$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa File: da015e1a-f458-3674-9325-2b4dbacc74f1.roa (raw, json) Hash identifier: dmr9jKFWjnZ1MUVDLrlCl0sxTa1ERHQ1gok2KffaSN4= Subject key identifier: B5:57:C5:2C:BA:40:1C:61:D7:AC:2E:A3:5F:A6:50:0D:5B:89:DD:9D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B52A753FCB7A915BD617E3780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 3360 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:53:fc:b7:a9:15:bd:61:7e:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=f20348dd-5470-4699-b30e-23bc1b34fdfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:e7:cf:62:5f:0d:31:59:1a:91:c9:49:aa: 3e:86:29:a4:74:5e:d1:d6:06:0c:d9:a7:e9:ec:6a: 9e:9d:14:72:ec:31:57:ac:22:5c:51:a1:f9:c2:6d: d6:6f:c9:0f:a3:b7:9d:56:64:5e:ad:3c:39:d9:f3: f7:f2:d8:1f:79:3c:fc:67:e6:99:ef:16:aa:5f:d9: 92:c0:7f:ac:f0:b6:88:67:ea:ae:f9:90:5f:7f:5e: b8:17:a8:db:4a:f7:4a:0d:46:d6:a9:41:60:3f:c3: e2:37:ba:9e:28:bf:76:4b:7f:d5:02:15:da:03:16: fc:28:d3:87:b7:86:3e:cf:1c:4a:fe:b4:c5:35:4f: 8a:62:14:4a:5b:b6:4f:c1:d5:91:61:0d:cc:d0:e2: 46:ba:a1:b6:f9:c7:78:d5:b3:8e:2a:bc:0c:a0:a3: 5c:29:ec:e6:49:9f:50:15:1d:8d:4a:de:fe:c1:bf: db:c1:d2:82:7e:f5:45:9b:fa:65:f1:4d:cf:fc:84: de:0d:71:39:d1:1a:60:f1:58:8e:d1:56:f1:5b:cd: 21:4f:16:04:5e:b7:bb:93:c1:0c:13:79:9a:00:fd: 65:49:c4:68:b9:c4:8f:64:9d:a6:8b:85:8a:4c:a3: 28:80:02:e4:bd:49:7b:4b:87:e3:f9:f7:34:85:1b: 11:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:57:C5:2C:BA:40:1C:61:D7:AC:2E:A3:5F:A6:50:0D:5B:89:DD:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7d:18:8b:1c:d3:da:96:34:f5:32:4e:fa:74:85:d6:cf:a6: b5:1d:d5:ea:2b:94:c2:0c:f9:34:7c:b8:08:17:f1:d7:4e:28: 2c:8c:90:13:7a:7b:e4:7f:6e:d4:5a:88:62:b8:08:9c:89:03: 54:76:fc:f1:6f:de:5b:c9:64:d2:e8:51:53:7c:a1:3d:b5:56: c5:69:0d:40:55:aa:b3:9c:50:b2:6e:ca:82:26:47:7b:61:cd: 79:57:5b:65:0b:f5:05:78:e5:79:8e:ce:c3:b7:84:5c:1c:2b: 91:23:f3:33:7c:7b:7c:92:84:6a:a4:c2:dc:55:5b:31:57:c4: 57:41:be:9b:41:ec:14:96:55:43:f7:a7:0f:60:3f:d3:23:ce: 63:21:48:39:07:c8:8f:60:58:0f:e6:73:70:fb:54:2f:3a:ce: 1e:34:13:63:cd:76:59:9c:a1:4e:aa:14:80:4b:59:28:8d:20: 31:b2:7e:4d:93:a3:22:af:ac:eb:b1:b5:16:34:95:1b:05:85: d3:c5:d8:d0:2f:aa:b8:82:28:f2:ac:12:e9:b7:80:36:4e:62: ac:5f:e1:0b:94:b1:1e:be:f8:22:0a:ae:96:4b:b9:4e:f6:ca: d1:fa:2e:d2:df:38:c6:ce:65:02:d1:78:2e:2d:dc:0d:fb:21: 7d:b8:65:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1P8t6kVvWF+N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZjIwMzQ4ZGQtNTQ3MC00Njk5LWIzMGUtMjNiYzFiMzRmZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp7nz2JfDTFZGpHJSao+himkdF7R1gYM2afp 7GqenRRy7DFXrCJcUaH5wm3Wb8kPo7edVmRerTw52fP38tgfeTz8Z+aZ7xaqX9mS wH+s8LaIZ+qu+ZBff164F6jbSvdKDUbWqUFgP8PiN7qeKL92S3/VAhXaAxb8KNOH t4Y+zxxK/rTFNU+KYhRKW7ZPwdWRYQ3M0OJGuqG2+cd41bOOKrwMoKNcKezmSZ9Q FR2NSt7+wb/bwdKCfvVFm/pl8U3P/ITeDXE50Rpg8ViO0VbxW80hTxYEXre7k8EM E3maAP1lScRoucSPZJ2mi4WKTKMogALkvUl7S4fj+fc0hRsRAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVXxSy6QBxh16wuo1+mUA1bid2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwMTVlMWEtZjQ1OC0z Njc0LTkzMjUtMmI0ZGJhY2M3NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE59GIsc09qWNPUyTvp0hdbPprUd1eorlMIM+TR8uAgX8ddOKCyMkBN6 e+R/btRaiGK4CJyJA1R2/PFv3lvJZNLoUVN8oT21VsVpDUBVqrOcULJuyoImR3th zXlXW2UL9QV45XmOzsO3hFwcK5Ej8zN8e3yShGqkwtxVWzFXxFdBvptB7BSWVUP3 pw9gP9MjzmMhSDkHyI9gWA/mc3D7VC86zh40E2PNdlmcoU6qFIBLWSiNIDGyfk2T oyKvrOuxtRY0lRsFhdPF2NAvqriCKPKsEum3gDZOYqxf4QuUsR6++CIKrpZLuU72 ytH6LtLfOMbOZQLReC4t3A37IX24ZTI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:35:42 2025 by rpki-client