$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bb245afb-3ade-32c5-8e44-003c6ff567bd.roa File: bb245afb-3ade-32c5-8e44-003c6ff567bd.roa (raw, json) Hash identifier: R/F80/7Bl7CtYu2Eq7lxg8/5CpkPH/z9qLaNhO/J9s4= Subject key identifier: E4:A5:49:2B:66:20:2C:00:A1:D3:6D:04:96:E8:41:F1:48:BE:07:77 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B987242883365B190BC5BBD20 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bb245afb-3ade-32c5-8e44-003c6ff567bd.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 3356 IP address blocks: 20.139.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:42:88:33:65:b1:90:bc:5b:bd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=19b7f69b-36a4-4a80-854e-157f654a848b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:b4:2c:93:8a:66:af:8b:45:7e:16:96:ce: 62:ce:66:3a:99:5c:fc:ee:75:a3:b5:59:53:ad:82: 8d:0e:74:28:a8:70:95:78:7f:93:26:f8:ee:b5:8b: aa:c6:8c:7d:71:12:3e:f5:79:0a:de:a1:ca:ff:1e: 24:df:9a:48:a0:6e:16:30:f7:46:12:b8:86:10:c1: e8:d0:d1:a0:f3:70:af:5e:b9:16:0c:9b:95:64:32: 8f:4f:3b:21:28:58:37:b9:f6:17:23:c2:f6:1f:97: fb:bc:31:57:5c:6b:89:fd:d8:96:05:88:2d:ce:bd: f5:15:ca:b4:bb:ce:67:3f:d5:b2:67:d9:06:8b:dd: 0e:2d:a5:b1:9f:8b:ca:74:6e:1f:d4:f9:a5:09:c1: 95:85:f8:38:cf:7d:0b:53:ba:10:0a:01:1e:4d:79: ee:a5:a2:20:87:97:d9:9f:e5:51:7b:4e:ff:5f:d0: 6b:5c:6d:77:f0:5e:5e:81:85:de:7e:89:29:b7:8d: d9:99:a0:3b:5b:74:46:75:4b:78:e0:23:f3:8f:b2: b2:8e:de:a5:8f:06:23:de:15:03:d7:e0:81:00:59: 4b:34:3b:fc:8b:6c:9c:3d:28:86:6a:96:67:8d:e7: 7f:53:a4:13:dd:7d:f8:c2:32:f4:0a:d7:c9:a6:5c: b7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A5:49:2B:66:20:2C:00:A1:D3:6D:04:96:E8:41:F1:48:BE:07:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bb245afb-3ade-32c5-8e44-003c6ff567bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b7:b3:4b:38:15:ef:c8:58:d7:d6:9b:ab:1d:bc:80:64:ba: 35:d5:bc:35:4b:62:38:55:71:36:80:5e:ef:84:49:51:44:2b: fe:2c:e2:94:52:df:11:4e:16:09:10:ae:ad:99:33:ac:b0:1e: c9:e3:87:e9:65:d9:24:1b:3b:94:ae:c0:6c:6a:ab:e3:c6:b9: be:c6:81:90:b6:aa:af:83:c2:34:a7:cc:d1:39:91:83:02:63: cb:11:ef:8f:ad:00:dd:1f:8c:f1:29:ce:76:ae:8a:06:33:95: 69:4a:38:c1:7c:48:ea:cd:ca:51:80:36:f1:23:75:96:a4:06: 6a:e7:b1:5a:79:ee:b5:7d:c7:a5:18:21:04:72:88:d6:73:8f: 2a:a8:49:bf:83:a2:31:45:b2:25:a8:da:ad:20:06:4e:74:03: 0b:59:4c:a3:cb:8e:49:19:7b:93:a4:39:6b:03:93:cc:d6:af: 7e:18:86:5c:fd:8b:84:11:1a:c0:2e:9a:cb:1d:cb:d0:24:b1: e0:27:64:ae:0b:04:7b:84:b4:1b:31:02:b7:22:8a:62:4d:a1: b5:54:c3:17:e8:ec:a9:d9:5d:50:a9:fe:3f:f9:5f:0d:e3:5b: a4:89:f5:72:a9:e2:d4:25:fa:49:a1:b1:83:9e:48:ea:eb:0d: 80:e5:be:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckKIM2WxkLxbvSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MTliN2Y2OWItMzZhNC00YTgwLTg1NGUtMTU3ZjY1NGE4NDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzG0LJOKZq+LRX4Wls5izmY6mVz87nWjtVlT rYKNDnQoqHCVeH+TJvjutYuqxox9cRI+9XkK3qHK/x4k35pIoG4WMPdGEriGEMHo 0NGg83CvXrkWDJuVZDKPTzshKFg3ufYXI8L2H5f7vDFXXGuJ/diWBYgtzr31Fcq0 u85nP9WyZ9kGi90OLaWxn4vKdG4f1PmlCcGVhfg4z30LU7oQCgEeTXnupaIgh5fZ n+VRe07/X9BrXG138F5egYXefokpt43ZmaA7W3RGdUt44CPzj7Kyjt6ljwYj3hUD 1+CBAFlLNDv8i2ycPSiGapZnjed/U6QT3X34wjL0CtfJply3HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSlSStmICwAodNtBJboQfFIvgd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmIyNDVhZmItM2FkZS0z MmM1LThlNDQtMDAzYzZmZjU2N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm3s0s4Fe/IWNfWm6sdvIBkujXVvDVLYjhVcTaAXu+ESVFEK/4s4pRS 3xFOFgkQrq2ZM6ywHsnjh+ll2SQbO5SuwGxqq+PGub7GgZC2qq+DwjSnzNE5kYMC Y8sR74+tAN0fjPEpznauigYzlWlKOMF8SOrNylGANvEjdZakBmrnsVp57rV9x6UY IQRyiNZzjyqoSb+DojFFsiWo2q0gBk50AwtZTKPLjkkZe5OkOWsDk8zWr34Yhlz9 i4QRGsAumssdy9AkseAnZK4LBHuEtBsxArciimJNobVUwxfo7KnZXVCp/j/5Xw3j W6SJ9XKp4tQl+kmhsYOeSOrrDYDlvr8= -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:09 2025 by rpki-client