$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa File: 032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa (raw, json) Hash identifier: YIcFWeRQ2r03WqS6KeE3ZTDasuqvrcXrx5W4knJFkqs= Subject key identifier: C1:C6:88:5B:58:9D:A2:98:AC:D3:DC:D7:B4:50:F8:A7:11:BC:2E:C9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584ADA9BCBA158D01E5991A2F600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 203 IP address blocks: 20.139.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:cb:a1:58:d0:1e:59:91:a2:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=fbae5a97-bb3f-4cf0-b19a-5e3d327f5a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a0:ac:62:2e:c0:45:cf:a0:ef:aa:de:bc:79: b0:74:41:0e:9e:3e:25:13:d1:91:45:df:9d:df:3b: 3f:bf:bc:89:9d:55:58:c2:28:c7:ce:f7:05:17:e0: 42:a7:b3:80:88:03:0f:23:72:cb:89:2c:80:ba:9f: 39:0d:b9:06:37:89:64:16:9c:2d:18:ae:c6:9e:b4: ce:3a:53:20:86:76:46:d6:9c:30:17:28:d1:85:22: e6:ab:ef:7c:69:84:9f:78:c7:be:bc:8d:5b:a1:1b: 91:c5:2d:37:7c:c4:4d:57:54:7c:9c:8b:e4:f0:c6: b1:33:a1:6a:b5:35:5a:f2:f2:69:df:2e:8c:96:c2: 1a:14:c9:ef:1d:18:0c:e6:b2:b1:26:d0:e3:80:1e: 62:c2:8f:c4:b3:2a:6e:c5:99:97:06:d7:c0:c1:52: 83:0c:f4:fa:58:e2:52:16:6d:e7:af:a5:b9:3f:2c: 94:60:f6:db:f9:99:b3:58:0a:50:a6:b1:b1:29:fe: b3:c2:34:4d:68:88:fb:99:31:7c:2c:bf:ca:fe:f2: b3:e8:60:f8:22:70:ae:19:99:31:1d:00:10:c3:8b: 5b:33:ac:7f:ad:48:df:95:bb:3f:b3:79:59:66:a7: 6d:cb:7a:3e:71:a9:d8:92:34:31:b3:73:08:a4:1d: a6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C6:88:5B:58:9D:A2:98:AC:D3:DC:D7:B4:50:F8:A7:11:BC:2E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:8d:08:8d:d7:94:44:d7:df:dd:77:9f:ba:8e:19:85:6c:6d: fc:ee:fc:22:50:b2:b9:d5:ac:26:bb:ee:55:18:5b:5e:6c:ce: fc:7f:01:de:d5:9a:07:01:22:70:82:77:c3:e5:9b:56:f4:30: b1:87:40:77:4b:e8:a9:9e:1a:81:6a:b8:61:ad:08:91:9e:3b: ed:8e:d3:d9:e1:1d:f2:0b:e7:d5:43:ea:e4:bb:f0:0c:ba:c5: 55:b5:9a:10:d3:2c:f3:1f:a7:b1:73:08:19:ac:08:74:9b:57: 12:15:d0:ef:d7:77:66:2f:86:e3:29:27:d9:ab:ca:98:7c:3c: 2f:b0:0c:dc:14:39:63:76:87:9f:18:d4:75:30:3e:66:a1:61: b2:2d:99:43:3c:66:31:0c:0e:c4:31:01:9e:19:7e:0f:df:69: 03:41:af:c3:22:53:46:bc:13:b0:12:e8:b1:c9:a8:11:11:10: 8a:84:c4:50:3d:82:c0:4b:33:33:22:ef:1a:a3:09:28:70:c4: d2:54:92:1a:36:39:13:ec:48:c5:95:56:7f:e6:b5:ee:ed:bb: 62:6c:6a:fd:b2:af:fc:34:ae:b9:32:cc:e8:73:ce:5f:ac:be: 4b:6d:5d:f9:8f:a2:76:c0:d7:5a:90:53:cc:25:e5:35:d0:59: 5f:2f:33:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8uhWNAeWZGi9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ZmJhZTVhOTctYmIzZi00Y2YwLWIxOWEtNWUzZDMyN2Y1YTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKCsYi7ARc+g76revHmwdEEOnj4lE9GRRd+d 3zs/v7yJnVVYwijHzvcFF+BCp7OAiAMPI3LLiSyAup85DbkGN4lkFpwtGK7GnrTO OlMghnZG1pwwFyjRhSLmq+98aYSfeMe+vI1boRuRxS03fMRNV1R8nIvk8MaxM6Fq tTVa8vJp3y6MlsIaFMnvHRgM5rKxJtDjgB5iwo/EsypuxZmXBtfAwVKDDPT6WOJS Fm3nr6W5PyyUYPbb+ZmzWApQprGxKf6zwjRNaIj7mTF8LL/K/vKz6GD4InCuGZkx HQAQw4tbM6x/rUjflbs/s3lZZqdty3o+canYkjQxs3MIpB2mqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHGiFtYnaKYrNPc17RQ+KcRvC7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDMyZWM3YjUtNTBiYy0z YTllLWJhZjAtNmJkNGQ4YWMxZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGNCI3XlETX3913n7qOGYVsbfzu/CJQsrnVrCa77lUYW15szvx/Ad7V mgcBInCCd8Plm1b0MLGHQHdL6KmeGoFquGGtCJGeO+2O09nhHfIL59VD6uS78Ay6 xVW1mhDTLPMfp7FzCBmsCHSbVxIV0O/Xd2YvhuMpJ9mryph8PC+wDNwUOWN2h58Y 1HUwPmahYbItmUM8ZjEMDsQxAZ4Zfg/faQNBr8MiU0a8E7AS6LHJqBEREIqExFA9 gsBLMzMi7xqjCShwxNJUkho2ORPsSMWVVn/mte7tu2Jsav2yr/w0rrkyzOhzzl+s vkttXfmPonbA11qQU8wl5TXQWV8vM/8= -----END CERTIFICATE-----Generated at Sat Aug 23 20:16:13 2025 by rpki-client