$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/11f97db4-159a-3965-b1fe-e293233a3d56.roa File: 11f97db4-159a-3965-b1fe-e293233a3d56.roa (raw, json) Hash identifier: CdQz3yOQGFYYq9jETJ5HNjFsZw5hkAmbAAw7jt6AEOI= Subject key identifier: 2D:B4:CA:FE:1B:DE:A6:B2:FD:6C:62:56:33:8A:52:9A:0A:99:E2:2C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC1427DE696D6B16F0BB600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/11f97db4-159a-3965-b1fe-e293233a3d56.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.148.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:42:7d:e6:96:d6:b1:6f:0b:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b900a733-383b-47c0-8689-cfc0d6b56499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:bf:b5:58:53:c3:5f:66:10:6b:9d:c6:93: 1d:11:7f:0d:76:31:ac:a6:fa:3b:38:8a:4c:75:76: b7:ce:3a:95:bf:2a:3e:71:dc:9b:39:48:61:84:6f: c6:4b:d2:a5:83:a7:e4:60:e3:24:38:9c:59:76:ed: 58:37:65:a8:48:27:46:5e:fb:93:21:05:6e:61:0a: 0c:63:ba:65:7e:33:be:95:2e:04:e3:d7:22:97:d8: 8f:21:05:dc:d4:6a:9a:27:2d:65:03:06:ac:b8:81: e7:5e:23:34:40:35:1f:e5:9b:31:24:93:d8:3f:20: d8:ef:48:51:69:48:be:5f:06:e5:1a:99:b9:e2:5a: 07:39:2d:42:15:3b:fb:9f:12:0b:d5:35:df:51:db: 21:ca:74:00:ef:37:f9:27:22:17:5b:63:92:fd:b0: 56:5a:96:e2:19:c8:a6:5b:c4:39:2c:ef:4e:58:91: c8:e2:bd:53:8c:67:7b:4a:d7:8c:87:50:a8:c7:77: 8a:68:62:52:5a:03:1a:e4:2b:7a:95:5d:4b:0a:45: eb:b6:b9:26:3e:90:a8:c6:3b:f8:23:9b:2c:2d:37: 9d:cb:f1:50:20:36:5a:75:12:a6:06:67:09:5a:3d: cd:eb:1d:bf:73:0f:56:97:e7:77:5a:17:32:6a:57: 54:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B4:CA:FE:1B:DE:A6:B2:FD:6C:62:56:33:8A:52:9A:0A:99:E2:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/11f97db4-159a-3965-b1fe-e293233a3d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:11:ae:ee:fa:fa:80:ea:8f:09:f8:f3:74:a3:96:69:4e:0f: a1:7e:6a:5c:e6:ab:88:66:45:a2:3d:b7:41:8d:2d:c5:48:a9: 27:bc:0f:33:16:2c:e4:1e:7b:e1:13:e0:b1:dc:b2:48:bb:22: e1:e9:bd:d8:61:9f:19:42:37:d9:1d:c6:b3:17:79:8b:c4:6d: e7:d8:9e:05:46:69:45:db:a7:04:21:f9:7a:c2:0a:e2:6b:b0: 1f:8d:41:d2:0e:87:b2:60:5c:ab:1b:10:43:b1:e3:57:0d:cc: 98:be:86:f3:8d:4d:3b:f8:6c:99:54:cf:c0:8e:49:54:78:28: e7:0b:7e:23:1d:82:5a:04:bb:e8:a0:75:2b:7d:34:d5:14:71: f7:ab:06:f4:e9:bc:47:62:35:ee:3a:3f:c4:b5:75:fc:e9:0c: fc:ba:02:0f:80:26:0b:ed:93:ca:08:72:e4:06:b1:8e:e3:78: 80:03:e2:6d:c5:1c:f1:33:d5:a0:dd:af:d8:90:ca:25:01:21: f0:d9:80:23:53:0b:f2:5e:4d:96:20:c9:b0:1e:0c:db:f2:7d: e1:5f:de:c0:12:52:8b:76:6d:9a:20:1f:06:62:84:93:67:89: e4:0e:f7:6a:ab:f2:89:3f:f8:57:10:49:25:af:51:20:1b:c2: 6a:c9:f9:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUJ95pbWsW8LtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjkwMGE3MzMtMzgzYi00N2MwLTg2ODktY2ZjMGQ2YjU2NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBq/tVhTw19mEGudxpMdEX8NdjGspvo7OIpM dXa3zjqVvyo+cdybOUhhhG/GS9Klg6fkYOMkOJxZdu1YN2WoSCdGXvuTIQVuYQoM Y7plfjO+lS4E49cil9iPIQXc1GqaJy1lAwasuIHnXiM0QDUf5ZsxJJPYPyDY70hR aUi+XwblGpm54loHOS1CFTv7nxIL1TXfUdshynQA7zf5JyIXW2OS/bBWWpbiGcim W8Q5LO9OWJHI4r1TjGd7SteMh1Cox3eKaGJSWgMa5Ct6lV1LCkXrtrkmPpCoxjv4 I5ssLTedy/FQIDZadRKmBmcJWj3N6x2/cw9Wl+d3WhcyaldUgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC20yv4b3qay/WxiVjOKUpoKmeIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTFmOTdkYjQtMTU5YS0z OTY1LWIxZmUtZTI5MzIzM2EzZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoRru76+oDqjwn483SjlmlOD6F+alzmq4hmRaI9t0GNLcVIqSe8DzMW LOQee+ET4LHcski7IuHpvdhhnxlCN9kdxrMXeYvEbefYngVGaUXbpwQh+XrCCuJr sB+NQdIOh7JgXKsbEEOx41cNzJi+hvONTTv4bJlUz8COSVR4KOcLfiMdgloEu+ig dSt9NNUUcferBvTpvEdiNe46P8S1dfzpDPy6Ag+AJgvtk8oIcuQGsY7jeIAD4m3F HPEz1aDdr9iQyiUBIfDZgCNTC/JeTZYgybAeDNvyfeFf3sASUot2bZogHwZihJNn ieQO92qr8ok/+FcQSSWvUSAbwmrJ+ZY= -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:57 2025 by rpki-client