$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/47be25e4-1c7a-336c-88b9-469b9f959666.roa File: 47be25e4-1c7a-336c-88b9-469b9f959666.roa (raw, json) Hash identifier: LEnNYrNJUl8hEJjvybTnW1kLg6pcVjrb9kOq2rmGRXY= Subject key identifier: 9A:2A:18:23:61:70:3A:71:6A:EF:99:37:D8:76:ED:9A:3A:44:BA:60 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B047C0CAE59DF87ADACE54700 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/47be25e4-1c7a-336c-88b9-469b9f959666.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 203 IP address blocks: 20.134.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:0c:ae:59:df:87:ad:ac:e5:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=b77f6f81-76b4-4c61-8086-1bfe66d2671f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7b:4b:32:2d:1b:7f:e0:25:a9:71:55:97:14: 64:b6:22:f5:c2:e4:75:a6:e6:3d:f5:20:60:14:c9: 99:55:56:a6:30:41:38:79:0b:0e:83:83:d0:6f:ac: 34:46:2a:8a:e7:0b:d6:19:75:79:8c:f6:b3:ae:8a: 60:1b:51:44:34:26:a0:15:23:7c:9c:d2:a3:94:cf: 51:6f:79:d9:1e:af:c2:7f:a4:8c:5b:da:3b:cc:05: 8b:76:10:3f:bf:4d:c0:a2:1a:4c:0f:f3:62:bb:53: 55:1a:e6:57:dc:ec:0c:66:05:3c:64:a5:45:40:87: 5a:61:f8:01:16:95:2d:06:5b:1f:df:9f:d9:22:ca: 68:0a:5e:ee:f7:82:ef:20:30:03:36:a6:e7:38:a4: 2d:2d:75:6e:e7:90:96:52:49:9b:35:98:76:e7:32: 7c:87:ff:bc:2e:7c:13:0c:48:c0:a1:ca:0d:d2:f9: 46:f0:20:e9:5b:42:6e:25:02:55:ea:9a:9e:4a:a1: a6:3b:a6:e6:be:1c:cb:4d:e7:c2:07:fe:a5:f7:69: 61:19:ee:6e:3d:8d:f4:74:5f:86:5e:e2:1c:81:85: 32:3e:a5:cd:c0:f9:74:b6:9b:18:6f:eb:51:3a:8a: 5d:af:43:64:b0:c8:cc:dc:38:7b:bb:42:7f:a2:e9: c4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2A:18:23:61:70:3A:71:6A:EF:99:37:D8:76:ED:9A:3A:44:BA:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/47be25e4-1c7a-336c-88b9-469b9f959666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e9:5b:f2:60:57:8b:cf:71:03:70:3d:f5:2e:10:88:e5:12: df:0a:fb:b9:53:30:3e:b1:92:b8:c1:77:0a:7c:f9:3e:37:6c: 45:43:30:82:70:66:5e:ec:2d:2f:11:43:a7:70:5a:51:00:df: 98:e0:dd:67:c1:8a:4f:7e:5a:79:63:2f:b7:85:a1:d3:bb:ec: 9e:1d:16:c3:85:c8:1f:74:4f:17:c2:20:20:57:ea:db:b4:74: e1:50:f7:88:22:9a:e5:7b:11:d6:c1:37:14:7e:b0:83:e1:09: 10:28:01:f2:a4:d0:da:46:71:af:d0:81:ac:0f:02:a9:01:46: b8:77:4f:eb:dd:a2:a4:d4:a6:8a:31:46:70:5b:22:84:c1:b3: 67:21:eb:38:31:ea:af:0a:fd:a4:1e:de:2a:a3:a5:ff:be:e3: 0b:d6:94:70:1a:16:4e:a3:a4:02:e1:f9:51:04:59:15:9e:b5: f7:a7:f5:43:3c:69:fd:5f:05:a6:cd:a4:45:b3:86:69:b6:df: d7:7b:34:60:18:7f:5d:14:9d:91:0d:ce:fc:43:1e:24:32:d8: c9:f9:a4:ac:9d:75:69:aa:ec:e9:23:12:7e:e5:c3:5a:98:80: 91:4f:c9:24:15:19:04:72:00:47:1a:07:bb:10:2a:c5:a7:3e: 84:11:79:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAyuWd+HrazlRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk Yjc3ZjZmODEtNzZiNC00YzYxLTgwODYtMWJmZTY2ZDI2NzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXtLMi0bf+AlqXFVlxRktiL1wuR1puY99SBg FMmZVVamMEE4eQsOg4PQb6w0RiqK5wvWGXV5jPazropgG1FENCagFSN8nNKjlM9R b3nZHq/Cf6SMW9o7zAWLdhA/v03AohpMD/Niu1NVGuZX3OwMZgU8ZKVFQIdaYfgB FpUtBlsf35/ZIspoCl7u94LvIDADNqbnOKQtLXVu55CWUkmbNZh25zJ8h/+8LnwT DEjAocoN0vlG8CDpW0JuJQJV6pqeSqGmO6bmvhzLTefCB/6l92lhGe5uPY30dF+G XuIcgYUyPqXNwPl0tpsYb+tROopdr0NksMjM3Dh7u0J/ounEGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoqGCNhcDpxau+ZN9h27Zo6RLpgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDdiZTI1ZTQtMWM3YS0z MzZjLTg4YjktNDY5YjlmOTU5NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbpW/JgV4vPcQNwPfUuEIjlEt8K+7lTMD6xkrjBdwp8+T43bEVDMIJw Zl7sLS8RQ6dwWlEA35jg3WfBik9+WnljL7eFodO77J4dFsOFyB90TxfCICBX6tu0 dOFQ94gimuV7EdbBNxR+sIPhCRAoAfKk0NpGca/QgawPAqkBRrh3T+vdoqTUpoox RnBbIoTBs2ch6zgx6q8K/aQe3iqjpf++4wvWlHAaFk6jpALh+VEEWRWetfen9UM8 af1fBabNpEWzhmm239d7NGAYf10UnZENzvxDHiQy2Mn5pKyddWmq7OkjEn7lw1qY gJFPySQVGQRyAEcaB7sQKsWnPoQRec8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:01 2025 by rpki-client