$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/139461b3-4ec1-33e8-a7d7-ec786d8e1d4f.roa File: 139461b3-4ec1-33e8-a7d7-ec786d8e1d4f.roa (raw, json) Hash identifier: SlR4tgo1DMMG8/ruE4P8AE3eGosS4RMyBdu2/ZEAaFI= Subject key identifier: BE:B4:08:06:98:7C:55:1A:B6:73:7A:AB:94:8E:FB:A9:A1:F9:60:6C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCC59FBD31BBD3564112C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/139461b3-4ec1-33e8-a7d7-ec786d8e1d4f.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3356 IP address blocks: 20.149.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c5:9f:bd:31:bb:d3:56:41:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=0660afe8-e0b9-4955-bed7-b34e450d6a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:28:21:83:31:2f:74:5e:da:8d:1e:41:b7:99: e2:b5:a5:5e:8c:e1:83:82:03:ef:fb:54:58:fb:0b: a5:a9:1a:17:8d:77:3f:09:c1:bc:3f:b3:6e:78:c5: 81:b1:e3:e2:21:b7:2c:71:96:e0:77:9d:fe:e8:c1: e2:3b:33:62:2b:f4:a9:e8:48:67:24:78:c0:2e:d3: 25:ab:50:f2:1f:72:72:cf:bc:d6:f9:a3:9d:31:6d: 3f:09:b2:f7:ee:f4:e6:8f:e6:89:c9:14:75:be:09: 16:72:c4:2a:34:08:00:22:a9:0e:06:3b:82:83:92: 2c:9a:24:67:f9:31:0b:57:86:d5:1c:aa:6d:6b:1c: b6:00:69:51:99:09:42:6e:09:3a:d4:fa:02:ad:e8: 93:54:a2:f0:14:1b:3f:f6:43:09:00:95:58:56:ba: cc:01:2c:f2:e2:eb:14:87:4e:23:d0:41:f6:66:3e: 26:8a:27:10:b4:74:f1:9b:91:14:84:f2:0b:86:60: b4:f0:40:ba:fb:65:db:dd:d8:d8:32:f9:b6:61:ab: 4a:bb:e0:4a:8d:b7:94:ac:a6:fe:fe:30:8a:3e:af: 17:c8:97:dc:d1:a9:f9:66:00:86:47:e7:08:a6:fc: 28:68:c5:7c:76:f7:9f:69:e6:0f:3b:84:f8:87:f4: 73:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B4:08:06:98:7C:55:1A:B6:73:7A:AB:94:8E:FB:A9:A1:F9:60:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/139461b3-4ec1-33e8-a7d7-ec786d8e1d4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a7:22:a2:f8:47:e7:f1:dd:a0:c6:9a:c9:06:b0:e2:74:83: 1c:17:2d:0e:49:b6:d7:35:43:d1:e0:af:55:07:7a:c9:b6:a2: 2b:ef:ca:6e:34:ee:ad:6f:53:f5:fa:2e:da:77:71:c4:23:51: f2:2c:45:b2:b9:13:15:08:9e:6d:16:bc:1f:1f:ca:72:2f:68: 2e:05:ba:43:f9:9c:85:93:12:fd:ea:52:48:7e:d2:5e:30:49: 43:85:37:1a:bd:7a:ae:b0:c5:29:83:4f:c0:7f:66:ce:cc:2d: ad:36:0e:24:0c:72:e8:46:9e:cd:67:0a:e4:f9:24:34:69:bf: 1c:b7:02:52:79:3d:29:ad:e2:0b:9b:77:9d:42:d2:a1:6f:40: 5a:40:7c:38:1c:7f:49:08:df:fa:f0:03:f0:64:a4:1d:e2:19: b5:f6:85:92:b4:9c:6d:5d:6d:1a:f5:70:5b:8e:f4:07:73:c7: 38:fb:b4:81:16:c3:2c:6f:cc:42:b4:48:a5:b6:8f:5b:73:47: cf:db:e5:09:ff:bc:2b:77:18:46:4b:0b:53:d3:43:a3:b0:9a: 31:5e:51:43:51:89:40:ac:37:1a:2b:17:78:40:36:18:d5:64: 4f:23:96:ee:8f:1f:a3:1a:2d:c8:13:8d:d4:77:43:68:79:fb: 97:d7:83:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMWfvTG701ZBEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MDY2MGFmZTgtZTBiOS00OTU1LWJlZDctYjM0ZTQ1MGQ2YTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCghgzEvdF7ajR5Bt5nitaVejOGDggPv+1RY +wulqRoXjXc/CcG8P7NueMWBsePiIbcscZbgd53+6MHiOzNiK/Sp6EhnJHjALtMl q1DyH3Jyz7zW+aOdMW0/CbL37vTmj+aJyRR1vgkWcsQqNAgAIqkOBjuCg5IsmiRn +TELV4bVHKptaxy2AGlRmQlCbgk61PoCreiTVKLwFBs/9kMJAJVYVrrMASzy4usU h04j0EH2Zj4miicQtHTxm5EUhPILhmC08EC6+2Xb3djYMvm2YatKu+BKjbeUrKb+ /jCKPq8XyJfc0an5ZgCGR+cIpvwoaMV8dvefaeYPO4T4h/RzmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL60CAaYfFUatnN6q5SO+6mh+WBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTM5NDYxYjMtNGVjMS0z M2U4LWE3ZDctZWM3ODZkOGUxZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIenIqL4R+fx3aDGmskGsOJ0gxwXLQ5Jttc1Q9Hgr1UHesm2oivvym40 7q1vU/X6Ltp3ccQjUfIsRbK5ExUInm0WvB8fynIvaC4FukP5nIWTEv3qUkh+0l4w SUOFNxq9eq6wxSmDT8B/Zs7MLa02DiQMcuhGns1nCuT5JDRpvxy3AlJ5PSmt4gub d51C0qFvQFpAfDgcf0kI3/rwA/BkpB3iGbX2hZK0nG1dbRr1cFuO9Adzxzj7tIEW wyxvzEK0SKW2j1tzR8/b5Qn/vCt3GEZLC1PTQ6OwmjFeUUNRiUCsNxorF3hANhjV ZE8jlu6PH6MaLcgTjdR3Q2h5+5fXgwI= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:44 2025 by rpki-client