$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa File: 38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa (raw, json) Hash identifier: jPt1rwc+Sx9djWwTkuQmGhhMes8GXoXKnLxd96FNEpc= Subject key identifier: 2D:D3:0C:D7:F8:AF:3D:F8:5E:71:A5:B4:3F:9B:F9:27:29:2C:FE:B7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC141015479E4314FE70C40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3360 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:41:01:54:79:e4:31:4f:e7:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=fdfa8c31-d9af-4948-9667-74fa80a2296c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:6e:9b:d3:d2:00:c3:35:45:5a:c9:26:1a: 32:5c:6e:55:de:cb:3b:91:c0:b0:59:99:63:6f:1d: d8:64:ad:b8:ba:a8:8c:a2:44:d9:43:bd:c2:e2:7b: c7:7c:dd:dc:25:94:c6:45:e4:70:bf:54:43:bd:20: 60:9b:7f:f0:79:c6:f0:40:22:f6:4a:ad:96:e7:6c: c4:b8:c9:a7:91:c0:9e:44:49:a6:52:f1:b9:cc:87: 91:e2:36:45:fa:68:10:2c:b8:b4:66:26:97:0d:1e: b1:3b:bb:a8:72:53:08:f0:7c:57:3e:85:62:8e:c1: d2:75:fd:19:00:2e:eb:1e:a2:08:de:c5:a9:af:54: 2e:7f:d1:c2:60:dd:d0:65:ad:d3:1e:00:b6:0c:8a: a1:64:24:b1:db:09:fc:02:84:5c:69:4a:4b:48:c0: af:b0:96:e8:11:94:ec:20:96:72:aa:70:4b:7b:64: 3f:2f:31:3c:d4:33:d9:79:7e:94:4e:40:21:f6:4f: f7:42:67:0a:7b:17:04:3d:53:a7:3a:aa:97:88:ef: d9:23:e2:de:68:b9:e6:b5:10:fc:92:c1:82:ab:f0: 0b:93:fc:e8:13:e9:ac:3c:1b:0d:0e:6e:7d:5d:56: 8a:62:87:26:cc:88:e6:ed:1b:9c:97:32:1d:60:10: 51:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D3:0C:D7:F8:AF:3D:F8:5E:71:A5:B4:3F:9B:F9:27:29:2C:FE:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:72:af:2a:22:7d:16:86:be:29:ac:87:c0:f4:bf:fb:cf:f4: 2f:72:bb:61:a5:d9:1e:34:3f:0e:ba:8c:97:b0:98:0e:fc:61: ef:cc:85:e5:ae:92:22:28:02:d3:52:70:9e:3c:75:23:9d:00: b4:9d:79:09:8f:2f:7f:cb:fb:98:9d:52:5d:4d:6b:d8:42:7f: a7:e8:bb:15:90:11:7e:f1:95:a5:fc:e6:da:15:d6:f7:2c:ae: 8e:fb:a4:6e:e9:62:30:4d:39:b3:0e:9d:b2:ee:2c:a4:2d:24: 27:58:03:07:ba:8b:c0:ae:ff:3b:16:ae:23:4e:d3:42:8a:74: 0e:e9:d0:88:ce:aa:50:7f:98:09:e3:a4:c9:b3:1d:68:20:cc: 6e:17:c1:f0:6d:78:10:69:31:8a:14:7f:db:4b:e4:3c:2f:b8: df:d7:cf:88:ea:ea:01:e7:b0:72:a6:2f:4a:67:e0:2c:56:2b: 89:aa:ae:58:79:76:6c:fc:32:44:eb:63:97:36:46:df:52:28: 0d:db:df:c7:70:14:b4:9c:03:f1:c5:1e:ad:e1:4b:a6:f2:95: 05:40:ad:3e:fb:8e:38:fb:a2:83:73:c5:e7:d0:0d:58:0e:9e: 96:fc:fa:39:6a:a1:99:74:72:c7:5f:8b:61:b8:aa:9b:2a:f2: c6:ce:03:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUEBVHnkMU/nDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmRmYThjMzEtZDlhZi00OTQ4LTk2NjctNzRmYTgwYTIyOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr05um9PSAMM1RVrJJhoyXG5V3ss7kcCwWZlj bx3YZK24uqiMokTZQ73C4nvHfN3cJZTGReRwv1RDvSBgm3/wecbwQCL2Sq2W52zE uMmnkcCeREmmUvG5zIeR4jZF+mgQLLi0ZiaXDR6xO7uoclMI8HxXPoVijsHSdf0Z AC7rHqII3sWpr1Quf9HCYN3QZa3THgC2DIqhZCSx2wn8AoRcaUpLSMCvsJboEZTs IJZyqnBLe2Q/LzE81DPZeX6UTkAh9k/3QmcKexcEPVOnOqqXiO/ZI+LeaLnmtRD8 ksGCq/ALk/zoE+msPBsNDm59XVaKYocmzIjm7RuclzIdYBBR/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3TDNf4rz34XnGltD+b+ScpLP63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhmNWYyYzQtYzFiMS0z YmU4LWFhNmYtMmVkNzg3MTNiMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpyryoifRaGvimsh8D0v/vP9C9yu2Gl2R40Pw66jJewmA78Ye/MheWu kiIoAtNScJ48dSOdALSdeQmPL3/L+5idUl1Na9hCf6fouxWQEX7xlaX85toV1vcs ro77pG7pYjBNObMOnbLuLKQtJCdYAwe6i8Cu/zsWriNO00KKdA7p0IjOqlB/mAnj pMmzHWggzG4XwfBteBBpMYoUf9tL5DwvuN/Xz4jq6gHnsHKmL0pn4CxWK4mqrlh5 dmz8MkTrY5c2Rt9SKA3b38dwFLScA/HFHq3hS6bylQVArT77jjj7ooNzxefQDVgO npb8+jlqoZl0csdfi2G4qpsq8sbOA4w= -----END CERTIFICATE-----Generated at Sat Aug 23 20:09:35 2025 by rpki-client