$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa File: c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa (raw, json) Hash identifier: jMfVpHatOFRLahA81jdg7d/iKdizFQSalSZpiKsSw60= Subject key identifier: 30:74:58:2A:CE:AC:90:F3:63:03:0B:5A:7C:14:F4:75:ED:6D:1A:83 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCB15D71E8560C9FE7AA00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 202 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b1:5d:71:e8:56:0c:9f:e7:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=6efbf21f-195a-469d-98b7-6b29a10f2138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:33:57:2d:10:09:c8:29:3c:99:c5:02:03:3d: 0b:98:de:2c:85:e2:b7:77:e5:9c:57:2a:78:ef:2b: ca:eb:ff:ea:36:6f:02:a3:56:67:62:f4:09:e6:50: d9:fb:52:db:f7:23:74:e1:da:39:61:63:57:54:2b: 91:9b:51:33:51:72:08:54:80:57:84:1e:7c:52:88: ef:b7:4f:94:26:32:84:0a:8f:59:d6:c2:ef:63:03: 8e:c9:c2:d4:56:ec:37:7b:73:32:b3:25:81:a3:56: 7b:4d:4c:db:d2:68:bd:05:81:35:3d:55:0a:b8:d9: 19:69:f4:8e:99:20:49:a0:ab:bb:02:2f:8d:53:d5: b7:b9:22:c7:ad:fc:2f:f8:1b:76:a3:17:0f:b7:cb: e5:1b:90:b9:1b:94:82:d3:b5:13:2c:5b:24:fe:82: 31:39:98:c5:26:48:26:74:3c:ff:60:a5:d4:2c:f1: a5:9d:f6:23:81:40:99:f7:b9:03:5d:c3:15:8c:33: 73:a4:c3:3e:4a:ad:02:45:30:0a:cc:19:a1:00:ba: af:81:2f:d2:bb:99:c7:0c:aa:06:92:5e:ef:6f:50: 7a:b5:3c:aa:d5:07:3b:e8:16:a1:eb:d7:44:41:19: bd:f2:76:08:6a:07:d2:12:70:62:23:0c:ee:fc:0f: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:74:58:2A:CE:AC:90:F3:63:03:0B:5A:7C:14:F4:75:ED:6D:1A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a1:75:14:bb:77:7c:4e:d6:2b:8e:98:3f:c9:13:aa:6b:ed: 85:73:bc:26:12:ec:ed:a4:15:64:af:df:d3:27:a4:f3:9b:76: a4:8e:e4:b6:d4:50:9d:94:f7:0f:7e:9c:50:50:f0:18:8c:7d: 89:bd:ae:b6:7d:d1:25:28:78:26:59:75:3d:1f:9b:89:7c:81: 9c:8c:f0:ae:25:53:74:d8:d1:7a:6b:3f:c7:9d:5b:5f:c9:c1: 64:74:69:0c:6c:a9:82:7b:8d:8f:22:e3:7f:69:61:6d:15:c4: ee:57:9f:cf:fe:5b:b5:b8:0a:a8:49:0e:de:8a:e2:a8:7e:1c: ad:5d:c7:7c:14:b5:e2:33:fa:0b:45:c5:73:d6:7c:5b:d6:4c: 32:a9:f4:dd:18:d9:95:08:df:8d:af:57:6f:04:f9:54:1e:19: ba:3d:6c:a4:36:b8:66:7e:e8:2a:1c:85:87:81:53:cd:55:c1: 33:94:27:d9:df:3a:c6:86:52:8f:33:7d:20:92:67:ea:7d:1d: c1:a8:b0:d2:c3:87:55:8b:70:14:3e:0e:da:0a:4d:96:f7:67: 6f:4a:ed:01:ce:b5:d7:87:f0:13:a4:af:86:61:ed:4b:df:e3: 25:95:ba:f5:fe:cd:bb:5b:03:53:ab:00:c8:00:76:2f:7a:9c: 67:ff:04:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLFdcehWDJ/nqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NmVmYmYyMWYtMTk1YS00NjlkLTk4YjctNmIyOWExMGYyMTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljNXLRAJyCk8mcUCAz0LmN4sheK3d+WcVyp4 7yvK6//qNm8Co1ZnYvQJ5lDZ+1Lb9yN04do5YWNXVCuRm1EzUXIIVIBXhB58Uojv t0+UJjKECo9Z1sLvYwOOycLUVuw3e3MysyWBo1Z7TUzb0mi9BYE1PVUKuNkZafSO mSBJoKu7Ai+NU9W3uSLHrfwv+Bt2oxcPt8vlG5C5G5SC07UTLFsk/oIxOZjFJkgm dDz/YKXULPGlnfYjgUCZ97kDXcMVjDNzpMM+Sq0CRTAKzBmhALqvgS/Su5nHDKoG kl7vb1B6tTyq1Qc76Bah69dEQRm98nYIagfSEnBiIwzu/A8KbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDB0WCrOrJDzYwMLWnwU9HXtbRqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzQ4Y2M3MzAtOWE4Yi0z Mzc2LWFiNTctOWY0YWFmYzc5MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuhdRS7d3xO1iuOmD/JE6pr7YVzvCYS7O2kFWSv39MnpPObdqSO5LbU UJ2U9w9+nFBQ8BiMfYm9rrZ90SUoeCZZdT0fm4l8gZyM8K4lU3TY0XprP8edW1/J wWR0aQxsqYJ7jY8i439pYW0VxO5Xn8/+W7W4CqhJDt6K4qh+HK1dx3wUteIz+gtF xXPWfFvWTDKp9N0Y2ZUI342vV28E+VQeGbo9bKQ2uGZ+6CochYeBU81VwTOUJ9nf OsaGUo8zfSCSZ+p9HcGosNLDh1WLcBQ+DtoKTZb3Z29K7QHOtdeH8BOkr4Zh7Uvf 4yWVuvX+zbtbA1OrAMgAdi96nGf/BNQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:47:05 2025 by rpki-client