$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa File: 895b35f2-676a-36ad-9bd6-7860fc097fbf.roa (raw, json) Hash identifier: x0T/To2bktwofNZZ4lj5IjZrft5B7Z4OaiH70C0hAeE= Subject key identifier: E4:FC:20:ED:61:23:F4:6F:FD:50:73:13:5E:89:A4:C4:B1:C2:5F:6F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B1AD196C28FB3C51EAD0F9600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 203 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:96:c2:8f:b3:c5:1e:ad:0f:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=47e484f3-34ba-46e2-b2f5-05d59f0d8b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:42:34:f9:32:14:64:0b:be:a7:cd:8e:3e: d1:25:09:25:9b:5a:08:89:78:62:17:63:41:8d:65: 45:c1:17:be:11:6f:81:29:ee:d1:7e:09:1d:c1:29: 84:04:de:41:6f:d0:de:58:b7:65:65:84:a4:8b:dd: db:9d:55:b3:d8:04:14:9e:9d:24:ae:f7:8a:cf:3d: 0d:42:ca:2b:6f:7c:0f:09:45:f8:48:bd:20:19:82: be:bc:ea:d2:2a:06:d9:3e:2b:ac:ff:de:6a:12:7b: 64:0c:a5:a9:9e:5a:1b:bb:70:86:fe:2c:bc:ee:cf: f6:02:91:b3:f5:e3:04:09:f2:72:23:bd:32:87:bf: 0b:79:b7:19:e2:5c:3b:a1:69:48:03:46:b9:3b:ef: 54:69:cf:1e:cb:eb:13:65:c4:87:64:14:aa:ae:06: f4:42:57:f7:21:3a:cc:93:f6:62:f2:20:a3:af:7c: 88:dd:be:6a:20:fe:68:6d:13:30:f4:51:a6:a3:c8: cf:66:50:48:23:f2:cc:1e:62:d3:ad:2c:7c:6a:11: da:26:15:64:16:e9:6a:20:7c:2a:33:75:f1:d8:f7: b7:0c:47:85:0a:90:2e:4c:62:80:28:7b:61:ae:3d: b3:50:8f:67:8d:97:f8:b8:73:f6:76:c9:4d:db:7b: b0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FC:20:ED:61:23:F4:6F:FD:50:73:13:5E:89:A4:C4:B1:C2:5F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:bc:af:a8:00:64:04:91:31:41:3a:56:d2:15:9f:ec:4e:38: 5f:74:6b:ec:46:51:9c:e2:45:7d:d9:0e:5c:fd:30:92:99:37: 38:f7:1a:53:e4:41:c6:32:e0:fc:1b:d5:93:51:53:79:53:c6: ae:3f:17:d7:fc:8d:0a:cd:50:5e:21:04:fc:c0:c0:6e:7b:ba: d1:a5:9c:40:e6:a8:b3:3d:e6:c5:01:ea:4b:8b:86:75:3b:4f: 97:f6:5b:ea:71:2d:7d:80:a0:18:cd:d2:ee:0c:75:ef:db:3e: d5:11:ea:c3:12:8a:04:07:f8:7c:64:93:01:f7:46:b7:cb:d2: 5d:62:ec:9b:32:22:71:51:63:03:7f:f9:52:ba:a0:52:24:13: a7:e7:60:90:db:ed:49:a3:9e:37:65:19:76:73:b8:10:b1:3d: 71:a4:c0:7b:5a:91:b7:eb:6c:d7:11:47:51:f6:b1:2b:e9:87: 11:2b:df:6e:57:3e:ef:2f:f5:fc:6d:62:12:c0:07:e2:7d:55: e5:d6:9b:96:0a:e6:cf:cf:12:95:f2:5e:9e:39:c8:f0:bc:d6: 79:b5:d7:00:ce:3e:73:fd:b8:11:23:c6:62:41:5d:f1:a6:1d: de:98:12:d9:af:ae:ec:8a:c4:eb:9e:f9:81:03:d3:5a:f2:f3: 41:13:f2:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZbCj7PFHq0PlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NDdlNDg0ZjMtMzRiYS00NmUyLWIyZjUtMDVkNTlmMGQ4YjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4dCNPkyFGQLvqfNjj7RJQklm1oIiXhiF2NB jWVFwRe+EW+BKe7RfgkdwSmEBN5Bb9DeWLdlZYSki93bnVWz2AQUnp0krveKzz0N Qsorb3wPCUX4SL0gGYK+vOrSKgbZPius/95qEntkDKWpnlobu3CG/iy87s/2ApGz 9eMECfJyI70yh78LebcZ4lw7oWlIA0a5O+9Uac8ey+sTZcSHZBSqrgb0Qlf3ITrM k/Zi8iCjr3yI3b5qIP5obRMw9FGmo8jPZlBII/LMHmLTrSx8ahHaJhVkFulqIHwq M3Xx2Pe3DEeFCpAuTGKAKHthrj2zUI9njZf4uHP2dslN23uw6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOT8IO1hI/Rv/VBzE16JpMSxwl9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODk1YjM1ZjItNjc2YS0z NmFkLTliZDYtNzg2MGZjMDk3ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+8r6gAZASRMUE6VtIVn+xOOF90a+xGUZziRX3ZDlz9MJKZNzj3GlPk QcYy4Pwb1ZNRU3lTxq4/F9f8jQrNUF4hBPzAwG57utGlnEDmqLM95sUB6kuLhnU7 T5f2W+pxLX2AoBjN0u4Mde/bPtUR6sMSigQH+HxkkwH3RrfL0l1i7JsyInFRYwN/ +VK6oFIkE6fnYJDb7UmjnjdlGXZzuBCxPXGkwHtakbfrbNcRR1H2sSvphxEr325X Pu8v9fxtYhLAB+J9VeXWm5YK5s/PEpXyXp45yPC81nm11wDOPnP9uBEjxmJBXfGm Hd6YEtmvruyKxOue+YED01ry80ET8vg= -----END CERTIFICATE-----Generated at Sun Oct 19 20:58:59 2025 by rpki-client