$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa File: 38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa (raw, json) Hash identifier: hd835xRO8wWGLmlNoEa3ewdOCdgUj2EYnlyIGDc4EjA= Subject key identifier: 9C:F5:28:EE:95:B0:26:4A:45:ED:63:28:19:53:1D:D3:29:11:F8:6C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B52A754A88A16B701421516C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 3356 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:54:a8:8a:16:b7:01:42:15:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=19e1153c-51ac-446d-964a-235d18adef30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cf:4a:ad:6e:cc:8e:60:b6:b1:49:f5:39:88: a0:0d:31:89:00:c8:03:fd:20:41:7b:61:a1:5d:5e: 08:46:fe:24:61:db:3e:2d:c8:31:1c:b9:9f:67:ab: c6:a6:16:4c:05:a2:1f:53:d9:e2:14:49:a0:97:d0: d8:ab:d5:c4:be:1e:42:71:ad:7e:8b:4e:17:24:6e: a0:35:4a:af:64:49:83:5e:87:6c:6b:dc:50:6e:9f: 8b:a3:69:ee:bb:01:2e:d2:05:76:d1:3e:37:2e:8e: 68:5e:0d:86:e9:7f:9e:ee:01:65:d5:6f:eb:51:97: 1a:ac:da:68:a2:59:62:4d:85:df:76:17:b5:b9:ab: 1f:28:0c:86:79:ab:df:66:d4:55:19:ce:95:9d:87: 13:21:fd:1c:f9:0c:c0:96:d0:33:22:8a:90:dc:e1: b2:88:48:69:8a:19:13:f3:84:94:7b:72:1b:d3:07: fd:d3:48:24:65:fb:63:65:b5:e5:59:55:f9:a4:95: 55:a2:8b:ae:74:7f:4f:2c:55:59:21:58:59:92:42: fb:1c:39:16:66:67:c1:40:6e:f6:5f:00:6e:05:ca: ff:64:7c:88:9f:a1:ad:b3:c5:f9:fc:05:82:c2:89: 3f:45:5d:8c:7d:81:55:64:57:02:52:c2:e9:78:3a: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F5:28:EE:95:B0:26:4A:45:ED:63:28:19:53:1D:D3:29:11:F8:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a1:e9:e0:9d:86:13:23:c2:aa:25:29:05:0a:9f:4f:1f:78: 2d:0e:f2:b2:8b:cd:df:f2:e4:ee:84:2f:c4:fe:9a:68:91:ac: 8a:96:bc:56:b5:75:39:df:dc:52:d1:09:71:33:1c:46:a7:1b: e4:1b:75:62:4f:1c:1e:bd:4b:91:3c:29:1b:41:cf:0a:56:4a: 48:62:93:63:55:7f:5f:f6:ab:76:2a:f5:fa:3b:40:83:93:e2: fc:80:f4:fd:74:76:cc:f0:2f:6a:29:76:7a:4c:a5:69:ad:40: 75:4c:45:c1:50:18:13:b7:67:55:2d:81:b5:e2:27:16:eb:fe: cf:91:ce:fa:c2:dc:e2:2c:9a:fa:75:c3:26:42:85:47:ab:79: b9:4f:59:75:a2:9f:55:be:6c:9f:55:ce:97:b3:df:60:ff:28: aa:22:a6:0e:13:91:8f:9d:b9:32:66:c4:0c:8a:35:c2:d1:6d: 89:c7:0f:ad:08:3b:3f:ae:a9:69:da:08:0b:e4:f0:6c:21:c7: af:d3:00:23:9e:52:64:6f:b9:38:85:06:f4:1a:29:b9:70:34: 54:01:d4:2d:42:cd:99:ba:68:3d:a0:14:9e:b2:43:76:75:6b: 85:31:52:3b:4e:4f:42:c8:08:1b:ae:c6:0a:c9:4a:a4:41:0e: 6c:04:fd:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1Soiha3AUIVFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MTllMTE1M2MtNTFhYy00NDZkLTk2NGEtMjM1ZDE4YWRlZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M9KrW7MjmC2sUn1OYigDTGJAMgD/SBBe2Gh XV4IRv4kYds+LcgxHLmfZ6vGphZMBaIfU9niFEmgl9DYq9XEvh5Cca1+i04XJG6g NUqvZEmDXodsa9xQbp+Lo2nuuwEu0gV20T43Lo5oXg2G6X+e7gFl1W/rUZcarNpo olliTYXfdhe1uasfKAyGeavfZtRVGc6VnYcTIf0c+QzAltAzIoqQ3OGyiEhpihkT 84SUe3Ib0wf900gkZftjZbXlWVX5pJVVoouudH9PLFVZIVhZkkL7HDkWZmfBQG72 XwBuBcr/ZHyIn6Gts8X5/AWCwok/RV2MfYFVZFcCUsLpeDoj7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz1KO6VsCZKRe1jKBlTHdMpEfhsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhhNDk4ZmYtZjZmNi0z ZDU0LTliZmEtOGY3ZmYyMjZmYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuh6eCdhhMjwqolKQUKn08feC0O8rKLzd/y5O6EL8T+mmiRrIqWvFa1 dTnf3FLRCXEzHEanG+QbdWJPHB69S5E8KRtBzwpWSkhik2NVf1/2q3Yq9fo7QIOT 4vyA9P10dszwL2opdnpMpWmtQHVMRcFQGBO3Z1UtgbXiJxbr/s+RzvrC3OIsmvp1 wyZChUereblPWXWin1W+bJ9Vzpez32D/KKoipg4TkY+duTJmxAyKNcLRbYnHD60I Oz+uqWnaCAvk8Gwhx6/TACOeUmRvuTiFBvQaKblwNFQB1C1CzZm6aD2gFJ6yQ3Z1 a4UxUjtOT0LICBuuxgrJSqRBDmwE/QU= -----END CERTIFICATE-----Generated at Mon Oct 20 05:25:33 2025 by rpki-client