$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/466bf24b-ea61-3af0-af6c-375c6412d1c1.roa File: 466bf24b-ea61-3af0-af6c-375c6412d1c1.roa (raw, json) Hash identifier: cYDajQHIoYa9KRfju8nHlK9hwf2Dqj65WG8QVKJjack= Subject key identifier: AF:16:62:8D:79:28:D1:A3:D2:6A:A7:BC:26:D2:5A:2B:2C:B6:67:AA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC141C13D099AE11AF1B7C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/466bf24b-ea61-3af0-af6c-375c6412d1c1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 203 IP address blocks: 20.132.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:41:c1:3d:09:9a:e1:1a:f1:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3d09742a-8f59-4102-9a46-0b6fefa4c3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cb:70:85:bb:f6:67:11:4b:ba:9d:33:a0:c3: 71:22:fe:50:fa:da:63:52:bc:b2:2b:01:2c:b9:73: 1e:ac:ad:96:05:f0:33:09:81:43:55:83:a7:7b:59: 7d:2f:a9:44:15:29:c2:36:1e:ca:97:80:44:07:68: 29:8e:ce:ed:8e:ed:d6:a2:13:c1:db:07:74:be:ad: b4:48:fa:11:96:f6:c0:0a:e2:cd:1f:2c:c0:95:2a: 9a:d7:0e:80:bc:a1:9c:77:03:44:a4:50:e6:6e:e2: 70:13:f5:74:8f:df:13:9f:a6:72:0e:3f:51:16:5f: 13:e8:95:f4:5b:ba:77:00:d3:32:0c:56:67:4a:b7: 1e:e0:57:a0:a6:16:46:cf:55:48:34:19:c8:fb:0e: 2e:e8:cb:d3:0e:63:8d:73:08:7b:34:4d:40:ba:75: eb:62:1b:56:a9:8a:73:45:be:6a:d6:f0:34:55:1c: c9:14:6b:f6:a7:4e:38:e2:95:4e:cc:b0:8c:3d:95: fc:ac:e2:c9:ac:d6:7c:39:87:5a:bc:0b:31:5e:e2: 07:c8:d5:36:53:bf:13:dc:40:11:3b:ee:08:78:db: c3:53:a3:0b:f9:9f:f8:14:3c:d9:da:3b:33:14:7c: 0c:78:86:41:8a:cd:a3:8f:5b:bb:09:44:70:56:5a: 83:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:16:62:8D:79:28:D1:A3:D2:6A:A7:BC:26:D2:5A:2B:2C:B6:67:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/466bf24b-ea61-3af0-af6c-375c6412d1c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:90:33:4e:8f:26:2a:11:f4:d3:e7:85:ff:29:e6:10:f8:f4: 60:32:7a:d4:67:ac:f9:33:e3:88:31:35:19:09:13:72:f2:85: 5d:0d:74:fd:e8:80:7c:b1:10:d8:45:35:06:11:ed:76:59:92: 57:52:12:3b:b2:28:7b:02:e2:69:15:ea:f9:bb:ae:28:71:6d: 2f:7e:80:af:98:85:1e:ee:b1:9e:af:7d:dc:b5:1f:7c:db:af: a5:6f:6e:de:09:5c:87:59:6e:18:06:a8:51:78:e2:eb:67:be: cc:dc:33:04:b1:8a:f3:d2:3c:2d:23:e0:23:f7:d9:a5:50:40: a9:ab:03:ea:c6:6d:b7:d5:b5:f7:e1:4b:80:84:9f:6f:bf:34: 9c:22:0a:f0:5a:84:a1:77:e9:34:89:f6:c9:a2:89:96:1d:89: 9d:c1:59:ed:fa:91:f9:de:09:2d:19:8b:d0:a8:10:48:91:44: 88:eb:3d:f5:34:f5:88:c8:8d:2a:13:50:ab:9c:ce:a6:8a:1c: 01:ef:76:58:18:7c:4f:c5:94:68:cc:91:9d:89:21:5c:5d:ed: b7:4a:04:6a:21:16:b4:5b:89:20:59:df:92:0b:7c:8d:c3:4e: 87:e7:5d:0d:bb:cc:c8:d7:19:c6:5f:6c:2b:96:aa:69:f3:eb: 27:d4:ad:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUHBPQma4Rrxt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2QwOTc0MmEtOGY1OS00MTAyLTlhNDYtMGI2ZmVmYTRjM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8twhbv2ZxFLup0zoMNxIv5Q+tpjUryyKwEs uXMerK2WBfAzCYFDVYOne1l9L6lEFSnCNh7Kl4BEB2gpjs7tju3WohPB2wd0vq20 SPoRlvbACuLNHyzAlSqa1w6AvKGcdwNEpFDmbuJwE/V0j98Tn6ZyDj9RFl8T6JX0 W7p3ANMyDFZnSrce4FegphZGz1VINBnI+w4u6MvTDmONcwh7NE1AunXrYhtWqYpz Rb5q1vA0VRzJFGv2p0444pVOzLCMPZX8rOLJrNZ8OYdavAsxXuIHyNU2U78T3EAR O+4IeNvDU6ML+Z/4FDzZ2jszFHwMeIZBis2jj1u7CURwVlqDsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8WYo15KNGj0mqnvCbSWisstmeqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDY2YmYyNGItZWE2MS0z YWYwLWFmNmMtMzc1YzY0MTJkMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECQM06PJioR9NPnhf8p5hD49GAyetRnrPkz44gxNRkJE3LyhV0NdP3o gHyxENhFNQYR7XZZkldSEjuyKHsC4mkV6vm7rihxbS9+gK+YhR7usZ6vfdy1H3zb r6Vvbt4JXIdZbhgGqFF44utnvszcMwSxivPSPC0j4CP32aVQQKmrA+rGbbfVtffh S4CEn2+/NJwiCvBahKF36TSJ9smiiZYdiZ3BWe36kfneCS0Zi9CoEEiRRIjrPfU0 9YjIjSoTUKuczqaKHAHvdlgYfE/FlGjMkZ2JIVxd7bdKBGohFrRbiSBZ35ILfI3D TofnXQ27zMjXGcZfbCuWqmnz6yfUreg= -----END CERTIFICATE-----Generated at Sat Aug 23 20:11:02 2025 by rpki-client