$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa File: b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa (raw, json) Hash identifier: iTpo29zV/oy3jehscU590wSxi1kmOVSonIuABxH3viA= Subject key identifier: F9:33:69:69:9A:77:BA:D3:D6:3A:52:E3:A1:D4:17:69:C7:4A:26:61 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCB1D6DC9C2733E1DB41C8 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3356 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b1:d6:dc:9c:27:33:e1:db:41:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=8565da19-92a9-4178-b48a-96e5ca244b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:bb:56:de:db:13:e9:06:86:0a:d7:55:02: 5d:32:ce:11:d9:4a:9a:c8:3a:1d:d6:d1:35:7b:37: bb:94:29:a0:14:52:31:3d:3d:17:9d:ea:62:97:57: 49:a4:79:10:8d:28:21:4f:e9:a0:b7:26:bc:5a:02: 58:d3:90:57:97:d6:40:6d:5e:80:74:1c:8b:f1:1b: e6:57:07:db:f1:36:df:7c:a0:5f:41:ad:16:af:69: 91:4e:2b:5d:dd:69:88:80:0a:6f:14:45:df:30:3b: 17:7d:c4:88:c4:85:72:ae:f7:b2:f9:02:58:09:ab: 66:24:ac:ff:91:3f:95:fa:59:05:3e:7d:5c:11:c7: 12:2c:9f:33:35:a6:88:a2:ce:eb:95:59:fc:8f:78: 83:3b:cf:56:08:e0:7a:e3:95:34:a7:a9:95:8d:f8: 8c:24:c7:cd:97:35:96:44:f3:f0:9c:87:be:15:90: 6b:d2:ea:d1:2d:33:62:a7:e1:2c:dc:48:2b:b2:36: 79:4d:4d:6a:1a:0f:8b:26:75:7f:77:e6:d8:33:63: 41:b0:ac:80:84:25:01:50:0a:f1:7b:13:a4:4a:5e: 21:a9:06:88:64:3d:3f:65:3c:78:c7:25:67:5d:fd: 26:c0:e8:01:25:b1:40:8b:a1:f9:f2:a0:45:81:7b: e6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:33:69:69:9A:77:BA:D3:D6:3A:52:E3:A1:D4:17:69:C7:4A:26:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ea:50:04:62:15:62:d5:b7:82:d1:59:c3:24:cb:8f:45:55: fa:d5:82:67:fe:9a:77:92:72:14:f2:ce:a6:b6:19:9e:f7:4e: ec:3b:25:05:1c:db:1c:d1:97:5b:15:06:65:fa:c3:09:48:9f: d3:dc:90:9e:40:2a:e0:1d:89:4a:57:c5:9f:05:03:0d:63:25: 6a:d7:66:a0:f7:9b:5a:13:1d:a5:54:93:41:51:32:0c:16:8e: 36:6e:8b:df:91:2f:63:70:e3:ed:35:f3:17:6a:f7:0c:78:4c: 61:ce:91:ca:cd:71:58:c9:0a:15:1e:03:42:f9:d4:cd:21:9f: 03:3f:b9:4f:6d:18:92:e6:11:2e:24:f0:c2:9f:41:45:8f:2b: 2d:a8:51:5f:ba:84:b0:bb:38:e5:25:86:32:5e:03:d5:66:ab: 91:fc:71:4b:1a:48:15:24:1a:ba:36:f8:cc:ee:e1:b7:ff:0c: 53:bf:95:29:9a:e4:87:35:20:16:d3:47:89:b8:fa:84:3b:a6: 28:3c:40:ec:1e:bd:37:0c:1b:62:f5:4e:14:63:c4:b4:68:4f: 5a:a6:f0:ed:45:fd:f9:14:15:5e:ee:f2:cd:81:a6:56:96:45: 4c:3e:91:6a:8e:e7:0a:fc:2e:20:22:de:9e:7b:61:2f:ea:41: 74:68:7f:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLHW3JwnM+HbQcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ODU2NWRhMTktOTJhOS00MTc4LWI0OGEtOTZlNWNhMjQ0YjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJi7Vt7bE+kGhgrXVQJdMs4R2UqayDod1tE1 eze7lCmgFFIxPT0Xnepil1dJpHkQjSghT+mgtya8WgJY05BXl9ZAbV6AdByL8Rvm Vwfb8TbffKBfQa0Wr2mRTitd3WmIgApvFEXfMDsXfcSIxIVyrvey+QJYCatmJKz/ kT+V+lkFPn1cEccSLJ8zNaaIos7rlVn8j3iDO89WCOB645U0p6mVjfiMJMfNlzWW RPPwnIe+FZBr0urRLTNip+Es3EgrsjZ5TU1qGg+LJnV/d+bYM2NBsKyAhCUBUArx exOkSl4hqQaIZD0/ZTx4xyVnXf0mwOgBJbFAi6H58qBFgXvm3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkzaWmad7rT1jpS46HUF2nHSiZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjliZmMzMGMtNGQyNS0z YmQwLTkzMjQtY2NjYmJkZTE2MjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbqUARiFWLVt4LRWcMky49FVfrVgmf+mneSchTyzqa2GZ73Tuw7JQUc 2xzRl1sVBmX6wwlIn9PckJ5AKuAdiUpXxZ8FAw1jJWrXZqD3m1oTHaVUk0FRMgwW jjZui9+RL2Nw4+018xdq9wx4TGHOkcrNcVjJChUeA0L51M0hnwM/uU9tGJLmES4k 8MKfQUWPKy2oUV+6hLC7OOUlhjJeA9Vmq5H8cUsaSBUkGro2+Mzu4bf/DFO/lSma 5Ic1IBbTR4m4+oQ7pig8QOwevTcMG2L1ThRjxLRoT1qm8O1F/fkUFV7u8s2BplaW RUw+kWqO5wr8LiAi3p57YS/qQXRofxc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:16:59 2025 by rpki-client