$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/258b29f7-84bb-39c4-b9fe-d6a768b68c41.roa File: 258b29f7-84bb-39c4-b9fe-d6a768b68c41.roa (raw, json) Hash identifier: 8yCyl3c4dQ7aGmxpNjLcKG30t0Kndo9U/NmU7xxGAZo= Subject key identifier: 0F:8A:68:04:CC:46:3D:FC:78:E0:27:D7:8E:C7:45:99:E0:A8:DB:3F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC142ED03A621679EDFA500 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/258b29f7-84bb-39c4-b9fe-d6a768b68c41.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 4237 IP address blocks: 20.148.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:42:ed:03:a6:21:67:9e:df:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bb76752e-8b27-44c2-8c0d-d957e05ffb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:48:88:9f:a7:6b:76:3f:d2:6f:c9:f7:f6:d4: f3:24:87:07:8f:53:0c:df:39:b3:b8:78:d2:65:9e: de:24:5e:bd:d9:13:0a:6c:75:dd:94:c4:59:a1:fd: 3a:7d:60:36:ad:93:ae:31:e4:28:d5:c5:29:a3:a5: 5e:ee:16:a4:46:bd:39:4f:55:18:16:08:5d:1b:b7: 76:9b:8a:fd:29:13:59:51:1f:47:c5:be:aa:66:41: d1:bf:19:cc:d8:b6:cb:42:48:76:4a:58:89:3f:f7: 41:95:74:9e:69:a8:27:a4:61:84:4d:6f:ce:ff:fd: cb:86:34:9b:31:6a:68:69:99:cc:61:0a:a8:7f:fd: f3:b8:d8:75:f0:a9:88:25:11:71:13:78:8e:94:ee: 7a:53:ba:97:bf:74:08:b7:89:6f:7c:a5:92:90:b6: c0:6b:a9:d2:2a:98:cf:10:cf:c6:b3:0d:28:68:eb: d9:ae:a8:ad:bc:49:43:f4:47:dd:42:3d:db:92:30: b9:68:ee:3c:30:c2:1e:bb:1a:bf:a7:d2:98:40:ea: f5:99:7b:28:24:48:28:f7:64:6f:fe:32:18:f0:3b: 9e:ec:a5:a8:a2:e2:f4:c6:b0:b2:84:03:ed:95:07: da:eb:a2:1a:b4:a2:5b:ba:91:98:55:8d:ba:0f:10: e6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8A:68:04:CC:46:3D:FC:78:E0:27:D7:8E:C7:45:99:E0:A8:DB:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/258b29f7-84bb-39c4-b9fe-d6a768b68c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ad:b6:e5:f1:f3:59:50:4a:fc:de:0f:b5:76:44:31:9c:4a: 13:ba:f5:3d:5b:b7:1f:dd:bf:f3:c6:3e:8b:83:b5:07:05:32: 41:eb:8d:f6:a1:75:fe:77:75:dc:ae:60:75:d5:fb:bb:c0:cf: e6:02:4e:5b:3b:ec:3f:d9:ba:4f:5f:41:74:25:4b:54:6a:bc: 17:2d:7c:da:43:5e:2c:8f:02:0e:b8:4f:8e:31:15:a1:c1:31: a5:ce:8b:cb:16:c8:95:3b:48:b0:da:12:76:50:1f:31:21:40: be:3a:44:ce:b2:55:f0:88:7c:9a:80:10:c3:26:1b:6c:15:c0: aa:bf:0b:e9:82:6a:42:bf:b8:2f:eb:b4:45:2f:7f:ab:f2:af: c5:ba:e1:1c:f0:8d:4b:07:ff:12:48:6c:cb:e2:85:ce:99:c8: be:b1:97:9e:10:e6:dd:50:32:5b:0f:89:e4:3a:65:e8:7e:99: 52:4f:ec:ed:f0:d2:0f:44:10:80:2c:1d:cf:0f:d6:fd:28:6e: 6c:f9:d5:f8:f2:bc:21:8d:b5:14:c2:a4:3c:ee:95:86:4f:1b: 2d:c7:5d:f3:db:d5:fd:29:39:4d:f7:ba:fd:a1:50:20:21:a3: 2f:50:85:6b:04:70:19:fd:ab:e7:c3:21:32:55:27:4a:22:65: 25:19:68:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswULtA6YhZ57fpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmI3Njc1MmUtOGIyNy00NGMyLThjMGQtZDk1N2UwNWZmYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0iIn6drdj/Sb8n39tTzJIcHj1MM3zmzuHjS ZZ7eJF692RMKbHXdlMRZof06fWA2rZOuMeQo1cUpo6Ve7hakRr05T1UYFghdG7d2 m4r9KRNZUR9Hxb6qZkHRvxnM2LbLQkh2SliJP/dBlXSeaagnpGGETW/O//3LhjSb MWpoaZnMYQqof/3zuNh18KmIJRFxE3iOlO56U7qXv3QIt4lvfKWSkLbAa6nSKpjP EM/Gsw0oaOvZrqitvElD9EfdQj3bkjC5aO48MMIeuxq/p9KYQOr1mXsoJEgo92Rv /jIY8Due7KWoouL0xrCyhAPtlQfa66IatKJbupGYVY26DxDmDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+KaATMRj38eOAn147HRZngqNs/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjU4YjI5ZjctODRiYi0z OWM0LWI5ZmUtZDZhNzY4YjY4YzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADittuXx81lQSvzeD7V2RDGcShO69T1btx/dv/PGPouDtQcFMkHrjfah df53ddyuYHXV+7vAz+YCTls77D/Zuk9fQXQlS1RqvBctfNpDXiyPAg64T44xFaHB MaXOi8sWyJU7SLDaEnZQHzEhQL46RM6yVfCIfJqAEMMmG2wVwKq/C+mCakK/uC/r tEUvf6vyr8W64RzwjUsH/xJIbMvihc6ZyL6xl54Q5t1QMlsPieQ6Zeh+mVJP7O3w 0g9EEIAsHc8P1v0obmz51fjyvCGNtRTCpDzulYZPGy3HXfPb1f0pOU33uv2hUCAh oy9QhWsEcBn9q+fDITJVJ0oiZSUZaAU= -----END CERTIFICATE-----Generated at Sat Aug 23 20:11:06 2025 by rpki-client