$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5e73b702-9d2e-3bcd-a26e-c8a27e8c515b.roa File: 5e73b702-9d2e-3bcd-a26e-c8a27e8c515b.roa (raw, json) Hash identifier: 8yimS7YNz7ORjWSFitRTl7O0OnO/CmEcAlOQ4AnNUhE= Subject key identifier: 28:12:0F:8B:EC:9D:67:A8:2C:81:5D:4C:FC:80:BA:11:C8:D1:D3:4F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC143103D1AE8F6A64B4F80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5e73b702-9d2e-3bcd-a26e-c8a27e8c515b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 202 IP address blocks: 20.148.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:43:10:3d:1a:e8:f6:a6:4b:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=023422fe-ea99-4257-bece-af46d73607c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:e6:f9:0e:e8:06:42:60:6c:17:50:f7:04: 2a:bc:95:39:a4:71:4e:54:b7:1f:89:86:cf:33:96: 2c:3e:5a:3b:67:ff:5f:43:80:d6:8d:45:90:97:a3: f1:13:ee:20:1a:cd:a6:3d:a4:1a:b4:8b:59:78:48: 53:fd:db:8e:11:eb:58:01:c8:68:fd:40:81:19:79: a8:87:06:6f:bf:d4:3c:8e:d4:c8:b3:d1:97:c4:4b: f6:c5:0d:80:7c:05:a2:ad:27:6d:8d:09:8c:a3:ef: 54:07:81:fe:cb:78:b2:d4:de:45:78:9a:e0:bf:d8: 97:62:ac:e3:ee:67:85:2b:01:52:3c:35:ed:68:2e: 65:5c:84:53:ca:f7:b3:a4:f1:7c:52:2a:71:80:52: e8:9c:79:39:44:cb:14:31:a0:0b:bf:c1:e5:14:0b: 8b:4e:75:e3:29:5d:ff:34:b9:9a:53:10:af:7b:af: 68:38:6e:73:6a:66:08:5f:df:f1:b1:b5:c4:24:96: b9:1b:2c:ea:10:50:a7:f8:62:16:83:16:72:cb:e5: a9:de:6c:c1:62:0d:72:b7:15:94:47:e0:f3:44:fc: a7:00:b5:71:15:89:af:06:dc:a5:63:51:cb:cd:d4: e8:0a:12:25:31:a4:10:38:bd:d6:18:f7:9a:ad:05: 74:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:12:0F:8B:EC:9D:67:A8:2C:81:5D:4C:FC:80:BA:11:C8:D1:D3:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5e73b702-9d2e-3bcd-a26e-c8a27e8c515b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:9d:b8:68:5f:82:2c:94:8d:eb:e0:12:f9:1f:c9:47:9b:17: 35:a8:91:44:84:c3:76:ac:15:3e:8b:1a:bf:84:6f:cb:ba:ea: 11:55:37:67:67:b0:d2:3a:ff:60:28:86:b7:5d:d9:f8:14:fc: db:2c:69:ca:c3:41:5c:6e:ad:cd:69:d1:4c:57:1e:4c:d5:d3: 48:83:62:ad:3c:42:71:47:65:31:13:19:85:52:7f:bf:06:d4: 67:bf:c8:c5:ee:28:d6:30:c6:df:c5:03:29:47:b0:f2:bc:85: fd:49:58:80:5f:5c:ac:62:59:49:c3:7e:33:2b:98:3e:2c:a7: 3d:36:b1:c7:31:14:c4:d3:95:36:2d:dd:34:b1:92:48:19:bf: 47:ab:c3:b0:6f:2b:e4:77:4c:71:79:9f:65:59:06:bc:50:c3: f2:be:f1:14:39:64:1d:61:85:90:0c:ec:23:6c:c5:7a:ac:27: ee:e9:02:36:d1:10:13:6d:b7:2b:f3:da:aa:6b:17:a5:b1:e8: 20:58:e6:8e:c1:14:db:da:76:9b:fb:42:bb:83:5d:fe:72:e3: 3b:65:4e:6f:1c:e5:4c:62:5d:70:b5:1d:bf:79:77:ce:bf:32: 6e:37:bf:c6:42:f8:a5:53:5f:7d:cd:8a:8a:80:6a:5b:3e:bd: c9:7d:9a:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUMQPRro9qZLT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDIzNDIyZmUtZWE5OS00MjU3LWJlY2UtYWY0NmQ3MzYwN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArivm+Q7oBkJgbBdQ9wQqvJU5pHFOVLcfiYbP M5YsPlo7Z/9fQ4DWjUWQl6PxE+4gGs2mPaQatItZeEhT/duOEetYAcho/UCBGXmo hwZvv9Q8jtTIs9GXxEv2xQ2AfAWirSdtjQmMo+9UB4H+y3iy1N5FeJrgv9iXYqzj 7meFKwFSPDXtaC5lXIRTyvezpPF8UipxgFLonHk5RMsUMaALv8HlFAuLTnXjKV3/ NLmaUxCve69oOG5zamYIX9/xsbXEJJa5GyzqEFCn+GIWgxZyy+Wp3mzBYg1ytxWU R+DzRPynALVxFYmvBtylY1HLzdToChIlMaQQOL3WGPearQV0kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgSD4vsnWeoLIFdTPyAuhHI0dNPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWU3M2I3MDItOWQyZS0z YmNkLWEyNmUtYzhhMjdlOGM1MTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWduGhfgiyUjevgEvkfyUebFzWokUSEw3asFT6LGr+Eb8u66hFVN2dn sNI6/2Aohrdd2fgU/NssacrDQVxurc1p0UxXHkzV00iDYq08QnFHZTETGYVSf78G 1Ge/yMXuKNYwxt/FAylHsPK8hf1JWIBfXKxiWUnDfjMrmD4spz02sccxFMTTlTYt 3TSxkkgZv0erw7BvK+R3THF5n2VZBrxQw/K+8RQ5ZB1hhZAM7CNsxXqsJ+7pAjbR EBNttyvz2qprF6Wx6CBY5o7BFNvadpv7QruDXf5y4ztlTm8c5UxiXXC1Hb95d86/ Mm43v8ZC+KVTX33NioqAals+vcl9mpc= -----END CERTIFICATE-----Generated at Sat Aug 23 21:51:57 2025 by rpki-client