$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa File: 023b5472-f6c0-3095-80c3-7b022b15a339.roa (raw, json) Hash identifier: G8nYiDQtoYaV3x63ccwfCz6AQSJfYs1nJtbFXPA9n0c= Subject key identifier: 02:BD:EF:11:6E:F7:17:1D:60:C2:2C:C0:AC:F7:BD:04:3F:89:82:81 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B52A754773A2D3EF222262600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 203 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:54:77:3a:2d:3e:f2:22:26:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=34dd410b-f38b-49cd-a7b9-f879f58ef769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:20:b2:9c:15:23:b2:8a:e2:04:1a:72:83: 15:f0:43:c8:b8:cf:38:af:e0:94:b4:93:37:9c:00: 18:8e:78:4a:bc:fb:43:f4:7e:2b:a5:d2:e3:1b:cb: 9f:bf:49:4a:e5:da:78:c9:3a:35:a6:dd:4b:a7:ea: ac:39:4c:42:d2:2f:eb:04:bb:c7:a7:52:36:12:62: 7b:d8:21:c2:42:f9:e9:ce:7e:bc:87:64:a6:86:35: 2f:37:96:f0:74:19:7e:9e:e7:24:a1:89:8e:a8:ea: 00:b7:a8:c4:c6:d0:f7:c6:46:87:73:d8:ae:82:7f: 28:7d:67:00:c7:b8:78:93:fb:d2:df:fe:25:62:5b: eb:97:b7:24:93:6d:ef:9f:25:f2:7d:40:8a:35:33: 14:7e:6b:12:72:33:e8:4e:04:00:b1:b1:51:83:a6: 29:c9:e6:6c:55:e2:b8:aa:54:72:39:2d:3f:63:bd: f0:c3:91:44:11:90:61:de:7f:c4:f1:91:a8:d2:4f: fb:74:8b:8e:1b:3d:c6:13:50:79:16:3d:47:63:bc: a7:52:ea:16:e7:c4:3d:35:7e:f1:cc:2e:54:ad:bc: d1:65:52:cc:b1:35:39:7a:a5:7f:d9:06:b0:2d:9a: 60:a2:00:83:9c:1b:d0:c1:9c:a7:4f:7f:9d:5b:3b: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BD:EF:11:6E:F7:17:1D:60:C2:2C:C0:AC:F7:BD:04:3F:89:82:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a3:97:d0:3c:dc:81:43:a7:de:d6:7c:ec:2a:6b:c0:6d:bc: 72:8f:b2:73:c9:10:2d:b6:0c:19:7a:7b:29:be:b7:ff:27:37: 97:c3:88:f8:62:d3:b8:ac:3f:f0:f9:c5:6f:c5:c8:af:f0:70: a3:15:b4:15:b0:04:38:af:81:6e:fd:da:62:84:d1:ff:01:07: 0b:fc:d4:a0:c7:1a:7e:c9:d3:59:a0:f4:30:48:45:92:52:a5: b2:d6:d4:e2:35:90:62:19:b5:ad:f7:b1:d7:26:fc:49:bf:86: 37:bb:71:94:ee:b8:99:16:1d:c7:11:f3:8a:a2:2d:14:ec:a8: 09:33:cd:f1:8a:42:8f:04:6a:82:5d:c1:33:61:1d:30:99:44: 6a:88:2c:1c:a9:a3:ca:4d:f6:80:87:3b:b2:eb:82:57:33:0b: 9e:cb:53:d7:e7:4e:1b:c7:ab:59:7e:97:0e:8f:69:9e:a2:74: 0c:07:b5:79:9c:65:73:19:61:49:48:90:d0:08:21:b1:6f:c2: 4f:75:e4:9d:bc:20:e5:f7:02:ea:54:14:a0:14:91:93:15:24: 30:d4:00:12:a5:88:ce:72:c4:68:e3:62:28:6c:eb:a4:90:88: 86:89:75:00:20:49:b7:3f:70:fd:b9:64:eb:2f:1b:93:1f:fc: ee:e8:8d:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1R3Oi0+8iImJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MzRkZDQxMGItZjM4Yi00OWNkLWE3YjktZjg3OWY1OGVmNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtosgspwVI7KK4gQacoMV8EPIuM84r+CUtJM3 nAAYjnhKvPtD9H4rpdLjG8ufv0lK5dp4yTo1pt1Lp+qsOUxC0i/rBLvHp1I2EmJ7 2CHCQvnpzn68h2SmhjUvN5bwdBl+nuckoYmOqOoAt6jExtD3xkaHc9iugn8ofWcA x7h4k/vS3/4lYlvrl7ckk23vnyXyfUCKNTMUfmsScjPoTgQAsbFRg6YpyeZsVeK4 qlRyOS0/Y73ww5FEEZBh3n/E8ZGo0k/7dIuOGz3GE1B5Fj1HY7ynUuoW58Q9NX7x zC5UrbzRZVLMsTU5eqV/2QawLZpgogCDnBvQwZynT3+dWzvebQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAK97xFu9xcdYMIswKz3vQQ/iYKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDIzYjU0NzItZjZjMC0z MDk1LTgwYzMtN2IwMjJiMTVhMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKjl9A83IFDp97WfOwqa8BtvHKPsnPJEC22DBl6eym+t/8nN5fDiPhi 07isP/D5xW/FyK/wcKMVtBWwBDivgW792mKE0f8BBwv81KDHGn7J01mg9DBIRZJS pbLW1OI1kGIZta33sdcm/Em/hje7cZTuuJkWHccR84qiLRTsqAkzzfGKQo8EaoJd wTNhHTCZRGqILBypo8pN9oCHO7LrglczC57LU9fnThvHq1l+lw6PaZ6idAwHtXmc ZXMZYUlIkNAIIbFvwk915J28IOX3AupUFKAUkZMVJDDUABKliM5yxGjjYihs66SQ iIaJdQAgSbc/cP25ZOsvG5Mf/O7ojW4= -----END CERTIFICATE-----Generated at Sun Oct 19 20:58:31 2025 by rpki-client