$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa File: e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa (raw, json) Hash identifier: Dz8pitXF3F2S85fkfs0ChT3tCKAo0vlLqo0TTlid4B4= Subject key identifier: 16:E0:6B:44:9F:0A:3B:5B:EF:3B:AE:21:32:DE:53:C3:F1:0C:34:F0 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B52A7540E10B3B60B8D9E5080 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 3356 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:54:0e:10:b3:b6:0b:8d:9e:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=186e930c-5e9a-4f38-b27a-8227f2b19bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:cb:81:54:13:d1:1b:15:89:37:a6:73:a1: 6a:70:99:97:04:62:bc:50:ac:9f:d8:97:da:12:97: 45:bb:2f:d3:29:ec:1f:7d:74:d3:c3:e2:0c:6d:1e: 14:de:95:b1:8b:80:87:f4:83:7d:64:00:e7:8c:92: 78:fd:bd:c4:0e:66:b6:56:3b:4c:ba:41:e3:4f:f0: 12:5a:f6:11:82:b6:69:eb:59:30:ee:a4:a0:4d:6a: ee:39:a0:68:be:7b:96:b6:38:41:34:90:ce:a3:0a: 11:3f:d4:2e:fb:3f:27:6a:41:0e:01:8e:c6:ad:d2: ae:2d:94:bd:9a:e3:96:1c:6f:87:64:2b:bc:e8:34: d9:34:f6:c4:5f:33:32:bb:7a:2f:37:b4:0f:45:69: 97:ca:1a:e9:d4:55:e8:a9:0b:72:a2:1d:90:10:ec: 3b:99:ad:f7:31:0c:ca:f1:a7:84:dc:38:86:a6:2c: 4c:f7:31:42:37:ab:08:da:1c:1a:06:e7:ed:98:13: 05:32:1a:f0:b5:3b:77:8f:4e:56:f2:35:2e:ea:e4: 4b:c5:f8:fb:07:71:8e:c4:f4:a7:93:ec:c9:e8:02: 61:71:29:2e:bc:b1:4b:28:a9:2d:cb:6a:fe:1c:fc: 65:30:6e:71:fc:73:bb:99:9f:a1:fc:d9:56:2f:2f: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E0:6B:44:9F:0A:3B:5B:EF:3B:AE:21:32:DE:53:C3:F1:0C:34:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fc:89:3d:66:f1:ca:16:27:76:95:d4:f5:e1:26:4c:0a:65: 3a:98:21:4f:35:53:71:1f:a3:3e:d5:55:76:29:46:84:67:94: fb:13:f7:63:bd:b3:e5:5f:45:a6:31:fc:e4:ee:dd:29:71:73: a3:be:51:b2:50:c2:0b:fa:e6:d3:83:52:75:12:7c:18:8a:0b: 03:70:13:e0:75:3a:a4:92:09:56:6d:fe:a2:4d:17:09:75:bc: 48:db:0e:36:d5:6c:3c:9b:90:28:4a:b7:36:1a:53:c2:f6:68: ca:59:7e:89:50:c7:b6:d3:0a:5b:76:e9:88:c2:09:c7:67:4d: 47:0c:a0:13:c3:66:8e:dd:5a:77:65:90:fe:d7:40:ce:48:00: d0:ee:31:a9:a2:83:0c:52:d0:a7:29:88:26:a0:0b:0d:55:49: 49:63:b1:0d:55:d4:0e:51:90:89:25:00:b7:a7:7c:cc:c7:9e: f0:53:6e:47:42:d9:3e:27:b8:f1:17:af:9c:cf:05:ec:ea:7e: a7:75:db:e6:4f:70:b2:cf:7a:26:7b:46:14:d6:e9:77:66:0d: 0d:ed:5f:f0:fc:1a:c9:05:6f:7c:f8:99:10:f9:5e:34:a7:96: 6e:68:a0:8a:60:5e:c9:3e:b7:d5:7d:c0:f2:45:0e:a2:87:66: 7e:cb:4e:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1QOELO2C42eUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MTg2ZTkzMGMtNWU5YS00ZjM4LWIyN2EtODIyN2YyYjE5YmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuszLgVQT0RsViTemc6FqcJmXBGK8UKyf2Jfa EpdFuy/TKewffXTTw+IMbR4U3pWxi4CH9IN9ZADnjJJ4/b3EDma2VjtMukHjT/AS WvYRgrZp61kw7qSgTWruOaBovnuWtjhBNJDOowoRP9Qu+z8nakEOAY7GrdKuLZS9 muOWHG+HZCu86DTZNPbEXzMyu3ovN7QPRWmXyhrp1FXoqQtyoh2QEOw7ma33MQzK 8aeE3DiGpixM9zFCN6sI2hwaBuftmBMFMhrwtTt3j05W8jUu6uRLxfj7B3GOxPSn k+zJ6AJhcSkuvLFLKKkty2r+HPxlMG5x/HO7mZ+h/NlWLy9/TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbga0SfCjtb7zuuITLeU8PxDDTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTJkMTdkNzEtZjZmOC0z YmU1LWFkMmQtODgzODE3MTYwOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr8iT1m8coWJ3aV1PXhJkwKZTqYIU81U3Efoz7VVXYpRoRnlPsT92O9 s+VfRaYx/OTu3Slxc6O+UbJQwgv65tODUnUSfBiKCwNwE+B1OqSSCVZt/qJNFwl1 vEjbDjbVbDybkChKtzYaU8L2aMpZfolQx7bTClt26YjCCcdnTUcMoBPDZo7dWndl kP7XQM5IANDuMamigwxS0KcpiCagCw1VSUljsQ1V1A5RkIklALenfMzHnvBTbkdC 2T4nuPEXr5zPBezqfqd12+ZPcLLPeiZ7RhTW6XdmDQ3tX/D8GskFb3z4mRD5XjSn lm5ooIpgXsk+t9V9wPJFDqKHZn7LTmQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:24:54 2025 by rpki-client