$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa File: 0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa (raw, json) Hash identifier: 5308/igRsZbF6AXgkcigScUeJuvVITSKnIaARraFsjc= Subject key identifier: 21:60:62:4C:39:72:8F:BF:FF:63:89:0C:E7:A6:6A:90:AA:62:9C:30 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC1425995B47403B0E95180 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 203 IP address blocks: 20.148.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:42:59:95:b4:74:03:b0:e9:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=95e66e4c-9429-4f3e-a4dd-5d8461b0c9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:51:36:65:06:a7:06:cd:3c:2c:fb:59:e6:99: 51:a0:79:00:07:a9:79:7d:f3:2e:c8:7a:e1:ac:40: 2e:0d:ae:6a:9e:08:dc:c4:21:66:51:f4:21:c5:2a: 28:45:19:5b:45:08:fd:ec:c6:a4:24:89:3c:24:5c: fe:3b:4f:ba:17:7e:94:b0:34:67:31:d3:fd:d4:58: e9:ed:bf:86:ca:2f:cb:c3:f1:27:3d:ca:c2:6d:5a: 1b:2b:b0:01:cf:38:db:6a:3c:aa:ac:c0:38:78:8c: 07:34:70:76:73:de:28:3e:57:81:2f:4d:f0:f0:85: dc:cd:3a:aa:00:8c:d0:69:e6:5c:50:c3:b9:68:6b: a2:a9:d2:f3:75:12:54:ed:6e:00:43:af:19:eb:bb: 4c:7b:5b:bf:15:08:61:98:bc:d5:4f:0b:42:ec:64: 8a:a5:2c:fe:fc:2c:d8:9c:32:d0:c6:63:81:59:6a: 65:a7:2b:f9:c8:30:27:cb:b4:f2:75:51:d4:d8:8f: 35:fc:ba:14:b8:09:a3:5f:9e:5e:9f:60:fc:1e:d0: 26:64:75:03:a0:22:c6:66:60:06:97:bd:6c:27:77: 25:76:0c:ab:23:d5:4e:0a:39:00:e8:42:7c:54:db: 08:c8:c8:a8:3b:cc:60:2e:ed:c4:d1:94:24:f5:84: 79:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:60:62:4C:39:72:8F:BF:FF:63:89:0C:E7:A6:6A:90:AA:62:9C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:30:13:7a:f3:2a:92:88:98:16:34:67:51:29:d1:78:ab:c4: 6b:ed:d2:13:ee:3e:f2:30:b7:fb:1a:7b:78:29:02:91:6e:0d: 40:c5:4b:7b:94:b4:19:42:1c:50:35:df:36:a4:80:d9:1d:23: 5a:f7:78:da:1e:15:2d:17:19:ae:4b:4d:4d:29:84:73:0a:02: fc:dc:c5:4a:fd:08:e9:2c:e8:2f:da:37:11:05:b0:dd:25:6d: 00:5a:f4:47:5b:02:21:e3:f3:3b:5a:60:9b:64:2d:5e:6e:62: c4:9f:c7:fe:9f:cd:31:1c:40:df:71:3c:1c:be:08:1d:fc:fb: de:69:8c:a7:c1:45:7e:7c:f2:40:f5:aa:fc:cf:e7:e7:9b:70: 05:09:1f:71:07:2b:2e:60:77:c2:7c:2d:23:df:3a:e0:91:56: ed:b6:79:60:ee:f0:5f:04:53:a3:c2:62:24:29:78:7c:df:96: 50:5b:f1:8d:24:94:f6:61:0f:c9:52:cd:8a:ed:3d:b3:cc:a8: 90:8b:21:a3:72:80:a6:b7:4f:c4:90:04:93:a1:6e:45:b5:59: a2:5e:a9:92:6a:f8:d5:f0:1c:60:36:97:02:70:61:93:12:06: fc:8c:d6:b5:e1:09:1c:41:e8:f4:f1:ea:7d:ff:85:dd:84:69: 8b:a5:a8:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUJZlbR0A7DpUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTVlNjZlNGMtOTQyOS00ZjNlLWE0ZGQtNWQ4NDYxYjBjOWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1E2ZQanBs08LPtZ5plRoHkAB6l5ffMuyHrh rEAuDa5qngjcxCFmUfQhxSooRRlbRQj97MakJIk8JFz+O0+6F36UsDRnMdP91Fjp 7b+Gyi/Lw/EnPcrCbVobK7ABzzjbajyqrMA4eIwHNHB2c94oPleBL03w8IXczTqq AIzQaeZcUMO5aGuiqdLzdRJU7W4AQ68Z67tMe1u/FQhhmLzVTwtC7GSKpSz+/CzY nDLQxmOBWWplpyv5yDAny7TydVHU2I81/LoUuAmjX55en2D8HtAmZHUDoCLGZmAG l71sJ3cldgyrI9VOCjkA6EJ8VNsIyMioO8xgLu3E0ZQk9YR5UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFgYkw5co+//2OJDOemapCqYpwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGZhMWFmNTMtY2U5Yi0z Y2I3LWFkNmEtNzZkNDlhZGQ3ZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcwE3rzKpKImBY0Z1Ep0XirxGvt0hPuPvIwt/sae3gpApFuDUDFS3uU tBlCHFA13zakgNkdI1r3eNoeFS0XGa5LTU0phHMKAvzcxUr9COks6C/aNxEFsN0l bQBa9EdbAiHj8ztaYJtkLV5uYsSfx/6fzTEcQN9xPBy+CB38+95pjKfBRX588kD1 qvzP5+ebcAUJH3EHKy5gd8J8LSPfOuCRVu22eWDu8F8EU6PCYiQpeHzfllBb8Y0k lPZhD8lSzYrtPbPMqJCLIaNygKa3T8SQBJOhbkW1WaJeqZJq+NXwHGA2lwJwYZMS BvyM1rXhCRxB6PTx6n3/hd2EaYulqDg= -----END CERTIFICATE-----Generated at Sat Aug 23 20:15:30 2025 by rpki-client