$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36004745-694e-3446-88c5-0d0217e06d6f.roa File: 36004745-694e-3446-88c5-0d0217e06d6f.roa (raw, json) Hash identifier: 7bANUdHBJ8eFUAeYxq+I6alOxx1xnhrrJNVzaH9tJFc= Subject key identifier: 80:92:CC:CE:8A:EF:5B:72:2B:66:73:98:81:38:12:5E:E3:A5:CE:24 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC142FE62185B3500555600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36004745-694e-3446-88c5-0d0217e06d6f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.148.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:42:fe:62:18:5b:35:00:55:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6e785ab2-6497-4180-b971-8528bcd42dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:47:46:4e:cb:45:72:c1:9e:3d:3b:95:46: c1:12:56:73:eb:dc:96:cd:fb:fb:45:a4:6e:32:65: f6:ec:ea:08:41:6c:4b:9d:b2:41:dd:17:c6:f5:ca: 5f:0e:51:ed:f7:26:89:71:3f:2f:3b:6c:bf:49:ce: 0c:60:9d:55:d8:96:13:3a:ba:f7:62:98:67:6c:6b: 95:a5:ad:2a:28:32:4f:3e:88:ee:f0:76:d7:dd:0f: af:6a:19:f5:72:29:ee:64:86:1d:64:22:1f:ea:0b: bc:e6:b7:7f:81:e8:37:b8:de:10:d1:c3:7f:98:a2: e2:78:74:f1:f8:f6:7a:be:e8:19:c5:2f:59:dd:7d: 70:40:c2:47:07:f3:9c:33:44:f5:69:71:93:d2:af: 5a:83:cd:de:4a:9a:bd:fe:cf:07:3e:69:db:84:a2: 90:7a:80:fc:1f:57:15:4a:71:16:7d:46:c2:50:8b: 8b:5d:12:a1:96:8f:7e:9d:4c:91:a2:c7:d3:9b:a6: 22:c3:23:98:ec:74:91:be:98:ac:ba:4d:fc:46:cd: af:45:74:c9:be:30:a9:00:c3:7d:c9:c7:95:38:14: 72:b5:ff:2c:98:4d:e2:e1:7e:c6:c4:69:d4:aa:bf: 2c:70:e7:0f:76:41:ed:f0:65:be:a8:1b:d9:08:5f: 28:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:92:CC:CE:8A:EF:5B:72:2B:66:73:98:81:38:12:5E:E3:A5:CE:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36004745-694e-3446-88c5-0d0217e06d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:62:67:08:4d:f9:73:cf:dd:2c:77:f4:cd:67:66:bb:9c:08: 86:ab:08:ce:36:92:3c:0f:3e:2a:03:31:9b:bf:37:91:a8:99: 44:df:70:62:a7:df:8c:e1:02:69:bb:03:e9:d7:a8:cd:b9:f2: f6:5d:11:08:c2:0f:ad:87:a8:a0:cf:b6:00:57:94:06:bf:bd: 44:d0:46:42:cc:24:df:fe:5c:4a:28:15:a5:91:3f:c9:55:54: 3d:27:3e:9e:57:de:3a:3c:c2:ab:c2:0a:ff:06:d5:02:2d:d2: 32:63:f1:a8:eb:56:16:c8:89:73:5a:17:55:dd:5b:8c:3b:be: 9e:5a:df:88:7f:a2:d3:5c:a8:7a:b9:d4:f1:a3:16:57:6d:5e: ce:d2:c7:ab:5a:80:38:4a:38:8d:d0:0a:ea:01:69:9c:62:24: 75:0f:c0:44:f6:9e:1f:a0:91:84:69:71:74:0c:12:eb:07:0e: 8f:f9:e9:3d:57:c9:aa:90:d6:38:27:cc:c4:48:4a:ab:fa:28: 62:cd:6c:2c:f5:93:ce:3c:c3:68:48:5f:d5:ca:50:e8:b2:0c: 7b:1e:98:1e:6a:99:0b:97:83:c5:bc:a6:8b:55:b6:b6:fc:2f: 85:ba:84:c6:58:23:fb:6e:aa:40:3a:a1:44:82:1b:7b:d6:eb: 6f:a7:7c:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUL+YhhbNQBVVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmU3ODVhYjItNjQ5Ny00MTgwLWI5NzEtODUyOGJjZDQyZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eVHRk7LRXLBnj07lUbBElZz69yWzfv7RaRu MmX27OoIQWxLnbJB3RfG9cpfDlHt9yaJcT8vO2y/Sc4MYJ1V2JYTOrr3YphnbGuV pa0qKDJPPoju8HbX3Q+vahn1cinuZIYdZCIf6gu85rd/geg3uN4Q0cN/mKLieHTx +PZ6vugZxS9Z3X1wQMJHB/OcM0T1aXGT0q9ag83eSpq9/s8HPmnbhKKQeoD8H1cV SnEWfUbCUIuLXRKhlo9+nUyRosfTm6YiwyOY7HSRvpisuk38Rs2vRXTJvjCpAMN9 yceVOBRytf8smE3i4X7GxGnUqr8scOcPdkHt8GW+qBvZCF8oCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICSzM6K71tyK2ZzmIE4El7jpc4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzYwMDQ3NDUtNjk0ZS0z NDQ2LTg4YzUtMGQwMjE3ZTA2ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFiZwhN+XPP3Sx39M1nZrucCIarCM42kjwPPioDMZu/N5GomUTfcGKn 34zhAmm7A+nXqM258vZdEQjCD62HqKDPtgBXlAa/vUTQRkLMJN/+XEooFaWRP8lV VD0nPp5X3jo8wqvCCv8G1QIt0jJj8ajrVhbIiXNaF1XdW4w7vp5a34h/otNcqHq5 1PGjFldtXs7Sx6tagDhKOI3QCuoBaZxiJHUPwET2nh+gkYRpcXQMEusHDo/56T1X yaqQ1jgnzMRISqv6KGLNbCz1k848w2hIX9XKUOiyDHsemB5qmQuXg8W8potVtrb8 L4W6hMZYI/tuqkA6oUSCG3vW62+nfIk= -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:13 2025 by rpki-client