$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa File: a6d04891-47ad-353a-8897-df25d664bb32.roa (raw, json) Hash identifier: K/qkZ+OHlxZORblpsVDwN0uzsBd6rc4ldabjGJI55Z0= Subject key identifier: 25:49:86:FE:77:03:1A:1F:1A:67:12:04:66:5B:05:0F:4B:30:53:BB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B52A7542D7BD4C35C00C0C120 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 203 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:54:2d:7b:d4:c3:5c:00:c0:c1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=83a99401-8dcc-4d8e-a4ad-7ef9b79ab868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:94:ed:2b:27:fb:16:8a:3b:62:d5:38:3e: 9b:74:66:84:0f:f3:76:16:1d:b6:86:88:4c:0b:11: 9d:03:fc:1f:c4:45:a5:d9:ea:f8:c8:40:5e:48:c3: 37:5a:ab:51:15:c7:3c:b7:52:c1:af:cc:c1:68:fd: f1:24:e6:ed:5b:64:de:bb:0b:c0:47:7d:5e:73:19: 45:0e:f2:83:91:0e:94:06:2c:55:46:28:bd:fc:54: e3:39:d9:3a:bc:18:da:4a:56:6c:8f:4d:4c:7d:41: a6:39:a8:06:ea:60:88:1e:94:ed:90:3a:03:79:38: 3d:67:3e:5a:dd:03:36:7a:c0:81:86:96:cc:7d:18: 8b:46:08:61:8f:65:95:de:03:36:4b:dc:c4:ba:e8: 96:25:22:8e:dd:d3:54:58:24:99:3c:26:45:51:bf: 57:c4:2f:c8:56:02:2a:bf:7f:3b:94:7d:c2:ef:7a: 87:b2:50:b7:87:d5:65:9f:23:b8:f9:a0:cb:51:59: 7f:fd:ee:e0:ad:4d:b9:65:a3:9e:13:42:6f:d6:d6: 57:96:93:74:4d:fd:0f:05:12:85:53:71:2d:00:76: 51:9d:72:71:62:0b:85:e7:ef:73:0b:61:7d:68:a9: 89:98:35:19:c3:1b:d2:d1:5f:17:d2:33:92:22:61: 07:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:49:86:FE:77:03:1A:1F:1A:67:12:04:66:5B:05:0F:4B:30:53:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6c:f5:21:fb:ad:87:21:cb:86:b7:a9:98:80:bd:e9:e9:c4: 25:51:be:a8:10:da:16:13:35:1e:ab:5a:e2:70:5c:58:2d:78: 07:a0:20:40:dc:bc:61:61:c9:e5:71:62:f2:bd:6b:8a:bd:d9: 2a:72:41:79:12:ed:d0:e2:74:b1:14:b2:6e:ee:77:a2:4b:9f: ee:4b:56:bd:d0:d5:69:fb:06:46:b4:0a:92:34:9d:ce:e9:a3: 6c:4e:a1:c3:5d:21:e8:73:b9:c5:96:7c:ff:f3:cf:bd:64:c1: 37:ad:b5:74:8c:b2:58:42:5c:55:e4:28:41:97:9b:52:43:1b: a9:dd:31:da:47:f2:ff:53:51:37:0d:d0:cc:48:55:23:44:70: a7:e7:da:99:d5:d3:d1:93:09:c1:f9:7f:93:4a:00:e7:cd:26: 48:d4:64:8b:14:54:b3:c7:ad:58:6a:d0:11:b0:11:f7:57:7c: 2a:a4:50:f4:97:17:8f:2b:bb:ef:3a:33:dd:cf:c5:76:9d:e8: 16:dc:b1:67:8b:fe:84:3e:37:bb:ae:9f:cd:5e:40:ca:f7:20: 40:84:df:96:e7:bd:d9:b3:70:86:be:91:6c:4e:44:a5:fc:07: ab:a2:f9:0c:2a:45:0c:60:2e:e9:8b:c3:e3:72:3f:9a:60:02: 04:1a:61:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1Qte9TDXADAwSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ODNhOTk0MDEtOGRjYy00ZDhlLWE0YWQtN2VmOWI3OWFiODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14+U7Ssn+xaKO2LVOD6bdGaED/N2Fh22hohM CxGdA/wfxEWl2er4yEBeSMM3WqtRFcc8t1LBr8zBaP3xJObtW2TeuwvAR31ecxlF DvKDkQ6UBixVRii9/FTjOdk6vBjaSlZsj01MfUGmOagG6mCIHpTtkDoDeTg9Zz5a 3QM2esCBhpbMfRiLRghhj2WV3gM2S9zEuuiWJSKO3dNUWCSZPCZFUb9XxC/IVgIq v387lH3C73qHslC3h9VlnyO4+aDLUVl//e7grU25ZaOeE0Jv1tZXlpN0Tf0PBRKF U3EtAHZRnXJxYguF5+9zC2F9aKmJmDUZwxvS0V8X0jOSImEHLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVJhv53AxofGmcSBGZbBQ9LMFO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTZkMDQ4OTEtNDdhZC0z NTNhLTg4OTctZGYyNWQ2NjRiYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAts9SH7rYchy4a3qZiAvenpxCVRvqgQ2hYTNR6rWuJwXFgteAegIEDc vGFhyeVxYvK9a4q92SpyQXkS7dDidLEUsm7ud6JLn+5LVr3Q1Wn7Bka0CpI0nc7p o2xOocNdIehzucWWfP/zz71kwTettXSMslhCXFXkKEGXm1JDG6ndMdpH8v9TUTcN 0MxIVSNEcKfn2pnV09GTCcH5f5NKAOfNJkjUZIsUVLPHrVhq0BGwEfdXfCqkUPSX F48ru+86M93PxXad6BbcsWeL/oQ+N7uun81eQMr3IECE35bnvdmzcIa+kWxORKX8 B6ui+QwqRQxgLumLw+NyP5pgAgQaYcc= -----END CERTIFICATE-----Generated at Sun Oct 19 21:01:03 2025 by rpki-client