$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac7e5964-f652-3724-a0ba-235f4627f21f.roa File: ac7e5964-f652-3724-a0ba-235f4627f21f.roa (raw, json) Hash identifier: 16Al/+yNCQkhYcfZbaN9fYU0tEE19Xtp/c4XgA29sYU= Subject key identifier: 90:6C:C1:71:0D:FE:12:40:69:A8:64:F8:F7:E6:CB:E5:7A:11:9F:DF Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B95A79E0F7E1BB281EFB02300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac7e5964-f652-3724-a0ba-235f4627f21f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 3360 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9e:0f:7e:1b:b2:81:ef:b0:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fc38a48e-4fb4-4620-be82-a6a76a03628e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:28:97:7e:4e:44:ae:2a:26:74:aa:e1:9e:3b: b9:40:0c:3f:f5:f0:dd:9d:3b:51:18:79:cd:c8:ab: b7:01:3c:fd:94:6b:ae:51:d2:cf:22:66:9b:0b:b0: ea:10:87:e3:8b:26:ce:17:fd:9a:d4:bf:ed:0b:04: bd:db:83:ce:92:3b:5e:a9:3e:36:44:f6:95:f1:72: a1:a1:63:de:68:75:d6:7c:5d:d3:06:27:23:8e:13: 5a:70:a3:9f:e7:f4:13:55:47:1b:a5:b3:37:22:94: 2f:4c:40:23:b6:0d:e6:87:c1:db:b6:3c:b1:b2:51: 36:c6:57:2f:7c:39:ab:c6:6d:36:62:ee:9f:0f:ee: 57:21:9e:68:fb:e8:d4:d2:6b:19:89:3e:d4:cb:59: a3:d2:fa:ee:8a:97:91:be:a7:ba:3e:49:01:a0:1e: 6a:ac:bd:7d:20:1b:f0:3f:72:55:5f:10:2d:7b:7f: c4:44:8d:c5:f7:53:89:09:55:8b:76:94:fe:f1:d8: 5b:42:ee:48:f4:fb:43:d9:7e:7c:f9:81:c9:1f:2d: b5:71:94:98:91:58:39:7b:76:0c:25:b0:55:ed:e1: 5b:00:11:21:87:8d:73:4b:d8:9e:b0:0c:1f:b6:56: 32:8e:53:27:0a:99:17:ba:67:75:a1:c8:59:46:9c: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6C:C1:71:0D:FE:12:40:69:A8:64:F8:F7:E6:CB:E5:7A:11:9F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac7e5964-f652-3724-a0ba-235f4627f21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0a:f9:f1:cd:d0:cf:c0:cf:96:dc:dd:09:b1:12:6e:f8:fe: 4b:55:f9:df:7e:17:cc:8d:3e:f4:1d:b7:c8:b5:24:db:8f:fc: 1a:11:2d:98:cd:42:96:3f:0c:4a:49:83:85:23:4c:69:8e:fe: 51:fc:ec:52:ef:3d:c2:8f:2f:41:c8:07:c3:8d:79:92:a7:ae: bd:10:8b:75:12:66:c5:27:1d:4e:93:54:81:f1:a6:98:02:11: 1e:da:5d:02:88:d5:06:aa:3b:61:7a:80:fc:4a:d5:c1:34:03: d0:65:35:72:67:d6:b4:07:2c:2f:3b:a8:cb:04:0b:20:7a:42: 19:31:e0:79:62:da:c3:0f:6e:83:47:e9:e6:d2:1e:6e:60:6a: 22:24:13:2b:5b:32:e0:0d:33:1f:ec:0b:89:be:87:ac:38:a9: 0c:64:74:d5:92:8e:d8:8c:68:a5:71:8a:e5:d8:6f:3f:e7:88: 26:23:70:d5:87:fa:22:80:4f:1c:37:5e:2c:16:50:73:63:35: c9:28:9d:30:c7:80:0b:30:a9:15:48:f2:de:a9:1d:df:ff:9f: f9:83:57:5b:d9:26:1b:cc:3a:f7:6c:00:af:7c:f2:d0:e1:74: 55:81:7a:b8:55:a2:cf:c1:b2:1a:bd:24:97:e2:66:a1:8a:56: e0:9f:a5:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp54Pfhuyge+wIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmMzOGE0OGUtNGZiNC00NjIwLWJlODItYTZhNzZhMDM2MjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyiXfk5EriomdKrhnju5QAw/9fDdnTtRGHnN yKu3ATz9lGuuUdLPImabC7DqEIfjiybOF/2a1L/tCwS924POkjteqT42RPaV8XKh oWPeaHXWfF3TBicjjhNacKOf5/QTVUcbpbM3IpQvTEAjtg3mh8HbtjyxslE2xlcv fDmrxm02Yu6fD+5XIZ5o++jU0msZiT7Uy1mj0vruipeRvqe6PkkBoB5qrL19IBvw P3JVXxAte3/ERI3F91OJCVWLdpT+8dhbQu5I9PtD2X58+YHJHy21cZSYkVg5e3YM JbBV7eFbABEhh41zS9iesAwftlYyjlMnCpkXumd1ochZRpwHQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBswXEN/hJAaahk+Pfmy+V6EZ/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWM3ZTU5NjQtZjY1Mi0z NzI0LWEwYmEtMjM1ZjQ2MjdmMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQK+fHN0M/Az5bc3QmxEm74/ktV+d9+F8yNPvQdt8i1JNuP/BoRLZjN QpY/DEpJg4UjTGmO/lH87FLvPcKPL0HIB8ONeZKnrr0Qi3USZsUnHU6TVIHxppgC ER7aXQKI1QaqO2F6gPxK1cE0A9BlNXJn1rQHLC87qMsECyB6Qhkx4Hli2sMPboNH 6ebSHm5gaiIkEytbMuANMx/sC4m+h6w4qQxkdNWSjtiMaKVxiuXYbz/niCYjcNWH +iKATxw3XiwWUHNjNckonTDHgAswqRVI8t6pHd//n/mDV1vZJhvMOvdsAK988tDh dFWBerhVos/Bshq9JJfiZqGKVuCfpfo= -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:36 2025 by rpki-client