$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa File: b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa (raw, json) Hash identifier: 5OooJ39y/SJ+yzFc1JoWlmCzJV7CnQPWxvTMmja7Q8s= Subject key identifier: 45:CB:3B:14:DA:0D:40:BA:2B:B7:25:8A:C5:62:E1:4B:09:35:E5:3E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B98724220299B29DCD159E300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 3356 IP address blocks: 20.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:42:20:29:9b:29:dc:d1:59:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=2060246a-bf92-49c7-957f-017cb0f8b4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:41:47:be:4b:60:72:5d:52:a2:97:82:cc: ae:01:47:72:90:e0:39:c4:5b:e3:01:b6:bd:2a:88: 02:d2:8b:24:a4:7d:c4:b4:1c:fe:05:dc:06:07:28: f4:07:e5:13:88:44:75:94:a4:91:04:50:cc:21:17: 52:93:21:d9:67:ae:af:f6:d3:e4:60:50:32:6c:af: 8e:c0:2d:27:81:a4:72:4c:8c:3e:15:16:b8:44:cd: 5f:1a:66:fe:2e:d2:0c:f5:e5:05:e1:c2:b3:09:08: 8c:c9:b6:de:cb:85:01:e5:77:25:91:ab:93:e7:3b: b2:6b:81:54:1a:26:c4:c8:ad:cf:3e:f1:62:e1:34: 53:5e:7c:ee:6a:43:3c:ea:f3:e0:5e:88:8d:31:8e: 20:dd:c4:2c:c1:6d:ac:ac:f7:9a:78:d1:ff:74:5f: 1d:39:81:76:a9:6d:8f:39:c4:e7:ea:fd:21:03:1d: 90:96:92:f7:f4:9c:6b:fa:9f:da:1b:45:39:ea:67: 21:95:09:51:f9:9d:35:86:05:02:a6:df:3b:44:2a: c1:0b:d1:73:cf:1e:ad:1d:b1:a7:80:bd:ac:71:9b: e3:8f:e8:fa:8d:83:bc:e0:58:34:ae:fb:83:7a:07: d6:8e:30:2d:47:1f:d6:ec:1c:7b:0c:09:f5:ee:20: 4d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CB:3B:14:DA:0D:40:BA:2B:B7:25:8A:C5:62:E1:4B:09:35:E5:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ae:fb:14:b0:11:c0:21:2b:79:f8:4e:e2:5a:59:ac:fa:7c: 81:7f:4b:2e:bf:c8:8d:63:6e:b7:5f:ff:60:08:46:30:d7:6e: af:08:19:29:9f:e0:59:f4:e4:b2:a3:9d:2a:a8:90:d0:1e:98: 9f:87:f7:22:99:4d:14:68:a6:6a:0c:71:e9:d7:07:4c:de:0c: 97:a1:b9:ec:67:3e:71:c0:34:6a:04:ec:8f:44:c7:3c:e5:c2: 71:0a:c9:14:ee:f1:07:46:1a:38:c5:03:a2:b0:ba:db:62:8a: dd:c8:76:98:c3:b0:e7:48:50:0c:9a:c4:3a:85:2e:c0:84:38: e6:9a:95:c5:95:1f:d1:88:17:c6:7a:7f:41:78:e0:41:3b:d4: 04:bc:c6:43:0d:7f:26:5d:bb:b2:a1:0d:e7:9d:ab:f5:64:c1: 68:46:76:ba:82:2e:85:d0:26:c7:81:3e:f6:8f:62:c7:33:24: cd:0b:65:1b:90:4e:50:55:eb:f1:66:bb:fb:0f:88:bd:53:46: e6:7d:18:fc:d3:f7:67:f1:30:b2:c7:a6:9b:56:3b:21:0a:ce: e5:bb:6e:9f:d3:08:75:31:43:ce:ab:b8:0a:12:9c:29:b8:5c: 7c:d3:6c:b5:5f:de:f8:c1:b3:22:76:7c:4e:60:6e:9c:34:67: da:38:5c:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckIgKZsp3NFZ4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MjA2MDI0NmEtYmY5Mi00OWM3LTk1N2YtMDE3Y2IwZjhiNGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+xBR75LYHJdUqKXgsyuAUdykOA5xFvjAba9 KogC0oskpH3EtBz+BdwGByj0B+UTiER1lKSRBFDMIRdSkyHZZ66v9tPkYFAybK+O wC0ngaRyTIw+FRa4RM1fGmb+LtIM9eUF4cKzCQiMybbey4UB5XclkauT5zuya4FU GibEyK3PPvFi4TRTXnzuakM86vPgXoiNMY4g3cQswW2srPeaeNH/dF8dOYF2qW2P OcTn6v0hAx2QlpL39Jxr+p/aG0U56mchlQlR+Z01hgUCpt87RCrBC9Fzzx6tHbGn gL2scZvjj+j6jYO84Fg0rvuDegfWjjAtRx/W7Bx7DAn17iBNKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXLOxTaDUC6K7clisVi4UsJNeU+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjJlY2Y1MjUtOGM4ZS0z MWFmLWI0ZTAtMGJmYzI3MmEzM2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuu+xSwEcAhK3n4TuJaWaz6fIF/Sy6/yI1jbrdf/2AIRjDXbq8IGSmf 4Fn05LKjnSqokNAemJ+H9yKZTRRopmoMcenXB0zeDJehuexnPnHANGoE7I9Exzzl wnEKyRTu8QdGGjjFA6Kwuttiit3IdpjDsOdIUAyaxDqFLsCEOOaalcWVH9GIF8Z6 f0F44EE71AS8xkMNfyZdu7KhDeedq/VkwWhGdrqCLoXQJseBPvaPYsczJM0LZRuQ TlBV6/Fmu/sPiL1TRuZ9GPzT92fxMLLHpptWOyEKzuW7bp/TCHUxQ86ruAoSnCm4 XHzTbLVf3vjBsyJ2fE5gbpw0Z9o4XHw= -----END CERTIFICATE-----Generated at Wed Nov 5 03:53:18 2025 by rpki-client