$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa File: 33db6407-ff15-3683-8991-2de945a25738.roa (raw, json) Hash identifier: Lrm4XiX1Uot9wuxOQnGBH1vjxtigELz8L8tCV1g7Rt0= Subject key identifier: 5E:41:46:DF:32:0C:87:F2:B7:B3:82:58:0F:BF:6A:B3:55:9D:48:34 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCACB89E223B21A1490600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 203 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:ac:b8:9e:22:3b:21:a1:49:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=42a37f50-e91a-46a5-9836-6244005f0646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e4:68:21:ce:89:37:32:a6:cd:77:28:8d:31: aa:e0:66:5e:3e:64:55:7a:10:df:cb:04:d8:ae:d0: a0:5d:5e:a4:4a:5f:d7:94:26:c7:da:f7:71:57:ec: 86:01:d9:39:d4:eb:8a:08:0d:60:9a:ea:0a:95:42: 24:24:32:b7:71:32:21:f4:a0:e6:01:b6:7c:4e:30: fc:5b:10:ad:c8:22:d2:24:c5:e4:5c:e9:9e:c9:ca: d3:30:0b:08:1e:9b:cc:ff:0b:b4:29:ec:df:c1:62: 4c:10:2e:b3:96:49:6b:b1:2a:1f:8f:e4:40:65:e4: 0e:da:61:27:e7:13:49:96:12:9b:5e:27:32:68:9b: 66:50:7c:f5:aa:4d:79:95:ba:a6:c1:be:f8:16:54: 18:35:8e:6e:a2:89:fe:a9:ec:28:da:b6:ec:37:ec: fa:92:5e:7d:bc:00:d1:62:10:af:fa:0c:fe:50:86: 7f:af:05:24:06:fd:7a:97:bf:39:31:02:02:bb:c7: 52:99:50:95:43:95:c3:e0:48:04:20:bb:93:96:52: 2b:20:c2:da:e3:42:a3:39:29:d6:61:c2:e6:69:dc: c3:71:68:27:4b:ec:b6:00:c4:4d:3e:90:b4:e7:e8: d8:4c:84:74:14:7e:d5:0b:12:11:d1:34:0d:40:b7: f1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:41:46:DF:32:0C:87:F2:B7:B3:82:58:0F:BF:6A:B3:55:9D:48:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:7f:64:ba:16:59:3e:5c:d4:4a:87:82:ef:cb:66:02:b8:a1: 2f:55:58:4c:c9:7c:e6:f3:bc:a0:c1:d2:86:9d:23:d9:cc:83: f6:80:5e:aa:fd:e3:0a:a0:e0:9f:43:34:0d:f0:2e:f3:f3:e7: 85:9d:01:63:0e:f0:1b:71:f8:ab:1d:25:05:6e:b2:98:38:f3: 1c:10:cc:7c:eb:97:d4:e3:34:c9:de:b0:73:d3:3f:8a:9f:5d: 90:66:ad:2b:79:12:8b:4e:3c:64:c6:7e:5d:7b:47:a5:7a:bc: 6c:f3:2c:ee:8c:08:5e:b5:0a:31:c3:af:e2:ea:a3:4f:8c:c0: 7c:02:31:42:4b:8c:2b:8d:a3:ae:4c:48:46:f1:65:9f:9d:70: 8c:5e:dc:76:ff:7d:71:56:09:06:a5:32:e2:96:8e:59:66:d9: b1:7b:ce:9a:d1:ed:1f:c2:93:ad:86:46:7e:f3:03:27:89:dc: d4:d3:12:87:9d:a0:38:74:5c:69:3e:1b:e5:89:cc:25:91:e4: 77:03:ee:b2:0a:40:d6:c5:67:6f:e6:51:52:3e:cd:19:5e:f8: ea:41:86:d7:9a:32:22:b8:21:ec:94:98:d3:aa:0e:91:5a:ad: 61:f9:a2:8b:e6:83:5a:78:c0:14:d7:aa:d0:58:e8:24:41:15: 60:d6:96:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vKy4niI7IaFJBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NDJhMzdmNTAtZTkxYS00NmE1LTk4MzYtNjI0NDAwNWYwNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuRoIc6JNzKmzXcojTGq4GZePmRVehDfywTY rtCgXV6kSl/XlCbH2vdxV+yGAdk51OuKCA1gmuoKlUIkJDK3cTIh9KDmAbZ8TjD8 WxCtyCLSJMXkXOmeycrTMAsIHpvM/wu0KezfwWJMEC6zlklrsSofj+RAZeQO2mEn 5xNJlhKbXicyaJtmUHz1qk15lbqmwb74FlQYNY5uoon+qewo2rbsN+z6kl59vADR YhCv+gz+UIZ/rwUkBv16l785MQICu8dSmVCVQ5XD4EgEILuTllIrIMLa40KjOSnW YcLmadzDcWgnS+y2AMRNPpC05+jYTIR0FH7VCxIR0TQNQLfxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5BRt8yDIfyt7OCWA+/arNVnUg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzNkYjY0MDctZmYxNS0z NjgzLTg5OTEtMmRlOTQ1YTI1NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF/ZLoWWT5c1EqHgu/LZgK4oS9VWEzJfObzvKDB0oadI9nMg/aAXqr9 4wqg4J9DNA3wLvPz54WdAWMO8Btx+KsdJQVuspg48xwQzHzrl9TjNMnesHPTP4qf XZBmrSt5EotOPGTGfl17R6V6vGzzLO6MCF61CjHDr+Lqo0+MwHwCMUJLjCuNo65M SEbxZZ+dcIxe3Hb/fXFWCQalMuKWjllm2bF7zprR7R/Ck62GRn7zAyeJ3NTTEoed oDh0XGk+G+WJzCWR5HcD7rIKQNbFZ2/mUVI+zRle+OpBhteaMiK4IeyUmNOqDpFa rWH5oovmg1p4wBTXqtBY6CRBFWDWln4= -----END CERTIFICATE-----Generated at Sun Oct 19 21:01:01 2025 by rpki-client