$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa File: 9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa (raw, json) Hash identifier: P2TQAnzPmeQq+MZhzip0Dnr4hnxQvYo8EWipTh1/v/s= Subject key identifier: 1B:A8:74:BC:C2:AB:67:44:75:83:1C:C4:AA:7B:B0:EA:80:8B:F0:B2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B52A754891FC9A1C13AC5A100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 203 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:54:89:1f:c9:a1:c1:3a:c5:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=e1b7ad84-532c-4991-82b1-78dfc20356c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:c0:30:e0:3b:f1:40:94:15:89:f4:e1:a3: ed:90:71:3a:af:f4:05:6f:fd:72:a7:7c:ed:38:28: d6:9e:30:66:51:bf:49:d8:5b:bc:4b:c8:8a:4c:8b: 3d:9c:93:4b:ef:fa:e9:24:44:66:9e:97:73:71:0f: 89:66:fd:72:6f:2b:a1:37:6d:63:a0:36:2a:8a:5b: 21:14:5e:63:bc:9a:ab:2c:2c:35:09:12:86:8a:2f: bf:f9:41:66:77:81:4c:8c:c4:54:b0:38:ad:16:1e: f3:cb:44:13:db:6a:45:89:bc:c1:d1:26:8c:d4:82: 9c:8e:22:23:ca:e7:a8:6a:41:f4:ac:74:00:d8:ed: 44:cd:20:32:b4:87:aa:25:95:af:da:4b:5e:89:6e: cf:52:66:2f:7a:5f:81:ff:a3:fb:d8:cf:15:07:0a: 71:91:bc:a2:47:de:72:86:c0:76:94:65:64:e4:78: 2f:39:ef:b8:a7:63:e0:ea:0e:8e:5e:f6:fc:d3:bd: 43:38:6a:51:79:ae:6a:db:be:b3:e3:dc:43:0c:7e: 64:19:24:7d:fa:14:3c:d9:70:bf:4c:61:16:94:0d: a1:37:ba:2f:82:48:df:a5:0f:a6:ff:4e:a7:f0:00: 8e:94:40:f0:c7:e8:27:59:75:59:76:a2:82:63:17: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A8:74:BC:C2:AB:67:44:75:83:1C:C4:AA:7B:B0:EA:80:8B:F0:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:34:c5:a7:b4:a2:65:88:43:2e:10:60:be:5c:36:ff:7d:e0: 25:3e:98:3f:73:4a:d0:01:d1:68:70:dd:f0:d7:da:c2:07:c3: 91:f3:5b:d2:92:8e:98:2b:2b:7c:08:3f:5b:f9:11:46:31:bc: 6a:d2:da:6a:5b:4d:90:6f:45:5a:e9:37:5f:22:4e:f6:62:47: 67:47:15:a3:3f:4b:8b:3c:9e:a8:65:ac:84:da:c8:cb:5f:f8: 14:32:b4:85:ce:4e:d1:1d:b7:86:cc:25:c0:b5:89:fe:09:4d: 01:26:c9:96:13:12:f9:53:1a:66:80:a0:ea:c7:95:0b:4e:f5: b7:9b:a1:8c:25:11:41:bf:72:39:d5:14:32:a9:59:f8:47:34: fa:95:9b:67:c8:27:28:35:b8:2f:fd:89:82:e3:8e:6c:2e:e1: 66:63:75:c5:f9:b1:c2:50:6f:6d:ea:fb:0a:70:31:ae:59:fa: 8d:0f:1c:3f:c6:cb:82:93:3c:92:b8:0e:16:4a:fe:f6:26:3e: d5:85:a7:a6:f0:d0:49:5c:76:3f:63:7c:46:2d:ec:5f:18:16: cb:05:8a:7e:6e:6d:83:a0:69:81:44:88:00:31:35:bd:31:a6: 63:b2:e0:67:26:1e:c3:93:3e:b4:6a:fd:d2:8b:66:e2:47:43: 9c:18:e7:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1SJH8mhwTrFoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZTFiN2FkODQtNTMyYy00OTkxLTgyYjEtNzhkZmMyMDM1NmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCnAMOA78UCUFYn04aPtkHE6r/QFb/1yp3zt OCjWnjBmUb9J2Fu8S8iKTIs9nJNL7/rpJERmnpdzcQ+JZv1ybyuhN21joDYqilsh FF5jvJqrLCw1CRKGii+/+UFmd4FMjMRUsDitFh7zy0QT22pFibzB0SaM1IKcjiIj yueoakH0rHQA2O1EzSAytIeqJZWv2kteiW7PUmYvel+B/6P72M8VBwpxkbyiR95y hsB2lGVk5HgvOe+4p2Pg6g6OXvb8071DOGpRea5q276z49xDDH5kGSR9+hQ82XC/ TGEWlA2hN7ovgkjfpQ+m/06n8ACOlEDwx+gnWXVZdqKCYxcxaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuodLzCq2dEdYMcxKp7sOqAi/CyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWE2N2IwYmUtOWI4NS0z ODFmLThmOGItODBmM2E0YjkzYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg0xae0omWIQy4QYL5cNv994CU+mD9zStAB0Whw3fDX2sIHw5HzW9KS jpgrK3wIP1v5EUYxvGrS2mpbTZBvRVrpN18iTvZiR2dHFaM/S4s8nqhlrITayMtf +BQytIXOTtEdt4bMJcC1if4JTQEmyZYTEvlTGmaAoOrHlQtO9beboYwlEUG/cjnV FDKpWfhHNPqVm2fIJyg1uC/9iYLjjmwu4WZjdcX5scJQb23q+wpwMa5Z+o0PHD/G y4KTPJK4DhZK/vYmPtWFp6bw0Elcdj9jfEYt7F8YFssFin5ubYOgaYFEiAAxNb0x pmOy4GcmHsOTPrRq/dKLZuJHQ5wY5zU= -----END CERTIFICATE-----Generated at Mon Oct 20 05:28:53 2025 by rpki-client