$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa File: ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa (raw, json) Hash identifier: ab0OpIONfj5bkI3fK/mfNFt175xkoqWUVo3duL5jVJg= Subject key identifier: 90:75:AB:51:E0:A9:A1:C3:1C:4F:EE:90:22:6F:03:B2:70:43:07:0B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B52A7541E581FF97A0EA53B80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 202 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:54:1e:58:1f:f9:7a:0e:a5:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=5fd5185b-ba5f-4818-853b-efac43327ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:38:a1:e4:f0:de:c1:d3:6a:9e:96:df:8c: 3e:ff:c1:ab:0d:3c:b7:9f:31:f0:8c:76:66:0b:48: fd:55:d9:91:b2:70:f3:93:45:19:55:b4:c5:f0:d4: 4e:36:9a:18:87:e9:23:23:68:5c:26:73:dc:10:84: 4e:a5:7e:4b:4b:7c:47:b2:b8:08:93:d5:72:fc:d1: f0:e9:76:48:9c:b7:57:c3:bc:f2:ad:38:2f:1d:be: 37:55:ef:28:85:84:84:3e:e6:57:c4:b5:75:4e:1a: 41:52:34:db:51:ed:a3:79:fd:d1:1e:1e:38:f1:7a: 5c:a7:28:11:3d:cc:f8:0c:6e:35:e2:fa:18:bd:a6: 0f:09:24:1e:95:95:27:bd:97:c7:2b:53:33:07:43: 85:c7:6f:e9:83:cd:6b:dd:1f:1e:9b:96:df:62:52: 20:33:d8:df:51:7f:6e:21:d5:9f:8e:eb:c8:39:f9: 8c:97:12:34:56:78:95:d9:e7:06:81:6f:ee:0e:65: da:be:12:13:51:5d:83:ea:56:6a:eb:cd:b2:15:d5: 54:99:61:1a:e8:45:1e:e2:29:e2:0e:e0:57:10:21: 77:5a:d6:5f:0d:14:f3:69:89:eb:08:27:49:fd:5c: 95:d1:87:c3:d3:9a:37:c1:4c:c7:3c:e2:3f:b2:ee: 07:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:75:AB:51:E0:A9:A1:C3:1C:4F:EE:90:22:6F:03:B2:70:43:07:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c5:bf:e2:ab:b7:7c:3c:3d:3d:aa:f8:c0:35:f3:77:f1:e3: 07:41:bf:c4:23:7c:b7:97:8d:62:c4:79:f4:11:f8:a1:49:a1: 17:4b:42:e0:a3:87:69:a3:78:f2:94:54:c0:71:5f:21:91:62: fc:c2:bf:73:35:4c:ff:7a:99:9d:86:fe:75:9e:67:9b:ed:2a: f6:c9:81:90:b4:b5:f5:3d:0b:72:ee:39:59:2d:0f:d3:93:41: 00:d3:c4:0e:be:8e:fc:93:fe:68:f0:59:0c:a7:1f:90:c4:1a: e8:11:76:e8:06:af:fb:4b:47:74:9b:2d:b0:e0:69:90:89:2e: 2c:0e:11:86:f1:ae:a5:5d:0c:37:03:37:53:22:dc:76:c9:44: 83:cf:26:b1:a5:37:a7:af:33:df:f8:40:61:f9:b8:c9:e3:18: 70:f4:66:6a:ed:c9:fa:4b:2b:88:ae:43:d8:d8:16:ad:50:b3: 4a:9a:45:2b:e9:e3:ac:72:9d:76:d2:55:59:b1:44:36:d0:5d: 53:2d:3a:ac:25:fe:04:75:58:7e:52:1b:b6:ec:82:0b:95:f0: 92:b3:5e:55:1a:aa:87:e6:93:4d:4d:08:2f:52:91:a2:29:3a: 46:67:1c:3f:28:cf:c4:75:56:df:46:82:b7:bf:30:2b:2b:7a: 55:e5:20:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1QeWB/5eg6lO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NWZkNTE4NWItYmE1Zi00ODE4LTg1M2ItZWZhYzQzMzI3ZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ84oeTw3sHTap6W34w+/8GrDTy3nzHwjHZm C0j9VdmRsnDzk0UZVbTF8NRONpoYh+kjI2hcJnPcEIROpX5LS3xHsrgIk9Vy/NHw 6XZInLdXw7zyrTgvHb43Ve8ohYSEPuZXxLV1ThpBUjTbUe2jef3RHh448XpcpygR Pcz4DG414voYvaYPCSQelZUnvZfHK1MzB0OFx2/pg81r3R8em5bfYlIgM9jfUX9u IdWfjuvIOfmMlxI0VniV2ecGgW/uDmXavhITUV2D6lZq682yFdVUmWEa6EUe4ini DuBXECF3WtZfDRTzaYnrCCdJ/VyV0YfD05o3wUzHPOI/su4HGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJB1q1HgqaHDHE/ukCJvA7JwQwcLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWIwYzU4ZDItYTJlMy0z YzQ5LWI2ZDMtMjNjYzZmMmE1MjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITFv+Krt3w8PT2q+MA183fx4wdBv8QjfLeXjWLEefQR+KFJoRdLQuCj h2mjePKUVMBxXyGRYvzCv3M1TP96mZ2G/nWeZ5vtKvbJgZC0tfU9C3LuOVktD9OT QQDTxA6+jvyT/mjwWQynH5DEGugRdugGr/tLR3SbLbDgaZCJLiwOEYbxrqVdDDcD N1Mi3HbJRIPPJrGlN6evM9/4QGH5uMnjGHD0ZmrtyfpLK4iuQ9jYFq1Qs0qaRSvp 46xynXbSVVmxRDbQXVMtOqwl/gR1WH5SG7bsgguV8JKzXlUaqofmk01NCC9SkaIp OkZnHD8oz8R1Vt9Ggre/MCsrelXlILE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:36 2025 by rpki-client