$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7bdd57f3-fd11-3497-8d1f-ef485d5f2d5e.roa File: 7bdd57f3-fd11-3497-8d1f-ef485d5f2d5e.roa (raw, json) Hash identifier: zg7WtXBnhniUsdS0ADvVoD4xpbMLYcrhqwiOqx68o2g= Subject key identifier: A0:E1:58:41:E3:29:D1:74:6C:1E:E3:51:B3:13:59:2E:CF:5D:4B:05 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC1418853319A6EC8AAD900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7bdd57f3-fd11-3497-8d1f-ef485d5f2d5e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.132.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:41:88:53:31:9a:6e:c8:aa:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=33bcf975-1b80-4542-875a-29609daa1ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:01:3a:3e:f1:3f:cf:ab:65:de:10:08:72:72: 3e:ef:df:02:ee:3f:2f:04:3c:9d:56:5e:de:48:d1: f5:2b:e5:f6:c6:41:1a:0f:1e:a3:a8:67:b7:5a:30: 19:80:ba:35:67:cf:a9:58:1f:ea:5e:d3:68:83:d2: 35:61:bf:34:27:99:83:48:10:1d:6c:05:67:9d:c5: 26:56:0b:2c:db:cd:6c:98:73:ab:0c:b3:11:0e:dc: f2:d9:32:b7:84:58:b9:3b:d5:83:89:fc:8a:bb:af: 82:06:71:5f:72:e3:7a:d0:e2:71:6a:1c:a5:54:9c: eb:e6:b4:ff:71:49:92:bd:f3:a7:ff:04:7c:10:12: 33:99:be:da:a9:12:12:c1:50:15:ba:2d:5b:53:b0: 48:89:18:f5:d1:ff:d6:34:20:67:a0:3a:50:93:b6: b3:a0:57:16:ca:84:31:80:b0:1b:9d:bc:45:ea:ee: 93:7e:8b:8e:a4:71:b5:93:8b:ec:fd:8e:1e:d8:2f: 6b:fd:d5:b8:46:7d:39:7d:dd:73:e7:6e:d7:e0:62: 1d:36:1f:52:3e:14:3f:97:89:4d:ab:ca:74:2a:39: 27:51:a3:6e:78:fe:74:3f:29:64:02:cc:56:29:59: 43:70:d6:8d:ea:7b:e7:93:77:03:a6:57:94:0b:66: 18:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E1:58:41:E3:29:D1:74:6C:1E:E3:51:B3:13:59:2E:CF:5D:4B:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7bdd57f3-fd11-3497-8d1f-ef485d5f2d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:73:a9:ec:cd:ca:92:e7:be:71:6a:dd:82:bb:24:f2:f4:63: 42:22:14:e5:18:02:3f:d3:38:dc:25:bd:a7:ec:a0:20:3c:67: 12:40:70:31:fa:b7:65:12:a8:d7:a4:ad:72:db:d6:a2:ff:58: 6a:73:f4:95:33:c0:ae:50:da:02:4c:81:f1:56:9b:25:41:5b: ae:ad:a1:1d:03:c0:d5:72:f2:67:08:9d:da:76:c0:d5:11:fc: 69:eb:8e:db:7d:10:13:2a:6b:d4:42:65:12:16:ba:d8:0e:62: 60:75:26:ae:59:db:d0:b9:eb:1a:ce:ce:12:72:30:3d:ae:aa: 43:7c:4f:b0:ec:d3:f6:82:65:88:ad:ba:8d:84:d9:74:b1:99: fc:76:a3:e8:46:74:b8:2d:08:3e:f8:6c:16:68:b1:01:30:e3: f2:87:65:cd:14:34:9c:a4:88:d5:22:e7:67:93:8d:65:cf:49: 42:d5:22:c0:68:73:c2:2f:0b:6b:ee:43:92:e1:0e:d2:2b:43: 1d:4a:95:7b:b9:b2:f6:c8:e4:c6:ed:1c:52:90:e0:6b:81:35: 26:f3:f5:ca:38:2c:f3:73:0b:ec:5d:b0:4f:ac:ea:21:60:9a: 48:0f:41:52:0c:e3:4c:bc:7f:46:af:38:03:b8:6d:24:88:7d: 65:b1:ad:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUGIUzGabsiq2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzNiY2Y5NzUtMWI4MC00NTQyLTg3NWEtMjk2MDlkYWExYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngE6PvE/z6tl3hAIcnI+798C7j8vBDydVl7e SNH1K+X2xkEaDx6jqGe3WjAZgLo1Z8+pWB/qXtNog9I1Yb80J5mDSBAdbAVnncUm Vgss281smHOrDLMRDtzy2TK3hFi5O9WDifyKu6+CBnFfcuN60OJxahylVJzr5rT/ cUmSvfOn/wR8EBIzmb7aqRISwVAVui1bU7BIiRj10f/WNCBnoDpQk7azoFcWyoQx gLAbnbxF6u6TfouOpHG1k4vs/Y4e2C9r/dW4Rn05fd1z527X4GIdNh9SPhQ/l4lN q8p0KjknUaNueP50PylkAsxWKVlDcNaN6nvnk3cDpleUC2YYxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDhWEHjKdF0bB7jUbMTWS7PXUsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2JkZDU3ZjMtZmQxMS0z NDk3LThkMWYtZWY0ODVkNWYyZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVzqezNypLnvnFq3YK7JPL0Y0IiFOUYAj/TONwlvafsoCA8ZxJAcDH6 t2USqNekrXLb1qL/WGpz9JUzwK5Q2gJMgfFWmyVBW66toR0DwNVy8mcIndp2wNUR /Gnrjtt9EBMqa9RCZRIWutgOYmB1Jq5Z29C56xrOzhJyMD2uqkN8T7Ds0/aCZYit uo2E2XSxmfx2o+hGdLgtCD74bBZosQEw4/KHZc0UNJykiNUi52eTjWXPSULVIsBo c8IvC2vuQ5LhDtIrQx1KlXu5svbI5MbtHFKQ4GuBNSbz9co4LPNzC+xdsE+s6iFg mkgPQVIM40y8f0avOAO4bSSIfWWxrUU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:55:06 2025 by rpki-client