32:42:d0:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckGp7shlfzBX/kwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk YTVlZjE1OTMtMDhiYS00N2M5LWEwZTUtYTcyNTgxN2I2YjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJvBaeI0rIQgq2bc13vJ7Si11VIdHBoRxAtS 5Xo4H00vIr4FA7UWL8oVXj18QkSsd2N6OvW5Zkpg8wpZqLi01+6TQ+e010DIdp2n +KDYMwmQLEsfCYenLBjbqGyoofY/CwwdmzlEpxbZhRWBrzo9kuN1rlZ+dyBw7+uY vKBf/GpvOhCrasn/uwSzAHdinFzGPisFqFsJa32TklZ+EWAz9YfS7h++DhYTM8cW +8QAt9PO7fO6xPC2HhLha+UmUSuzENFLM4xlk6ELt2HlN7jh3k6ssC111knjUSoC MDwUF8RqAaUQN1hIWd3qi3Yvx8GYfayCzoDQSnYz3+H+bcsn1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+z1a5xBx8YyXUzBJvjNAC40GPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTUxYzFiNzEtMmRhMi0z YTlmLWE3MWYtZTE1YzkzNGNjN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMyUDCpQ+W5IWtMeX0NosL2CR5jF5ghHeyvdVdhJo9vEZaUSmZfC9Ar u8W7v9SDNWm9HRQql0bivZv6QsL6Ef1s/47fVkSpPJynUxuI+yxcDfjeVSwt4rch Atdo45Uc1f8H+PclXJdkIlxLV7BUHOHRNFs4CFHbSSejd8xV5RD4xAYoh+0ld2Ij bWt+lTiquq6esJZzhqTVst3PpiphJgxYpJa+6M4+NlhdwMhKUEcLoVGm7hh2XUjc IbreRxU0UaR1YZoJYu022rTIEI3fb/d59Sx9D6PB6Xlp2DZ5HVmISXaAK+jXsV5S cnLRD7k0KksB5Sla7Tt2K2OaNzJC0N4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:06:12 2025 by rpki-client