$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa File: b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa (raw, json) Hash identifier: BGEZxlxjfWsMX00dp/hX09xoAOrdRSIUYMt/V/LoRHg= Subject key identifier: 11:FE:6E:8D:1F:4F:8A:44:94:90:41:7D:BC:10:85:C4:4A:24:F4:15 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B987240F3CFB893DBF4AB4540 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 3356 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:40:f3:cf:b8:93:db:f4:ab:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=26fd4cd6-1533-478a-a3f9-5d4f946b36e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:98:b8:a7:22:70:10:89:d7:93:76:c4:8b: 00:98:71:fc:e9:89:7b:f7:67:ea:5a:d8:fe:6f:59: b1:b9:b8:c2:a1:f4:19:25:5f:94:e2:2c:1d:6c:70: fb:80:e6:c4:e4:39:26:c7:0d:73:00:0d:72:c6:f1: 83:69:3f:af:7f:35:82:20:1c:2c:9a:d5:09:e1:76: f8:68:33:27:c7:89:0d:2b:11:87:3d:dd:ec:7a:52: a3:f8:64:24:4f:c4:e8:e1:82:15:8c:6d:e4:03:60: 46:5e:ac:cb:4f:75:5a:71:09:a0:45:ff:07:fe:ef: 62:73:d6:55:57:ea:99:2a:8b:9b:c2:fc:fc:d8:67: a9:73:96:c6:2d:b3:5c:15:0c:8d:11:79:fe:62:21: be:a5:bd:22:b5:c5:4d:fd:c8:9e:2b:74:a0:79:c7: 88:fb:34:40:83:77:97:2b:cb:6f:a3:03:74:82:6d: dd:25:82:d0:14:eb:ff:5c:6e:9c:0a:20:03:81:c9: a1:aa:59:ec:2f:ae:0e:e0:5d:bc:3f:c3:94:fb:6d: 94:9a:c0:c2:31:ca:67:6e:af:59:b3:e7:d0:86:6b: 9d:59:ea:f7:02:03:84:55:7f:27:21:06:45:99:4b: 47:90:e2:7c:1d:ca:dd:77:ba:d7:b7:10:09:c5:e9: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FE:6E:8D:1F:4F:8A:44:94:90:41:7D:BC:10:85:C4:4A:24:F4:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:56:37:a2:fe:ff:d6:b6:ee:48:6a:4a:1b:59:7c:b3:aa:3a: 8e:b3:53:2a:fc:53:41:26:cc:17:9b:f0:b9:fc:8b:44:48:dc: ce:4e:e2:f1:85:17:60:bf:e3:28:39:17:86:ae:82:ac:1c:2d: 88:81:4c:af:89:89:82:61:b1:c1:2f:93:ee:61:ee:87:dd:7c: 7a:c8:9a:4f:e4:49:cd:d4:da:1f:08:ce:07:9b:1f:69:ab:92: f4:98:c9:ba:4c:9e:43:2d:5f:f4:53:d7:6f:96:b3:83:4c:ae: a5:91:db:68:cf:26:dc:ac:8d:4a:af:a1:0e:4e:eb:6d:a6:13: 34:b9:de:15:0b:7d:f9:17:eb:e2:7b:38:25:9a:d5:47:be:5f: 67:fd:7b:a6:de:ba:50:05:2b:4a:a5:42:be:b2:48:6b:72:00: 2f:dd:a4:0a:45:d9:d7:3a:fb:de:2d:31:11:66:c4:8c:ea:42: a0:d2:91:14:ea:fd:3c:59:75:6b:f8:e7:33:be:e1:34:38:8c: 37:af:06:18:20:2b:a1:b5:63:4b:67:b1:e9:4a:37:8b:0b:91: d7:88:4d:eb:f2:2f:41:b2:e2:4c:cd:cb:bf:c6:5c:76:bc:35: a7:f7:2f:b8:4a:6b:95:9d:c9:65:5c:5a:ff:a2:4a:6c:d5:9d: 50:13:5e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckDzz7iT2/SrRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MjZmZDRjZDYtMTUzMy00NzhhLWEzZjktNWQ0Zjk0NmIzNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/KYuKcicBCJ15N2xIsAmHH86Yl792fqWtj+ b1mxubjCofQZJV+U4iwdbHD7gObE5Dkmxw1zAA1yxvGDaT+vfzWCIBwsmtUJ4Xb4 aDMnx4kNKxGHPd3selKj+GQkT8To4YIVjG3kA2BGXqzLT3VacQmgRf8H/u9ic9ZV V+qZKoubwvz82Gepc5bGLbNcFQyNEXn+YiG+pb0itcVN/cieK3SgeceI+zRAg3eX K8tvowN0gm3dJYLQFOv/XG6cCiADgcmhqlnsL64O4F28P8OU+22UmsDCMcpnbq9Z s+fQhmudWer3AgOEVX8nIQZFmUtHkOJ8Hcrdd7rXtxAJxemrwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH+bo0fT4pElJBBfbwQhcRKJPQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjE2ZGI2YWEtM2VlYi0z MjMwLTk4MGYtMThjMGE2MGMzYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtWN6L+/9a27khqShtZfLOqOo6zUyr8U0EmzBeb8Ln8i0RI3M5O4vGF F2C/4yg5F4augqwcLYiBTK+JiYJhscEvk+5h7ofdfHrImk/kSc3U2h8IzgebH2mr kvSYybpMnkMtX/RT12+Ws4NMrqWR22jPJtysjUqvoQ5O622mEzS53hULffkX6+J7 OCWa1Ue+X2f9e6beulAFK0qlQr6ySGtyAC/dpApF2dc6+94tMRFmxIzqQqDSkRTq /TxZdWv45zO+4TQ4jDevBhggK6G1Y0tnselKN4sLkdeITevyL0Gy4kzNy7/GXHa8 Naf3L7hKa5WdyWVcWv+iSmzVnVATXng= -----END CERTIFICATE-----Generated at Wed Nov 5 03:56:05 2025 by rpki-client