$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa File: 5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa (raw, json) Hash identifier: opG4s6yib4Y7yTJrF2AzZQORpBN8zJUDOm88RJYVhgE= Subject key identifier: 32:C2:5F:97:0E:A4:67:06:CB:92:B3:0A:3E:88:BD:06:5D:19:C9:18 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCB06DDA71D3A68C88DB80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 202 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b0:6d:da:71:d3:a6:8c:88:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=c0a7453e-54b2-4e5b-81ec-65f6d7683a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:79:2a:2d:ba:cd:a9:3a:bf:08:13:f3:fa:73: 2e:5d:9e:b6:c8:04:1f:07:6b:b7:f4:3d:bd:d9:b7: 11:52:5d:69:8e:6e:96:b9:3b:02:17:5d:73:8d:6d: 77:e2:a5:a6:0b:6c:32:24:4c:0d:7a:87:ba:3a:74: 29:90:03:e0:8e:fd:99:3a:69:4c:23:7a:31:07:91: 2b:71:80:73:1e:23:0e:82:08:14:5a:7b:2e:bf:98: 27:55:de:07:6d:ab:11:97:24:ef:0d:8e:2b:90:40: bd:1b:f8:28:a1:3a:51:f0:0c:71:51:f2:30:bf:04: df:8d:81:bb:46:f9:29:2b:58:6c:bb:fd:b9:6e:0b: 26:0b:c1:26:af:55:77:82:dc:a6:45:68:38:2c:28: e8:80:b7:3c:b6:7a:3f:34:4d:5b:09:15:b7:0e:1d: 08:42:fa:fc:87:6c:f3:e0:6f:70:5a:ee:0e:86:62: 23:89:1d:0c:92:81:22:88:eb:af:e0:a0:a1:4f:d5: 26:bd:e6:58:f6:27:69:02:e4:08:5d:f1:fb:4f:be: 51:34:e6:ea:61:3c:5d:e3:b1:f5:e5:94:23:00:94: af:11:e6:60:85:e0:4c:d9:73:b4:e9:75:1c:c0:f9: c5:4b:dc:ea:32:c7:7c:0a:24:a3:56:d4:38:88:cd: 88:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C2:5F:97:0E:A4:67:06:CB:92:B3:0A:3E:88:BD:06:5D:19:C9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a0:07:40:5f:56:a9:ea:aa:31:08:ae:e5:cd:50:d0:c6:d2: 6e:9c:93:17:20:4a:af:8c:a8:a4:12:1f:1d:e1:d9:60:2f:a3: 4b:05:a0:07:13:f3:ab:d4:19:ce:20:28:9c:17:d7:58:03:58: a7:b7:12:35:61:31:74:21:73:c3:4b:9e:c0:0a:6a:ea:c2:a0: d1:22:22:48:4b:7e:f3:45:76:87:1f:6b:6f:d1:ed:a6:f6:24: 9f:47:be:b3:39:09:a0:bb:da:e5:f8:13:b5:f7:26:33:30:9b: 67:2a:03:86:47:87:06:e0:cd:a8:96:16:7c:33:72:b9:8c:3e: c4:c2:aa:ee:b1:08:42:87:69:a8:a9:6c:ca:47:5e:09:9d:c5: a3:bb:ee:0a:c7:2e:82:cb:de:87:86:a9:be:4f:e2:b8:00:2c: 17:14:48:f7:dc:14:eb:32:e3:ad:a5:9d:3b:ab:81:05:19:e6: b3:97:61:eb:9f:b0:74:af:6f:01:cc:49:b7:88:f5:ea:61:c0: 7c:2d:55:22:3c:c8:f5:1b:c7:54:24:f5:56:be:5c:10:b4:2d: a1:a7:64:19:a4:09:8b:ac:1b:c3:92:0b:3e:25:e5:56:26:9a: 93:5f:df:1f:3b:c9:c1:a9:ec:5b:42:fe:a8:9e:a3:80:b3:e2: 3f:32:9b:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLBt2nHTpoyI24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YzBhNzQ1M2UtNTRiMi00ZTViLTgxZWMtNjVmNmQ3NjgzYTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nkqLbrNqTq/CBPz+nMuXZ62yAQfB2u39D29 2bcRUl1pjm6WuTsCF11zjW134qWmC2wyJEwNeoe6OnQpkAPgjv2ZOmlMI3oxB5Er cYBzHiMOgggUWnsuv5gnVd4HbasRlyTvDY4rkEC9G/gooTpR8AxxUfIwvwTfjYG7 RvkpK1hsu/25bgsmC8Emr1V3gtymRWg4LCjogLc8tno/NE1bCRW3Dh0IQvr8h2zz 4G9wWu4OhmIjiR0MkoEiiOuv4KChT9UmveZY9idpAuQIXfH7T75RNObqYTxd47H1 5ZQjAJSvEeZgheBM2XO06XUcwPnFS9zqMsd8CiSjVtQ4iM2IlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLCX5cOpGcGy5KzCj6IvQZdGckYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWNlYTQwZjMtYTA3NS0z YjQ1LWJkM2ItYTcyMjBjZjA5YzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6gB0BfVqnqqjEIruXNUNDG0m6ckxcgSq+MqKQSHx3h2WAvo0sFoAcT 86vUGc4gKJwX11gDWKe3EjVhMXQhc8NLnsAKaurCoNEiIkhLfvNFdocfa2/R7ab2 JJ9HvrM5CaC72uX4E7X3JjMwm2cqA4ZHhwbgzaiWFnwzcrmMPsTCqu6xCEKHaaip bMpHXgmdxaO77grHLoLL3oeGqb5P4rgALBcUSPfcFOsy462lnTurgQUZ5rOXYeuf sHSvbwHMSbeI9ephwHwtVSI8yPUbx1Qk9Va+XBC0LaGnZBmkCYusG8OSCz4l5VYm mpNf3x87ycGp7FtC/qieo4Cz4j8ym2w= -----END CERTIFICATE-----Generated at Mon Oct 20 04:32:41 2025 by rpki-client