$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/774ab83e-13e5-3163-a12c-9a3bc07768b7.roa File: 774ab83e-13e5-3163-a12c-9a3bc07768b7.roa (raw, json) Hash identifier: NBx55G7BjsGcTqHoS80ITxwMe6xA2razIEX7V9zsgLs= Subject key identifier: C4:99:6B:7D:AD:D1:5B:80:5F:6E:BF:DF:B7:BB:EC:46:57:2F:C8:1D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC142A2C3251351E91CC300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/774ab83e-13e5-3163-a12c-9a3bc07768b7.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 203 IP address blocks: 20.148.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:42:a2:c3:25:13:51:e9:1c:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b538ac9a-396c-4371-a8a2-3d244b3497e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:d4:c9:3c:9a:68:f9:22:ab:f1:45:e1:d2: d8:6c:ca:79:2b:ca:b5:04:59:97:d7:49:2a:c9:d7: 3a:68:7e:0c:93:cd:31:d1:cf:c2:46:39:f5:78:7d: 08:9d:de:3e:c5:18:5e:e6:cd:cc:56:8c:a1:df:5b: 25:c0:bf:37:e0:30:44:f5:1f:95:7d:2e:e0:43:cb: bb:93:51:4a:81:7e:8f:b6:82:81:75:e6:0b:d8:71: da:4d:ca:c9:a6:fc:cc:80:c5:69:96:35:fc:5a:86: 72:fe:31:6d:ed:e0:a1:1e:a7:d8:24:cd:bf:a2:4b: e6:20:cd:39:a1:9b:78:af:0b:00:87:0b:70:ce:40: 68:59:8e:ff:6f:51:e2:5c:df:7b:ed:5d:76:6b:9b: d7:63:b9:7c:f7:94:57:00:65:06:cb:be:b5:9e:8a: 2e:af:5a:9d:09:10:58:eb:0b:ac:24:b9:ee:e1:30: 68:67:38:4c:5a:47:f3:4c:68:e1:d1:ad:2e:40:58: 1c:23:7b:0c:8a:47:6a:3a:8b:ce:98:1c:bb:10:ad: 39:f5:c3:64:6f:32:90:84:3c:7a:51:11:76:93:1c: d4:d3:7f:8f:39:5e:3d:71:c9:29:a4:cb:58:d9:bd: 63:36:f1:f9:3d:29:89:1d:35:12:04:8d:cd:81:1e: f5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:99:6B:7D:AD:D1:5B:80:5F:6E:BF:DF:B7:BB:EC:46:57:2F:C8:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/774ab83e-13e5-3163-a12c-9a3bc07768b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:23:68:23:15:b4:7b:0f:19:bf:a0:66:a4:c3:ff:44:dc:ea: b0:ec:a2:0f:df:41:bc:35:39:e0:d2:48:d3:c1:dd:79:1e:ea: ba:b6:c5:45:13:ed:9e:92:e6:de:f0:73:df:5c:16:b9:72:0e: f2:a4:63:2b:02:b6:53:5e:6d:34:99:a1:7e:0f:0c:dd:8d:76: fb:ab:d2:53:b6:87:50:0e:df:27:c6:c4:e3:fd:ae:25:b5:aa: 28:79:af:3b:1d:5b:13:b4:58:9f:8c:9f:3e:7b:be:18:65:1d: 47:10:8f:35:d4:96:12:62:98:b7:4d:bf:1d:d6:68:54:01:80: 59:24:b5:3a:10:3c:6d:1a:c2:65:71:fb:bf:cf:b1:8a:a6:81: 34:fc:dc:8a:da:75:01:d6:cf:f4:82:62:df:22:f5:a6:e4:01: db:e6:e9:42:c8:7c:f3:78:ce:0c:e7:df:0f:51:90:e7:3e:3e: da:7c:ff:2d:e4:e3:92:a7:02:7f:1f:14:29:bc:b7:0f:e8:66: 88:db:21:44:c3:1d:54:56:47:31:15:fb:1c:0d:42:9b:cd:7f: fb:bc:5b:22:63:9f:09:81:49:93:b1:63:58:3b:2c:ae:93:88: 33:ac:ea:c7:62:06:5c:37:48:ae:dc:18:86:b5:1a:c3:97:db: d8:09:dd:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUKiwyUTUekcwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjUzOGFjOWEtMzk2Yy00MzcxLWE4YTItM2QyNDRiMzQ5N2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEjUyTyaaPkiq/FF4dLYbMp5K8q1BFmX10kq ydc6aH4Mk80x0c/CRjn1eH0Ind4+xRhe5s3MVoyh31slwL834DBE9R+VfS7gQ8u7 k1FKgX6PtoKBdeYL2HHaTcrJpvzMgMVpljX8WoZy/jFt7eChHqfYJM2/okvmIM05 oZt4rwsAhwtwzkBoWY7/b1HiXN977V12a5vXY7l895RXAGUGy761noour1qdCRBY 6wusJLnu4TBoZzhMWkfzTGjh0a0uQFgcI3sMikdqOovOmBy7EK059cNkbzKQhDx6 URF2kxzU03+POV49cckppMtY2b1jNvH5PSmJHTUSBI3NgR711wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSZa32t0VuAX26/37e77EZXL8gdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzc0YWI4M2UtMTNlNS0z MTYzLWExMmMtOWEzYmMwNzc2OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYjaCMVtHsPGb+gZqTD/0Tc6rDsog/fQbw1OeDSSNPB3Xke6rq2xUUT 7Z6S5t7wc99cFrlyDvKkYysCtlNebTSZoX4PDN2Ndvur0lO2h1AO3yfGxOP9riW1 qih5rzsdWxO0WJ+Mnz57vhhlHUcQjzXUlhJimLdNvx3WaFQBgFkktToQPG0awmVx +7/PsYqmgTT83IradQHWz/SCYt8i9abkAdvm6ULIfPN4zgzn3w9RkOc+Ptp8/y3k 45KnAn8fFCm8tw/oZojbIUTDHVRWRzEV+xwNQpvNf/u8WyJjnwmBSZOxY1g7LK6T iDOs6sdiBlw3SK7cGIa1GsOX29gJ3SQ= -----END CERTIFICATE-----Generated at Sat Aug 23 20:08:24 2025 by rpki-client