$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e05ae60a-5ff9-3ee5-884e-da2510336861.roa File: e05ae60a-5ff9-3ee5-884e-da2510336861.roa (raw, json) Hash identifier: UoEiY8tVv+Ht6jzPPQ1DKtTEmHYoChp9s1E2lCknJ8c= Subject key identifier: C6:7E:17:7F:BC:43:9E:7E:2B:48:34:71:2E:4F:FC:72:0C:26:E3:AD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B6D2CB6C1F8157A6EB1A6BC80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e05ae60a-5ff9-3ee5-884e-da2510336861.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 3360 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b6:c1:f8:15:7a:6e:b1:a6:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=7bf7d878-b4b9-449a-9f12-23bc47bc64ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d2:e2:87:ee:cb:11:02:5a:e3:ee:47:f8:b5: 33:a1:b8:7f:c6:c1:d1:98:b9:c7:31:1d:5b:20:92: e3:66:bf:d0:50:1d:ef:c4:a7:06:23:0d:b4:b7:e8: e1:bd:37:18:13:9d:4e:b0:ea:7e:1b:9f:45:6f:c7: 4a:54:5e:38:0f:44:f9:38:49:f4:bb:9e:95:e2:0a: 41:d4:23:33:21:a5:01:75:ee:d5:25:b7:39:d8:8d: 85:c5:cd:37:79:bd:b5:67:2e:2e:19:82:a3:05:2a: bd:eb:ad:76:6f:63:00:d7:9c:b1:ad:d2:7c:50:80: 3f:9c:f0:98:14:38:79:c4:3e:c8:50:ce:d4:a9:6d: 47:3e:25:c2:3f:d0:4f:d2:c5:88:a4:ed:3d:92:a1: 13:0a:89:fe:79:78:77:0d:37:f6:86:45:a9:3b:13: 8c:13:11:da:e3:f4:f7:80:d4:26:47:67:bf:35:39: e9:90:98:a2:49:22:9e:5c:60:36:2f:c8:6b:8c:15: 46:55:b8:be:8c:1a:ed:c1:a9:95:ae:9d:27:6b:53: af:2b:fd:1a:e7:f5:51:f1:62:d4:32:c3:57:2c:2e: 68:51:00:73:f4:e6:7d:7e:26:14:cd:9d:4b:1e:70: f9:36:0b:6f:a4:cf:63:49:d0:29:2a:b1:24:76:09: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7E:17:7F:BC:43:9E:7E:2B:48:34:71:2E:4F:FC:72:0C:26:E3:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e05ae60a-5ff9-3ee5-884e-da2510336861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8e:d8:4d:2c:f6:9b:65:4e:fc:66:d3:44:db:25:5d:a6:81: cc:1b:e5:2a:18:70:a6:84:95:ef:de:64:79:b0:f1:0e:45:68: 55:46:e6:77:3f:7d:d3:78:41:21:50:23:83:f2:7d:ae:78:63: ef:6a:b2:d1:9c:2c:2e:e9:f7:75:b3:08:58:f0:5b:b0:0a:2c: d7:8e:8e:72:26:09:d9:e9:13:2a:0b:43:b1:f1:49:25:95:a5: d9:fd:d4:90:25:0d:24:26:09:98:2b:e7:f1:82:a0:3e:26:49: 18:9e:8f:c6:ba:b9:16:5e:2c:7b:9e:f3:82:45:70:2a:c0:d5: c3:2c:53:17:f0:dc:07:43:43:b3:ea:64:7a:56:c1:1b:28:50: 8b:33:ef:3c:4c:59:dc:60:84:dc:4a:be:4b:86:7c:65:3b:ad: ad:b2:57:35:4a:98:dc:8f:17:99:c5:ca:3a:53:b7:13:42:c2: e8:2e:b6:25:c5:63:c1:f5:04:9d:09:96:f1:c5:56:f1:3d:5c: 67:d8:72:63:8f:9c:1e:68:97:ef:ae:b5:a6:ab:83:f3:df:81: b9:4f:7f:6f:07:60:44:de:22:5d:1a:e1:1c:bb:b6:aa:2d:f2: af:15:e2:53:1f:b2:d6:3f:25:10:de:1a:d7:dc:59:c6:5c:cc: e5:fc:c7:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLLbB+BV6brGmvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk N2JmN2Q4NzgtYjRiOS00NDlhLTlmMTItMjNiYzQ3YmM2NGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9Lih+7LEQJa4+5H+LUzobh/xsHRmLnHMR1b IJLjZr/QUB3vxKcGIw20t+jhvTcYE51OsOp+G59Fb8dKVF44D0T5OEn0u56V4gpB 1CMzIaUBde7VJbc52I2Fxc03eb21Zy4uGYKjBSq96612b2MA15yxrdJ8UIA/nPCY FDh5xD7IUM7UqW1HPiXCP9BP0sWIpO09kqETCon+eXh3DTf2hkWpOxOMExHa4/T3 gNQmR2e/NTnpkJiiSSKeXGA2L8hrjBVGVbi+jBrtwamVrp0na1OvK/0a5/VR8WLU MsNXLC5oUQBz9OZ9fiYUzZ1LHnD5NgtvpM9jSdApKrEkdgmEBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZ+F3+8Q55+K0g0cS5P/HIMJuOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTA1YWU2MGEtNWZmOS0z ZWU1LTg4NGUtZGEyNTEwMzM2ODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWO2E0s9ptlTvxm00TbJV2mgcwb5SoYcKaEle/eZHmw8Q5FaFVG5nc/ fdN4QSFQI4Pyfa54Y+9qstGcLC7p93WzCFjwW7AKLNeOjnImCdnpEyoLQ7HxSSWV pdn91JAlDSQmCZgr5/GCoD4mSRiej8a6uRZeLHue84JFcCrA1cMsUxfw3AdDQ7Pq ZHpWwRsoUIsz7zxMWdxghNxKvkuGfGU7ra2yVzVKmNyPF5nFyjpTtxNCwugutiXF Y8H1BJ0JlvHFVvE9XGfYcmOPnB5ol++utaarg/PfgblPf28HYETeIl0a4Ry7tqot 8q8V4lMfstY/JRDeGtfcWcZczOX8x58= -----END CERTIFICATE-----Generated at Mon Oct 20 10:44:35 2025 by rpki-client