$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1e84049c-02fb-383f-a24f-fe85ca0d74ae.roa File: 1e84049c-02fb-383f-a24f-fe85ca0d74ae.roa (raw, json) Hash identifier: pGzlfKnVIdmj1R5Hqbe1ub5NkGBfY0MWY5TlChaXSP0= Subject key identifier: EA:F5:4D:5C:F1:47:2A:3C:B0:25:2A:34:9D:5D:51:8D:86:0B:9B:70 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AE461278AFE2B432E8A3CC000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1e84049c-02fb-383f-a24f-fe85ca0d74ae.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 203 IP address blocks: 20.148.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:27:8a:fe:2b:43:2e:8a:3c:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=1f35c01f-fcdd-4086-ad74-248f9d1b78a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d2:77:35:e1:1a:af:78:f8:7a:c5:6d:73:36: 59:fa:58:7f:c2:0a:f5:d2:5e:8c:98:b8:f9:1d:8b: 9c:4d:24:91:b3:f5:9b:73:90:ca:ce:8d:97:8d:c6: ec:ca:e6:9e:8a:f4:1f:80:19:cb:d5:6c:86:06:d4: f4:35:c0:9f:83:f0:f3:89:b1:56:88:95:d8:ad:1b: cd:5c:5f:db:b9:5b:da:e6:62:3a:64:5a:e6:64:2a: ad:50:92:4d:d0:52:18:16:90:db:06:63:1e:0c:70: 62:46:73:9d:ae:b9:18:b3:3e:22:74:8f:8f:43:05: 21:c7:59:8f:89:1a:6a:dc:53:58:b2:d5:52:63:79: df:03:d0:6a:61:70:49:23:3d:05:fc:92:dd:54:7e: bf:5b:61:93:08:a8:90:3d:70:a5:ec:31:48:a5:2a: 63:3f:c0:9d:e4:46:c7:73:71:3e:a5:45:5c:68:31: ea:fb:53:e9:9a:c6:a0:fa:77:ca:d2:fe:d8:49:fa: f1:4a:44:4b:e4:98:8b:a4:e7:43:e6:e8:11:0e:a4: 67:f3:3b:8f:62:58:bc:18:e7:ec:19:e8:72:bc:cb: ae:2d:d7:ec:76:4f:bd:00:1f:03:7a:ea:a8:44:bc: d1:5d:cc:7d:bb:a8:f1:21:09:cb:92:8a:e1:d6:04: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F5:4D:5C:F1:47:2A:3C:B0:25:2A:34:9D:5D:51:8D:86:0B:9B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1e84049c-02fb-383f-a24f-fe85ca0d74ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:63:a3:83:27:65:13:bc:1e:67:9f:d3:5e:73:d4:b1:8e:8f: e9:59:14:7f:fb:26:3d:64:1a:82:dc:11:8c:75:3a:bf:d0:c1: a1:e6:e8:3c:78:1c:a5:f3:c5:41:e2:1a:53:7c:76:7c:7a:91: f3:e8:32:47:2b:af:07:08:de:86:e6:12:b2:82:ea:3b:ed:78: 55:fb:e0:76:c8:78:03:6c:43:2d:09:2a:fb:49:89:b6:c5:30: 96:62:14:7d:e4:d3:c4:09:18:21:ff:fd:03:59:93:39:4d:76: 7b:d1:6f:e5:ef:19:65:99:34:ab:56:ce:bd:17:d2:e4:65:17: 0d:9f:d0:9d:f7:4c:1a:2b:c2:d7:62:80:ed:f2:dd:eb:2d:b8: 1d:2c:50:d3:cc:fd:39:87:97:92:c0:30:e3:9a:9a:6d:d9:40: e5:97:b2:c4:62:d0:d4:bc:76:c0:f9:ad:d4:6f:3a:43:67:de: 6e:c6:0f:ea:ef:e2:a4:55:96:95:e0:34:f0:71:a4:e7:3d:51: d5:ae:2e:3d:91:91:5f:5d:b1:5e:8f:13:c3:1c:8e:94:41:56: 8a:46:21:92:59:43:b1:73:9a:79:bb:4e:a1:6c:2e:f6:a3:13: e7:45:bf:2e:d6:17:b5:94:c3:01:c7:1c:9f:69:12:6e:ba:a7: fc:54:e3:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSeK/itDLoo8wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MWYzNWMwMWYtZmNkZC00MDg2LWFkNzQtMjQ4ZjlkMWI3OGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tJ3NeEar3j4esVtczZZ+lh/wgr10l6MmLj5 HYucTSSRs/Wbc5DKzo2XjcbsyuaeivQfgBnL1WyGBtT0NcCfg/DzibFWiJXYrRvN XF/buVva5mI6ZFrmZCqtUJJN0FIYFpDbBmMeDHBiRnOdrrkYsz4idI+PQwUhx1mP iRpq3FNYstVSY3nfA9BqYXBJIz0F/JLdVH6/W2GTCKiQPXCl7DFIpSpjP8Cd5EbH c3E+pUVcaDHq+1Ppmsag+nfK0v7YSfrxSkRL5JiLpOdD5ugRDqRn8zuPYli8GOfs GehyvMuuLdfsdk+9AB8DeuqoRLzRXcx9u6jxIQnLkorh1gSa5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOr1TVzxRyo8sCUqNJ1dUY2GC5twMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMWU4NDA0OWMtMDJmYi0z ODNmLWEyNGYtZmU4NWNhMGQ3NGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFjo4MnZRO8Hmef015z1LGOj+lZFH/7Jj1kGoLcEYx1Or/QwaHm6Dx4 HKXzxUHiGlN8dnx6kfPoMkcrrwcI3obmErKC6jvteFX74HbIeANsQy0JKvtJibbF MJZiFH3k08QJGCH//QNZkzlNdnvRb+XvGWWZNKtWzr0X0uRlFw2f0J33TBorwtdi gO3y3estuB0sUNPM/TmHl5LAMOOamm3ZQOWXssRi0NS8dsD5rdRvOkNn3m7GD+rv 4qRVlpXgNPBxpOc9UdWuLj2RkV9dsV6PE8McjpRBVopGIZJZQ7Fzmnm7TqFsLvaj E+dFvy7WF7WUwwHHHJ9pEm66p/xU444= -----END CERTIFICATE-----Generated at Sat Aug 23 21:52:23 2025 by rpki-client