$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa File: 32054d0b-077d-3e96-8773-c1690e50a953.roa (raw, json) Hash identifier: Ms5jEq1CUbAUpIYcFZtrikmdc8Iw5SuOWgVm7a6Yz9Q= Subject key identifier: 38:69:56:17:F2:A1:E9:5A:4B:AA:A5:2C:65:70:01:AC:CB:F8:01:AD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900CE314866167A9436F7C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 202 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:ce:31:48:66:16:7a:94:36:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=4b43c622-dc20-44fb-a7c9-d996b969eca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4a:56:e4:61:b8:39:c1:72:6f:c2:fa:d8:bc: f8:0f:49:86:73:1e:01:e6:a9:45:49:3b:36:87:ce: 65:ff:b5:6a:f4:d8:78:62:d8:d2:32:e4:44:16:f4: 01:28:9f:83:b5:60:37:86:a1:65:92:9a:05:f0:cd: e7:d0:fc:4f:e2:2b:c2:aa:cf:44:72:c7:72:9b:c5: 2a:4d:20:72:4e:ae:d8:84:a8:38:0e:68:d6:19:cb: 1e:3f:53:58:cd:5d:05:75:2f:3f:7d:e4:c4:9c:bb: f0:75:3c:89:d8:6d:31:25:97:a0:30:10:1f:9f:2c: a4:56:cf:87:44:6e:a6:d7:5f:af:b2:3f:a0:7d:59: b8:aa:3e:8c:73:3b:87:7f:6e:d0:8a:81:5a:0f:47: e4:00:29:d7:b2:99:b3:77:ef:4f:0d:e7:47:dd:8a: be:10:d0:aa:2e:7f:58:a6:88:e8:61:1a:a9:23:ef: 9c:33:a4:cb:d7:bc:15:d4:e2:07:44:01:55:6c:6b: ea:1d:2e:64:cc:17:77:1b:46:f2:f6:98:1b:d7:65: ea:6a:30:7a:19:18:3a:56:e6:e1:88:9c:9e:11:d8: 54:87:ef:0f:d1:c5:de:4b:33:53:1d:0b:da:06:cb: 54:48:49:9e:3e:1e:4e:50:71:57:d6:ed:59:77:bc: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:69:56:17:F2:A1:E9:5A:4B:AA:A5:2C:65:70:01:AC:CB:F8:01:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:01:f3:f5:68:2a:91:36:90:7c:2a:67:cc:7a:46:67:95:0f: 06:c6:9b:df:49:cf:47:4f:0c:e8:79:96:ff:28:71:b3:8b:11: c9:f9:21:34:94:9d:a3:7b:9b:e1:ca:ff:b5:69:33:8e:9e:7f: 07:88:bd:04:89:40:66:39:1a:52:89:2d:0d:63:db:4f:06:3d: 3e:71:b2:36:bf:6c:73:90:9e:1f:cb:df:83:48:c2:33:f0:f5: a5:9a:4d:21:f0:8d:55:13:e3:29:42:73:ee:52:0b:77:0c:b1: 73:9b:5f:25:1b:42:55:87:1f:cb:d8:bc:9d:35:1a:98:f4:31: 40:ae:01:55:58:c1:cf:dc:0b:c5:4b:9d:3a:93:9c:42:b7:ea: bd:fc:c5:08:e2:eb:72:aa:21:e7:c3:5e:77:83:1a:41:1c:64: 8c:aa:bf:51:10:96:fe:3f:9b:18:ae:bc:a0:37:9b:bc:79:e7: 11:d3:a1:60:f0:e2:32:e9:f9:f6:80:21:ae:02:2a:c5:4b:fe: 5d:11:34:7b:6c:9a:23:28:85:f4:65:00:4c:4a:6a:56:ed:9b: 80:7f:e1:d3:63:51:11:d4:ca:10:2e:5d:90:34:5d:4e:ca:9d: 64:d6:0f:a7:34:ab:75:cc:0f:71:d6:ea:46:08:38:36:58:77: 14:fc:92:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAM4xSGYWepQ298AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NGI0M2M2MjItZGMyMC00NGZiLWE3YzktZDk5NmI5NjllY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60pW5GG4OcFyb8L62Lz4D0mGcx4B5qlFSTs2 h85l/7Vq9Nh4YtjSMuREFvQBKJ+DtWA3hqFlkpoF8M3n0PxP4ivCqs9Ecsdym8Uq TSByTq7YhKg4DmjWGcseP1NYzV0FdS8/feTEnLvwdTyJ2G0xJZegMBAfnyykVs+H RG6m11+vsj+gfVm4qj6MczuHf27QioFaD0fkACnXspmzd+9PDedH3Yq+ENCqLn9Y pojoYRqpI++cM6TL17wV1OIHRAFVbGvqHS5kzBd3G0by9pgb12XqajB6GRg6Vubh iJyeEdhUh+8P0cXeSzNTHQvaBstUSEmePh5OUHFX1u1Zd7yqjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhpVhfyoelaS6qlLGVwAazL+AGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzIwNTRkMGItMDc3ZC0z ZTk2LTg3NzMtYzE2OTBlNTBhOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8B8/VoKpE2kHwqZ8x6RmeVDwbGm99Jz0dPDOh5lv8ocbOLEcn5ITSU naN7m+HK/7VpM46efweIvQSJQGY5GlKJLQ1j208GPT5xsja/bHOQnh/L34NIwjPw 9aWaTSHwjVUT4ylCc+5SC3cMsXObXyUbQlWHH8vYvJ01Gpj0MUCuAVVYwc/cC8VL nTqTnEK36r38xQji63KqIefDXneDGkEcZIyqv1EQlv4/mxiuvKA3m7x55xHToWDw 4jLp+faAIa4CKsVL/l0RNHtsmiMohfRlAExKalbtm4B/4dNjURHUyhAuXZA0XU7K nWTWD6c0q3XMD3HW6kYIODZYdxT8kl8= -----END CERTIFICATE-----Generated at Sun Aug 24 00:33:27 2025 by rpki-client