$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa File: 3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa (raw, json) Hash identifier: bbreRHFHuqA0kYN4FIvfvPmBykz/q3V0FUgi+JQ6/cM= Subject key identifier: 59:8C:90:93:5F:7C:4E:24:68:28:A4:62:6D:B8:3B:1E:2B:A6:9B:8D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCB0C5ACA33FC71599D300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3356 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b0:c5:ac:a3:3f:c7:15:99:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=a7b863a3-c615-4eb5-984c-8d9c7e41214b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:96:29:8e:08:b9:fd:83:f9:0b:8f:26:17:aa: 12:ad:27:4f:1c:31:36:b8:aa:e2:ed:bc:90:da:07: 9a:e4:43:48:15:cc:53:ff:46:1c:93:73:fa:2c:85: 78:7b:6c:21:90:20:84:81:e8:64:bc:62:33:51:e2: 0f:4c:ca:8c:89:ac:63:59:fe:36:26:89:37:7e:42: ce:8e:59:22:6e:9d:ce:0a:bc:76:30:bf:84:d7:50: d4:74:4c:cb:1b:bc:c4:72:eb:d2:69:11:bd:b0:62: 6a:3c:46:07:b3:aa:4a:55:6b:cc:84:e9:3e:8e:2f: e6:ea:df:ed:c4:b7:92:ba:28:cc:06:e8:a1:59:cd: 7d:fd:0b:2b:d0:3f:18:3c:ba:6b:cc:5a:c1:1e:37: 09:6c:e8:e5:13:7a:3f:79:fc:1f:3a:ea:46:9d:1d: 2d:cb:3e:12:35:c4:e7:dd:53:c1:5f:ce:cf:64:0d: e4:30:61:f2:b7:d1:3c:f2:cb:40:63:99:90:b7:41: 89:3b:44:7c:36:b1:be:a5:5c:5d:4f:44:32:6a:c1: 83:e7:ae:85:1a:52:57:0c:82:bd:10:ef:6c:6b:67: 93:84:54:8f:f6:94:d8:e7:68:dc:5a:2d:b4:7e:9a: 7d:cc:a3:4b:ff:35:a4:d9:30:3b:2f:14:dc:c5:85: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8C:90:93:5F:7C:4E:24:68:28:A4:62:6D:B8:3B:1E:2B:A6:9B:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:0e:f9:a1:21:56:5c:d0:50:af:ba:8a:e1:9a:b9:59:e3:28: 4f:d0:e2:10:30:98:35:10:e0:b2:d1:8f:99:99:74:0b:e3:65: 6e:91:30:1d:7b:c4:58:16:49:52:25:1d:fa:a9:d1:54:93:a0: 27:9e:9f:cf:49:26:88:7b:94:2b:fd:7e:96:dd:f7:2b:53:9d: c9:b9:0d:cd:28:2f:88:0e:a2:33:fa:cf:8d:3b:dc:a6:54:e7: 7a:13:96:5e:98:0f:ff:65:59:f2:4b:9c:da:6c:84:d0:77:fb: 70:dc:0f:f4:bd:73:8b:6e:59:67:c5:50:bc:cb:1a:17:01:7e: a8:65:62:1f:9e:c3:17:92:48:42:60:83:bc:dc:92:80:81:ad: d0:18:fc:e0:c8:83:fc:b8:d7:f1:37:ed:47:b1:b1:00:1d:8b: 02:86:d5:59:bb:78:9b:f8:79:5f:c9:64:24:fd:a3:a1:f2:bb: dc:2d:95:ba:bb:01:60:9c:40:52:87:35:a2:83:e2:1d:85:15: 28:ec:5f:74:61:97:23:55:1d:a8:94:16:ca:0f:08:c2:56:78: f6:ef:72:b7:f8:82:e9:67:4b:37:4c:c6:ce:32:94:e7:31:56: 02:01:c6:3d:27:52:41:f4:3f:43:d2:30:82:d1:bf:a8:40:7e: a2:75:84:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLDFrKM/xxWZ0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YTdiODYzYTMtYzYxNS00ZWI1LTk4NGMtOGQ5YzdlNDEyMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJYpjgi5/YP5C48mF6oSrSdPHDE2uKri7byQ 2gea5ENIFcxT/0Yck3P6LIV4e2whkCCEgehkvGIzUeIPTMqMiaxjWf42Jok3fkLO jlkibp3OCrx2ML+E11DUdEzLG7zEcuvSaRG9sGJqPEYHs6pKVWvMhOk+ji/m6t/t xLeSuijMBuihWc19/Qsr0D8YPLprzFrBHjcJbOjlE3o/efwfOupGnR0tyz4SNcTn 3VPBX87PZA3kMGHyt9E88stAY5mQt0GJO0R8NrG+pVxdT0QyasGD566FGlJXDIK9 EO9sa2eThFSP9pTY52jcWi20fpp9zKNL/zWk2TA7LxTcxYWsvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmMkJNffE4kaCikYm24Ox4rppuNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2JmMDg5NjktMWEyYS0z MDk5LThmNjgtYWQxZjRjMGY3ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4O+aEhVlzQUK+6iuGauVnjKE/Q4hAwmDUQ4LLRj5mZdAvjZW6RMB17 xFgWSVIlHfqp0VSToCeen89JJoh7lCv9fpbd9ytTncm5Dc0oL4gOojP6z4073KZU 53oTll6YD/9lWfJLnNpshNB3+3DcD/S9c4tuWWfFULzLGhcBfqhlYh+ewxeSSEJg g7zckoCBrdAY/ODIg/y41/E37UexsQAdiwKG1Vm7eJv4eV/JZCT9o6Hyu9wtlbq7 AWCcQFKHNaKD4h2FFSjsX3RhlyNVHaiUFsoPCMJWePbvcrf4gulnSzdMxs4ylOcx VgIBxj0nUkH0P0PSMILRv6hAfqJ1hFE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:08:26 2025 by rpki-client