$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/82635c9f-468b-3813-b9e9-4893232f7cc6.roa File: 82635c9f-468b-3813-b9e9-4893232f7cc6.roa (raw, json) Hash identifier: GdCCTATY5v4uHytgjnfZtkEFgfjmvZWWPMyXVv8Rx3I= Subject key identifier: 78:B1:6E:83:0A:E3:F2:47:6D:19:B9:69:CB:51:31:1D:8C:13:E6:78 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC142458368F2554F728780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/82635c9f-468b-3813-b9e9-4893232f7cc6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 202 IP address blocks: 20.148.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:42:45:83:68:f2:55:4f:72:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=520f904f-75a1-44d7-a7f2-08cdd1164c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e5:90:db:a3:9a:b9:6f:5e:5b:a0:19:de:2b: 4e:d2:86:e4:4e:d0:c1:ce:f3:6f:a3:65:54:3f:a9: e8:2a:39:ed:0c:82:02:7b:29:3f:01:a0:c0:ad:ec: 01:32:96:35:9f:ad:c6:a1:49:58:62:46:6b:22:96: 79:0a:56:39:62:70:63:8d:16:37:44:d2:3f:b4:6d: 58:eb:b6:ab:64:f5:35:ee:93:f2:eb:b3:b1:f3:f8: 50:ea:5a:d1:33:ed:fa:a1:68:3d:4c:cc:8c:b8:f1: fb:43:83:22:79:18:d1:ab:4d:fd:15:f2:85:30:5d: 8d:64:cb:42:f2:18:d9:41:65:91:8f:01:b2:fa:46: 43:80:ec:54:f0:84:f1:69:e4:3d:eb:7d:43:36:8c: ef:12:73:fd:69:ff:7b:0c:a4:7e:f7:b3:b2:e5:35: 89:c7:09:5a:b4:a5:aa:1f:73:d4:a8:81:ab:84:b2: 06:5a:89:d6:5e:a7:5f:d6:03:6e:1f:58:ac:53:09: cb:d3:f8:a9:bf:8b:96:f5:76:63:9b:b1:27:13:cf: fa:02:e5:44:2c:79:1c:4a:ea:92:c5:67:9b:00:b2: 9d:6b:c2:ef:be:18:84:9e:52:f3:f4:80:2f:33:56: d5:53:1f:1d:dd:8a:94:61:64:56:80:7f:68:81:57: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B1:6E:83:0A:E3:F2:47:6D:19:B9:69:CB:51:31:1D:8C:13:E6:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/82635c9f-468b-3813-b9e9-4893232f7cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e4:e7:8b:5e:7e:64:11:15:67:b1:19:7e:35:4c:d0:d9:e5: 56:07:68:f1:d5:7d:59:10:35:db:11:ac:ba:e4:be:0b:f7:ee: b8:64:a6:90:1d:af:a5:96:30:3a:7a:62:07:ad:d1:91:71:36: d8:8d:dc:58:9f:52:0e:57:8f:1b:04:8e:b9:68:0d:f7:37:53: c6:0f:62:62:76:68:87:06:70:f7:54:3b:32:c5:0b:d7:eb:32: 51:88:fb:18:2f:f4:6b:9e:90:a8:35:b6:d6:a8:f9:65:d3:ae: 5d:cf:70:e0:8b:07:37:90:66:97:ee:49:e2:3c:4a:c1:05:27: dc:7b:14:02:8f:30:06:90:10:a0:e6:6a:05:3c:34:5e:3a:a1: 9a:6e:84:de:d1:12:12:bc:3e:35:4d:00:8f:7f:84:2f:69:f4: 1c:08:e3:18:67:3a:9a:a2:66:b6:a7:43:7e:8d:80:80:2d:53: a1:65:98:19:28:a9:6e:b6:b9:ba:dd:43:3c:cf:1d:f3:ea:ef: 94:89:71:e5:2b:47:65:b2:85:7e:38:c2:3b:85:09:d5:1b:e1: a4:f2:e5:8c:6a:68:80:a0:20:91:cd:5c:08:37:fe:a1:44:e1: be:de:8d:7a:36:57:d6:37:7e:66:e9:48:15:60:88:cf:a8:bb: 33:1d:a9:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUJFg2jyVU9yh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTIwZjkwNGYtNzVhMS00NGQ3LWE3ZjItMDhjZGQxMTY0YzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+WQ26OauW9eW6AZ3itO0obkTtDBzvNvo2VU P6noKjntDIICeyk/AaDArewBMpY1n63GoUlYYkZrIpZ5ClY5YnBjjRY3RNI/tG1Y 67arZPU17pPy67Ox8/hQ6lrRM+36oWg9TMyMuPH7Q4MieRjRq039FfKFMF2NZMtC 8hjZQWWRjwGy+kZDgOxU8ITxaeQ9631DNozvEnP9af97DKR+97Oy5TWJxwlatKWq H3PUqIGrhLIGWonWXqdf1gNuH1isUwnL0/ipv4uW9XZjm7EnE8/6AuVELHkcSuqS xWebALKda8LvvhiEnlLz9IAvM1bVUx8d3YqUYWRWgH9ogVcx3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHixboMK4/JHbRm5actRMR2ME+Z4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODI2MzVjOWYtNDY4Yi0z ODEzLWI5ZTktNDg5MzIzMmY3Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPk54tefmQRFWexGX41TNDZ5VYHaPHVfVkQNdsRrLrkvgv37rhkppAd r6WWMDp6Yget0ZFxNtiN3FifUg5XjxsEjrloDfc3U8YPYmJ2aIcGcPdUOzLFC9fr MlGI+xgv9GuekKg1ttao+WXTrl3PcOCLBzeQZpfuSeI8SsEFJ9x7FAKPMAaQEKDm agU8NF46oZpuhN7REhK8PjVNAI9/hC9p9BwI4xhnOpqiZranQ36NgIAtU6FlmBko qW62ubrdQzzPHfPq75SJceUrR2WyhX44wjuFCdUb4aTy5YxqaICgIJHNXAg3/qFE 4b7ejXo2V9Y3fmbpSBVgiM+ouzMdqXY= -----END CERTIFICATE-----Generated at Sun Aug 24 00:32:12 2025 by rpki-client