$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa File: f68ba57f-5e4d-33d2-960d-57b417d05011.roa (raw, json) Hash identifier: 6nORr9NOG/CkXG74xhSwnLlQT7dJV4K4cnCAUqm9b2c= Subject key identifier: CC:07:F6:4A:41:50:99:23:71:BA:26:C3:A8:06:0E:E2:7C:C4:BD:66 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCAE538F5C2C210135A580 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3356 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:ae:53:8f:5c:2c:21:01:35:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=30c1bdd2-1c53-452d-8973-fe82800880be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:a1:37:85:ae:af:ae:47:d9:46:34:d4:d3: 48:bc:6b:ac:97:00:f4:4e:4a:f0:d9:ae:6b:23:99: bd:b2:fd:72:05:89:1f:56:8f:c4:50:e0:cf:b6:a7: 18:98:55:24:71:c5:bc:da:ea:d2:8a:fe:16:c0:88: 4a:46:19:fd:74:01:18:70:0a:e1:be:50:b0:c7:c7: 1c:16:6b:34:57:aa:c6:09:72:d3:8c:ed:db:71:89: 76:3b:43:6c:75:b0:41:ef:cb:bb:c7:ff:d4:17:49: 9b:0b:a7:7e:c2:ec:e7:92:aa:98:ae:6c:3c:87:56: b5:7b:bc:7e:d5:f7:6a:bf:2a:c9:fd:3d:cd:27:0a: dc:b6:7a:4f:3e:e8:b3:c4:55:2a:8b:a0:6b:94:c2: 68:e5:1b:d1:a1:b8:49:95:c1:6d:63:e7:c3:30:96: 4a:25:15:18:fb:de:c2:44:48:23:7a:cc:9c:bf:d9: 84:d4:a9:da:c5:96:4a:ef:65:9a:d9:c8:c7:12:d1: bb:d7:4a:d9:0d:75:11:39:cd:ee:b8:01:87:4b:32: 24:2f:19:77:7b:3e:c9:37:82:b5:9f:47:f6:8d:ba: 1c:56:a9:03:b5:6f:1e:5e:6e:7e:92:bd:88:dc:09: 44:9f:04:d0:52:f0:24:52:cf:1f:88:0c:1a:24:f0: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:07:F6:4A:41:50:99:23:71:BA:26:C3:A8:06:0E:E2:7C:C4:BD:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:69:55:06:86:c6:ab:7b:95:95:e3:9b:eb:fb:4c:f5:ef:54: 7d:e1:b8:b7:cf:05:46:07:b2:a4:45:bd:77:91:a3:df:d0:12: d8:10:b8:46:06:37:60:ff:d6:2b:67:23:6a:57:47:f0:ca:9d: 00:33:c3:bd:f0:c4:fa:a7:34:5f:a5:ac:2e:a7:f6:c4:d9:52: 86:c3:8c:04:66:b6:88:ad:e3:d8:93:7c:d5:b1:91:a2:1c:f9: 50:9f:e2:a3:fe:32:43:db:fa:28:2e:3a:e5:ea:ac:1f:0a:c1: 78:aa:55:93:a9:3e:d1:68:0d:74:88:1f:2d:e9:e0:a8:94:d7: 04:b8:67:75:46:6c:bb:6c:92:18:9a:44:e5:dc:c2:4b:85:de: 3d:f9:c4:15:89:69:9f:32:41:8b:0c:81:e6:5c:cc:09:13:e5: 7e:64:f5:b6:27:eb:76:f7:bd:12:fd:bc:45:e5:38:5d:4a:76: 7d:d7:31:da:91:9b:a7:17:35:59:6a:3e:da:fb:2d:ee:58:90: b7:ec:b5:77:2b:cf:d9:08:e7:13:58:41:3a:c4:13:c5:6b:28: 6d:30:13:67:30:68:12:1c:bf:c2:b1:76:8c:06:37:88:61:e8: 98:c2:49:df:ec:ce:95:6a:0d:c4:0d:8a:b4:d4:b6:df:ec:33: 87:2e:b0:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vK5Tj1wsIQE1pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MzBjMWJkZDItMWM1My00NTJkLTg5NzMtZmU4MjgwMDg4MGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd6hN4Wur65H2UY01NNIvGuslwD0Tkrw2a5r I5m9sv1yBYkfVo/EUODPtqcYmFUkccW82urSiv4WwIhKRhn9dAEYcArhvlCwx8cc Fms0V6rGCXLTjO3bcYl2O0NsdbBB78u7x//UF0mbC6d+wuznkqqYrmw8h1a1e7x+ 1fdqvyrJ/T3NJwrctnpPPuizxFUqi6BrlMJo5RvRobhJlcFtY+fDMJZKJRUY+97C REgjesycv9mE1KnaxZZK72Wa2cjHEtG710rZDXUROc3uuAGHSzIkLxl3ez7JN4K1 n0f2jbocVqkDtW8eXm5+kr2I3AlEnwTQUvAkUs8fiAwaJPDgaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwH9kpBUJkjcbomw6gGDuJ8xL1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjY4YmE1N2YtNWU0ZC0z M2QyLTk2MGQtNTdiNDE3ZDA1MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEppVQaGxqt7lZXjm+v7TPXvVH3huLfPBUYHsqRFvXeRo9/QEtgQuEYG N2D/1itnI2pXR/DKnQAzw73wxPqnNF+lrC6n9sTZUobDjARmtoit49iTfNWxkaIc +VCf4qP+MkPb+iguOuXqrB8KwXiqVZOpPtFoDXSIHy3p4KiU1wS4Z3VGbLtskhia ROXcwkuF3j35xBWJaZ8yQYsMgeZczAkT5X5k9bYn63b3vRL9vEXlOF1Kdn3XMdqR m6cXNVlqPtr7Le5YkLfstXcrz9kI5xNYQTrEE8VrKG0wE2cwaBIcv8KxdowGN4hh 6JjCSd/szpVqDcQNirTUtt/sM4cusEw= -----END CERTIFICATE-----Generated at Sun Oct 19 23:58:12 2025 by rpki-client