$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/75117464-3697-3c55-9ff2-55325c98d96f.roa File: 75117464-3697-3c55-9ff2-55325c98d96f.roa (raw, json) Hash identifier: 1YmYTkaJYAAhHI1rnXef3dmDVgX0jI41H6Pkos9fsdc= Subject key identifier: D5:38:D8:71:62:6D:63:8D:4E:EA:6F:7D:89:37:65:90:CB:D1:37:02 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC142201F8A90E34FDD4300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/75117464-3697-3c55-9ff2-55325c98d96f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 4237 IP address blocks: 20.148.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:42:20:1f:8a:90:e3:4f:dd:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=78901d08-fdfc-4cf6-b132-1312937f82f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a5:ad:8d:38:41:7a:24:6c:5d:84:f4:5c:88: 30:b4:66:a0:6b:5e:71:03:d2:df:dc:a9:f2:42:67: 47:5c:68:9d:06:42:0f:24:76:e0:b5:9b:5b:e8:3b: dd:82:30:aa:d0:eb:b3:1b:64:0b:a0:f7:8e:94:29: e2:41:bb:a8:c6:f3:80:0b:94:44:dd:0a:e7:3a:b8: 27:d9:3b:d7:46:59:34:46:6d:69:db:eb:e4:7c:59: 5c:a4:41:59:78:33:e8:6b:d5:3e:57:87:03:d2:02: fa:e3:b3:0b:9e:d2:35:80:fc:d1:78:be:5a:17:6f: d0:91:8c:5b:15:61:e1:65:25:f9:83:85:89:c7:f4: b3:37:d9:4d:8d:dd:2d:b7:4d:a3:cd:c9:5b:43:ae: 78:1f:f3:18:b7:e5:fb:bf:9f:76:65:ea:71:fd:32: 07:17:1e:f1:1d:76:59:1a:f7:4b:8c:97:a8:27:31: 65:fa:d1:3b:5b:23:64:9a:f9:12:e3:af:91:4e:1d: e6:2d:6b:e3:9b:26:67:1d:47:26:a3:33:39:fd:bf: e5:c7:35:f1:0d:57:77:a8:93:a5:e8:64:71:e9:86: 2c:cd:1e:27:66:e4:de:b0:31:45:44:a7:a0:c6:3d: f8:db:e6:bd:b4:b9:59:3a:35:2e:ee:44:4a:bb:fb: c2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:38:D8:71:62:6D:63:8D:4E:EA:6F:7D:89:37:65:90:CB:D1:37:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/75117464-3697-3c55-9ff2-55325c98d96f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:0d:80:58:82:a1:f4:d4:9f:ce:8e:e7:c4:7e:cf:2e:58:5b: 56:e1:fb:18:8e:c8:80:5f:98:df:0a:4a:bc:a3:83:dc:42:13: da:2b:4a:3d:66:ce:76:73:28:82:37:d1:42:e9:8f:fc:97:92: 68:9e:1a:6e:9e:f5:0d:d9:41:88:98:6b:a0:41:a8:eb:5e:dc: 44:e7:78:bf:37:67:1f:25:3b:a2:01:0c:67:f8:cf:44:f6:01: 55:7c:46:91:84:ae:12:49:57:66:58:cf:de:c5:02:8a:45:c0: d3:e2:11:01:35:d7:54:9a:e5:1b:27:81:56:f6:91:23:a5:e0: 71:4b:a3:f1:26:0e:03:d9:b8:d2:6b:ab:0d:ee:83:d4:41:47: ed:8f:58:55:b4:7a:e2:78:4d:04:c5:d5:15:89:e4:fb:9d:c7: aa:12:55:18:6a:37:4c:b8:a9:49:47:4e:e1:65:70:0f:c0:2e: a9:00:27:ba:dd:f0:0b:99:03:4f:21:18:4f:f2:81:d1:51:ff: 83:64:ec:34:24:43:d2:19:c4:60:12:4b:8b:cd:33:e5:5f:c3: 23:ed:d0:62:37:fd:08:14:42:e0:f2:e8:17:a4:48:57:71:e7: 21:a2:4b:c7:80:6c:36:a3:32:b2:8b:fc:31:99:9c:be:e0:59: ac:4f:01:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUIgH4qQ40/dQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Nzg5MDFkMDgtZmRmYy00Y2Y2LWIxMzItMTMxMjkzN2Y4MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaWtjThBeiRsXYT0XIgwtGaga15xA9Lf3Kny QmdHXGidBkIPJHbgtZtb6DvdgjCq0OuzG2QLoPeOlCniQbuoxvOAC5RE3QrnOrgn 2TvXRlk0Rm1p2+vkfFlcpEFZeDPoa9U+V4cD0gL647MLntI1gPzReL5aF2/QkYxb FWHhZSX5g4WJx/SzN9lNjd0tt02jzclbQ654H/MYt+X7v592Zepx/TIHFx7xHXZZ GvdLjJeoJzFl+tE7WyNkmvkS46+RTh3mLWvjmyZnHUcmozM5/b/lxzXxDVd3qJOl 6GRx6YYszR4nZuTesDFFRKegxj342+a9tLlZOjUu7kRKu/vCPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU42HFibWONTupvfYk3ZZDL0TcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzUxMTc0NjQtMzY5Ny0z YzU1LTlmZjItNTUzMjVjOThkOTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8NgFiCofTUn86O58R+zy5YW1bh+xiOyIBfmN8KSryjg9xCE9orSj1m znZzKII30ULpj/yXkmieGm6e9Q3ZQYiYa6BBqOte3ETneL83Zx8lO6IBDGf4z0T2 AVV8RpGErhJJV2ZYz97FAopFwNPiEQE111Sa5RsngVb2kSOl4HFLo/EmDgPZuNJr qw3ug9RBR+2PWFW0euJ4TQTF1RWJ5Pudx6oSVRhqN0y4qUlHTuFlcA/ALqkAJ7rd 8AuZA08hGE/ygdFR/4Nk7DQkQ9IZxGASS4vNM+VfwyPt0GI3/QgUQuDy6BekSFdx 5yGiS8eAbDajMrKL/DGZnL7gWaxPAc0= -----END CERTIFICATE-----Generated at Sat Aug 23 22:38:07 2025 by rpki-client