$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/446e2fb5-4ae1-350c-ac28-e9a2445d589d.roa File: 446e2fb5-4ae1-350c-ac28-e9a2445d589d.roa (raw, json) Hash identifier: 2qBxI9rngSGcRP0qbwimD5Lf2rqUCuf/B2yKvZdMt/Y= Subject key identifier: 05:AC:C9:4C:C9:B6:B5:67:B0:25:90:F9:A2:D3:22:11:5C:95:52:F6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC1419ABE1A34479D1CBCC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/446e2fb5-4ae1-350c-ac28-e9a2445d589d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3360 IP address blocks: 20.132.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:41:9a:be:1a:34:47:9d:1c:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ae4fc6bf-00fc-41a9-8535-08bfd34c95e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1c:f1:23:ae:c6:44:17:84:11:fc:65:9a:aa: 96:61:02:75:e9:07:28:5d:b5:9a:55:fb:17:4d:bd: 48:7a:f2:1e:1c:27:16:62:a7:5c:89:b4:6a:be:67: a6:84:4c:db:95:eb:e1:5a:a7:1f:0e:6a:5e:58:f6: b3:1b:ac:27:e4:0c:2b:9b:db:bb:11:82:46:f7:99: 82:2c:de:9b:34:51:ba:6f:42:be:d1:f7:ab:e1:5c: bd:62:73:65:85:5d:a8:67:11:b8:f7:64:2f:e6:1b: 67:98:05:66:46:59:bc:ad:c3:69:9b:3d:c7:43:3b: e4:a1:d7:77:81:36:a4:fa:3b:8a:1a:8f:fc:1f:8e: e4:83:78:49:01:00:81:b7:14:f1:b2:51:c3:5a:2a: a1:aa:02:64:17:2a:88:08:16:30:c0:91:e9:39:08: b4:69:3a:35:7f:4c:ad:50:18:8f:3b:b4:0b:3b:7f: 56:4e:7c:a9:9d:fd:86:09:dc:26:c7:50:68:f2:3a: 3b:cd:0d:b0:89:ac:e6:46:e4:fd:3a:14:91:01:e9: 05:b5:e2:2a:f5:f0:0c:cc:5e:e5:a2:34:1e:6b:db: 79:3f:18:fd:5f:b6:6c:bb:5e:48:a3:41:e1:28:ec: d8:cd:51:eb:8e:b3:03:aa:7d:81:d0:76:2a:10:17: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AC:C9:4C:C9:B6:B5:67:B0:25:90:F9:A2:D3:22:11:5C:95:52:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/446e2fb5-4ae1-350c-ac28-e9a2445d589d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:fc:27:b5:a7:59:34:ef:87:8e:b7:3d:31:0b:e8:23:e4:98: 32:f5:ca:50:78:69:0c:5d:4b:c4:22:56:f6:15:e6:33:f0:90: 74:c6:18:eb:8a:a9:ff:92:11:f0:2f:6b:72:57:fe:66:6d:17: d9:06:1a:7e:c9:b2:a4:ea:a7:a3:d1:4c:eb:64:5d:1a:b5:ae: e6:7b:7d:2f:e6:8f:61:a7:93:32:4c:a9:28:b8:96:06:a0:b3: 37:43:f6:19:5c:8a:5e:8b:9c:1b:91:c4:ec:ac:42:78:84:f7: b7:27:58:fe:14:e1:1e:89:d2:b7:76:6f:e6:0a:18:d4:a1:f1: cd:b4:e2:12:54:fc:91:0e:61:0c:44:72:41:18:58:da:84:e4: d3:17:ba:bb:c3:50:52:ea:40:8d:4e:7c:9c:18:b1:b5:67:41: 22:b1:d2:09:7c:8c:ad:86:9a:6b:62:a3:fc:16:c8:b0:21:77: e2:7c:fe:39:c8:84:c2:77:00:26:3a:e2:6c:43:63:0a:3d:71: 46:4c:7b:72:50:55:40:4c:76:80:bd:7d:77:6c:0f:9c:aa:77: c2:af:f7:bd:31:14:66:a3:76:64:80:d0:b1:15:24:a1:a7:33: 53:ae:1e:58:9f:0b:8b:e6:c4:9f:f1:16:22:cc:79:56:0d:45: a9:ad:22:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUGavho0R50cvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YWU0ZmM2YmYtMDBmYy00MWE5LTg1MzUtMDhiZmQzNGM5NWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxzxI67GRBeEEfxlmqqWYQJ16QcoXbWaVfsX Tb1IevIeHCcWYqdcibRqvmemhEzblevhWqcfDmpeWPazG6wn5Awrm9u7EYJG95mC LN6bNFG6b0K+0fer4Vy9YnNlhV2oZxG492Qv5htnmAVmRlm8rcNpmz3HQzvkodd3 gTak+juKGo/8H47kg3hJAQCBtxTxslHDWiqhqgJkFyqICBYwwJHpOQi0aTo1f0yt UBiPO7QLO39WTnypnf2GCdwmx1Bo8jo7zQ2wiazmRuT9OhSRAekFteIq9fAMzF7l ojQea9t5Pxj9X7Zsu15Io0HhKOzYzVHrjrMDqn2B0HYqEBc4iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWsyUzJtrVnsCWQ+aLTIhFclVL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDQ2ZTJmYjUtNGFlMS0z NTBjLWFjMjgtZTlhMjQ0NWQ1ODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH8J7WnWTTvh463PTEL6CPkmDL1ylB4aQxdS8QiVvYV5jPwkHTGGOuK qf+SEfAva3JX/mZtF9kGGn7JsqTqp6PRTOtkXRq1ruZ7fS/mj2GnkzJMqSi4lgag szdD9hlcil6LnBuRxOysQniE97cnWP4U4R6J0rd2b+YKGNSh8c204hJU/JEOYQxE ckEYWNqE5NMXurvDUFLqQI1OfJwYsbVnQSKx0gl8jK2Gmmtio/wWyLAhd+J8/jnI hMJ3ACY64mxDYwo9cUZMe3JQVUBMdoC9fXdsD5yqd8Kv970xFGajdmSA0LEVJKGn M1OuHlifC4vmxJ/xFiLMeVYNRamtIoI= -----END CERTIFICATE-----Generated at Sat Aug 23 20:14:37 2025 by rpki-client