$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5ca3a37e-6be1-3856-92b6-b7b7f7d0bcc9.roa File: 5ca3a37e-6be1-3856-92b6-b7b7f7d0bcc9.roa (raw, json) Hash identifier: ntOeJ/4gyqvqK2UcrfR5UI9fhnFFnyNRh1vgkfxA+mU= Subject key identifier: 89:CE:A7:33:4C:8C:14:F5:8C:FC:AA:AE:CF:9F:62:96:69:8C:B9:13 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AE461277657077F29408CE724 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5ca3a37e-6be1-3856-92b6-b7b7f7d0bcc9.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 202 IP address blocks: 20.148.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:27:76:57:07:7f:29:40:8c:e7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=069b00c4-cea0-403d-939e-3cb1c1f3f8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:05:7f:13:69:59:6d:86:f9:9a:9a:84:73: b3:98:ba:f7:c4:53:f1:08:23:93:0c:cf:01:2a:27: ba:7e:be:32:10:29:43:4d:08:0b:1a:90:1e:9e:21: 8e:57:42:f7:6e:d7:86:51:96:f4:7d:e1:15:ff:d5: f2:b7:3d:f5:57:75:3b:c6:f6:4f:38:23:a0:cd:48: ad:bd:2b:14:ce:8a:4f:15:28:a6:2f:6d:95:ec:a4: 9e:8b:a9:b4:a8:c0:2a:9a:a7:1d:da:c7:0d:f9:53: 21:9c:6c:c2:2c:68:25:1e:b2:8b:f4:e1:03:5f:f6: b9:19:7c:d5:45:31:d1:d2:1d:81:ea:97:11:68:30: 42:ed:2c:5b:b7:93:c2:9d:bf:ea:41:fa:87:47:c7: 0d:af:ba:89:79:d3:9e:7a:97:e1:93:94:da:6a:d0: 23:45:43:14:a8:37:2f:65:4b:12:ec:ed:aa:aa:6e: 71:d0:37:74:7d:b1:8b:39:47:4a:96:3e:c5:a2:27: f7:c9:7e:f5:6b:62:48:58:b8:35:de:f4:28:26:a1: df:58:f8:74:60:00:20:44:9d:ba:46:29:8f:1c:21: 31:0e:0f:9e:06:c9:9b:ed:a5:2f:d6:44:e2:66:65: 5b:8a:d2:cc:93:4d:59:15:da:6f:ac:35:cc:d6:e3: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CE:A7:33:4C:8C:14:F5:8C:FC:AA:AE:CF:9F:62:96:69:8C:B9:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5ca3a37e-6be1-3856-92b6-b7b7f7d0bcc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:32:2e:1b:98:5e:96:61:57:b4:df:91:7e:da:a0:a6:87:91: 63:09:c4:a1:7b:a3:c9:01:cf:85:af:d2:b3:1b:6b:44:30:ee: 46:d0:36:11:fd:0e:fa:f1:46:8d:c0:58:dc:d2:1d:88:94:fc: 51:22:78:a8:1a:c7:d9:63:c3:87:15:8e:86:57:56:ba:35:26: 6c:f0:41:bd:6e:6c:ad:0a:4f:60:53:56:a5:b6:12:41:80:31: 25:60:1a:9e:ab:e6:f6:ec:ac:c0:a7:0d:93:0e:5d:b8:de:7e: b4:05:d7:59:47:97:30:5a:61:16:de:b8:4a:42:52:80:58:5d: 55:02:b0:87:57:7f:b2:eb:35:d2:07:68:ab:47:94:ad:cc:45: 35:b0:83:0f:51:f2:c6:36:cb:34:8f:8b:e1:0d:99:3e:b4:b9: 41:7f:fa:bf:75:ed:bd:ba:7d:59:f2:55:dd:3e:82:ea:3b:88: 63:bb:f2:4d:65:0c:ae:2f:5b:31:d7:6d:56:ff:4b:a8:bf:f2: 37:3d:34:36:8b:12:b2:a7:fd:38:03:8d:88:15:11:14:6f:40: bc:ae:30:93:d2:50:a6:dd:bf:95:d3:c3:9b:8a:06:d6:1c:44: 81:5d:b6:c2:0b:5b:b2:e1:30:f5:b6:4b:43:37:54:56:b6:28: 5a:96:7e:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSd2Vwd/KUCM5yQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MDY5YjAwYzQtY2VhMC00MDNkLTkzOWUtM2NiMWMxZjNmOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzwFfxNpWW2G+ZqahHOzmLr3xFPxCCOTDM8B Kie6fr4yEClDTQgLGpAeniGOV0L3bteGUZb0feEV/9Xytz31V3U7xvZPOCOgzUit vSsUzopPFSimL22V7KSei6m0qMAqmqcd2scN+VMhnGzCLGglHrKL9OEDX/a5GXzV RTHR0h2B6pcRaDBC7Sxbt5PCnb/qQfqHR8cNr7qJedOeepfhk5TaatAjRUMUqDcv ZUsS7O2qqm5x0Dd0fbGLOUdKlj7Foif3yX71a2JIWLg13vQoJqHfWPh0YAAgRJ26 RimPHCExDg+eBsmb7aUv1kTiZmVbitLMk01ZFdpvrDXM1uMaWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInOpzNMjBT1jPyqrs+fYpZpjLkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWNhM2EzN2UtNmJlMS0z ODU2LTkyYjYtYjdiN2Y3ZDBiY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoyLhuYXpZhV7TfkX7aoKaHkWMJxKF7o8kBz4Wv0rMba0Qw7kbQNhH9 DvrxRo3AWNzSHYiU/FEieKgax9ljw4cVjoZXVro1JmzwQb1ubK0KT2BTVqW2EkGA MSVgGp6r5vbsrMCnDZMOXbjefrQF11lHlzBaYRbeuEpCUoBYXVUCsIdXf7LrNdIH aKtHlK3MRTWwgw9R8sY2yzSPi+ENmT60uUF/+r917b26fVnyVd0+guo7iGO78k1l DK4vWzHXbVb/S6i/8jc9NDaLErKn/TgDjYgVERRvQLyuMJPSUKbdv5XTw5uKBtYc RIFdtsILW7LhMPW2S0M3VFa2KFqWfnU= -----END CERTIFICATE-----Generated at Sat Aug 23 20:09:29 2025 by rpki-client