$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7c5c202b-38ff-31cc-82e9-b367339e989d.roa File: 7c5c202b-38ff-31cc-82e9-b367339e989d.roa (raw, json) Hash identifier: lwCJC/eOgnPUcR3o4uBBfSQgia6JQG1z+H1k8mgBKbI= Subject key identifier: C6:4F:0A:10:36:F9:1E:55:21:2E:2E:63:7A:0C:2B:19:1B:44:27:AB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC141AD2F5E7BC3F0185980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7c5c202b-38ff-31cc-82e9-b367339e989d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 202 IP address blocks: 20.132.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:41:ad:2f:5e:7b:c3:f0:18:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6fe8b10b-327f-4280-bdbc-b430b4ac16fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1e:a9:7e:d3:b4:af:53:74:79:63:cd:9f:93: 76:78:55:b5:09:b2:29:90:33:b2:78:f1:0f:11:b1: 82:ab:df:92:9b:25:91:c4:a8:94:15:fe:c1:09:6a: 41:c1:d0:fe:c0:28:7f:bb:8c:72:9f:1a:91:06:1e: 1c:11:b1:08:72:f1:60:64:26:90:78:8f:86:e0:06: ef:9c:4a:a9:43:99:8e:c5:d3:7d:0a:ef:e3:81:d9: d9:dd:65:2a:36:e3:e1:6c:32:18:5d:da:c8:33:44: 47:22:80:a6:54:68:1e:73:76:3a:96:1e:c0:63:62: 38:4f:1b:87:f9:be:fd:84:3b:be:e3:5f:0d:fc:07: 3c:08:7c:4a:f8:69:42:a7:5e:19:bb:b4:a8:1b:90: e1:28:31:db:e6:ee:e1:c0:26:91:09:bb:ad:4a:19: 79:a8:07:3b:f2:16:c9:66:9c:93:97:46:14:46:1c: d5:1e:93:8d:5b:f4:85:1e:7c:a2:84:8a:96:1b:2e: 39:ba:52:c3:79:3f:06:bf:c7:36:8a:48:24:31:7a: bc:2f:11:67:19:99:a0:81:23:b3:a4:d6:0f:a8:7e: d2:56:cf:54:5b:1a:69:d2:2b:86:7f:5f:70:99:ee: cc:de:73:e3:1d:f2:d6:fc:eb:3b:42:7d:70:da:ab: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4F:0A:10:36:F9:1E:55:21:2E:2E:63:7A:0C:2B:19:1B:44:27:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7c5c202b-38ff-31cc-82e9-b367339e989d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:82:cc:e4:60:61:33:84:bc:31:d8:d5:83:56:ba:06:d4:13: 23:10:2a:6d:02:87:ab:ee:2e:6d:f6:27:e6:de:cd:b0:69:9a: 51:b3:9c:8b:0c:12:25:9c:0f:7a:60:b1:01:81:37:a3:63:92: 65:8d:d6:0b:e4:ad:4a:e9:74:11:d2:a0:e5:bd:97:5f:c2:3e: 5d:b5:f9:97:78:a2:22:1b:39:85:9d:55:9d:25:ef:37:71:3c: e9:06:e3:a8:15:bd:5f:9d:2d:02:8e:6e:a7:ef:cc:c3:03:e0: 01:d1:6f:59:4c:47:17:e9:0b:07:c5:21:c9:c9:cf:18:82:b7: 07:65:bd:e9:7f:0c:87:86:d2:e9:53:a0:a6:45:fb:f3:3a:1d: e7:91:2f:e8:9e:43:84:ac:ea:c7:e9:b4:3c:35:d3:95:40:7d: 54:56:21:0e:b9:68:f6:de:b0:54:a1:8a:ea:1b:35:8f:04:31: 22:a5:ec:bc:ac:a1:cf:ed:31:15:0e:7d:92:b9:be:2c:72:7e: d6:30:4b:39:c4:4b:88:f8:89:b5:09:98:b2:b9:43:0b:88:4d: b9:1b:f8:f4:4b:57:96:e0:b4:68:59:ee:cc:7c:41:84:a1:ec: f2:79:99:23:d5:b8:69:ec:f5:20:c9:93:96:d6:98:03:a2:39: 59:03:a8:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUGtL157w/AYWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmZlOGIxMGItMzI3Zi00MjgwLWJkYmMtYjQzMGI0YWMxNmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR6pftO0r1N0eWPNn5N2eFW1CbIpkDOyePEP EbGCq9+SmyWRxKiUFf7BCWpBwdD+wCh/u4xynxqRBh4cEbEIcvFgZCaQeI+G4Abv nEqpQ5mOxdN9Cu/jgdnZ3WUqNuPhbDIYXdrIM0RHIoCmVGgec3Y6lh7AY2I4TxuH +b79hDu+418N/Ac8CHxK+GlCp14Zu7SoG5DhKDHb5u7hwCaRCbutShl5qAc78hbJ ZpyTl0YURhzVHpONW/SFHnyihIqWGy45ulLDeT8Gv8c2ikgkMXq8LxFnGZmggSOz pNYPqH7SVs9UWxpp0iuGf19wme7M3nPjHfLW/Os7Qn1w2qs0ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZPChA2+R5VIS4uY3oMKxkbRCerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2M1YzIwMmItMzhmZi0z MWNjLTgyZTktYjM2NzMzOWU5ODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyCzORgYTOEvDHY1YNWugbUEyMQKm0Ch6vuLm32J+bezbBpmlGznIsM EiWcD3pgsQGBN6NjkmWN1gvkrUrpdBHSoOW9l1/CPl21+Zd4oiIbOYWdVZ0l7zdx POkG46gVvV+dLQKObqfvzMMD4AHRb1lMRxfpCwfFIcnJzxiCtwdlvel/DIeG0ulT oKZF+/M6HeeRL+ieQ4Ss6sfptDw105VAfVRWIQ65aPbesFShiuobNY8EMSKl7Lys oc/tMRUOfZK5vixyftYwSznES4j4ibUJmLK5QwuITbkb+PRLV5bgtGhZ7sx8QYSh 7PJ5mSPVuGns9SDJk5bWmAOiOVkDqGU= -----END CERTIFICATE-----Generated at Sun Aug 24 00:31:18 2025 by rpki-client