$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa File: 95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa (raw, json) Hash identifier: OlPLR9Wxi7oJ9lLGy760StA7Y65l5KnHdGx+H64x22U= Subject key identifier: 04:29:EC:9B:B5:15:DE:E3:F6:C7:97:C2:04:1F:9E:30:57:CD:57:D0 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AE4612763F3F377DB197C4880 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.148.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:27:63:f3:f3:77:db:19:7c:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=cf453eaf-bc66-4232-a4cf-f5429d72e533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:41:8c:08:cf:34:fb:9f:7a:d5:ce:ef:0b: 5f:58:ae:e0:d3:aa:a4:82:a0:5b:46:48:9b:f3:25: b2:94:e6:b2:2c:58:51:3c:37:90:a9:3a:e7:66:c1: 90:50:02:f9:ac:be:91:fb:41:6c:59:a9:ea:3e:43: 6c:83:c3:f0:d7:e8:7f:6e:ad:d7:d9:ea:3a:21:fe: 66:d7:4b:22:4a:a0:6e:ba:c3:d9:9b:07:fb:d0:f2: 51:a6:cf:7c:e5:d3:bb:44:f4:76:93:7c:e1:4c:d8: bf:2a:0f:32:48:e5:ad:0d:96:d7:bd:0e:53:cd:d8: dc:92:78:d4:f2:ca:fe:8d:79:df:61:ff:6e:53:71: 9c:0a:37:e7:dc:67:74:bb:2d:58:b4:bc:6d:3f:58: 2d:02:88:4c:67:fc:7b:d2:3e:5b:e9:5d:fe:c5:0c: 33:fb:1a:80:c4:31:ea:4e:bc:75:fc:05:52:ff:5b: 67:9b:b6:51:c9:0a:f5:1e:6c:82:13:3f:db:e9:61: e5:6b:2a:a9:05:66:87:68:a0:34:06:ab:94:62:f8: 56:71:2e:58:e3:a7:2f:a4:c1:fc:da:a8:8b:b2:ef: 4a:ff:46:b4:cb:af:d4:58:46:e8:96:a6:40:b1:6e: ed:45:e8:5b:44:77:3c:27:88:53:0b:89:4b:6c:2e: 27:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:29:EC:9B:B5:15:DE:E3:F6:C7:97:C2:04:1F:9E:30:57:CD:57:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ce:37:95:b6:4c:38:6e:d1:5f:10:f5:ae:67:0a:5f:96:d7: 2c:61:11:5d:71:1b:fa:c7:f1:0c:a5:41:3e:a3:3f:4c:ab:d4: eb:69:7f:de:8a:b1:02:fe:49:1d:42:ce:93:bb:64:c4:9d:b4: 79:1d:f7:43:cb:8d:dd:8e:07:2e:95:10:e5:b7:8c:1f:a1:d0: 74:bb:4b:02:f1:1c:ec:f1:3f:a0:85:34:2d:ab:4e:3e:48:21: d9:1a:6c:21:1b:b0:24:87:c7:ea:47:2c:11:48:34:43:24:84: b3:a0:af:a7:35:c2:cd:8e:96:68:70:68:aa:8e:bb:e1:18:29: 8a:57:b9:9b:4a:ae:27:75:d3:82:64:e3:59:74:4d:6c:2c:4b: b6:ec:1f:ea:ad:db:77:ee:69:67:e8:71:9d:a3:9c:eb:2b:dc: 57:18:11:48:3e:5c:91:3a:e3:c8:4e:54:92:4e:e3:02:fd:90: b2:e3:74:8c:ea:d9:22:25:6e:9f:db:cb:a8:9e:73:a5:5f:50: 0f:a0:6e:fc:c1:5b:d3:43:78:e9:3c:8f:fb:4e:57:28:f2:43: b1:5a:d5:82:9f:50:44:07:b7:27:68:eb:b7:81:a1:74:6a:d3: 39:6a:81:9a:2a:02:c6:d2:4f:e5:cd:68:97:a7:15:66:02:c7: e6:2d:ab:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSdj8/N32xl8SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2Y0NTNlYWYtYmM2Ni00MjMyLWE0Y2YtZjU0MjlkNzJlNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf9BjAjPNPufetXO7wtfWK7g06qkgqBbRkib 8yWylOayLFhRPDeQqTrnZsGQUAL5rL6R+0FsWanqPkNsg8Pw1+h/bq3X2eo6If5m 10siSqBuusPZmwf70PJRps985dO7RPR2k3zhTNi/Kg8ySOWtDZbXvQ5TzdjcknjU 8sr+jXnfYf9uU3GcCjfn3Gd0uy1YtLxtP1gtAohMZ/x70j5b6V3+xQwz+xqAxDHq Trx1/AVS/1tnm7ZRyQr1HmyCEz/b6WHlayqpBWaHaKA0BquUYvhWcS5Y46cvpMH8 2qiLsu9K/0a0y6/UWEbolqZAsW7tRehbRHc8J4hTC4lLbC4nRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQp7Ju1Fd7j9seXwgQfnjBXzVfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOTVjZmMzZDEtOGM5Ni0z NzBlLWIwYjQtNTRiMTZkZDlhYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLON5W2TDhu0V8Q9a5nCl+W1yxhEV1xG/rH8QylQT6jP0yr1Otpf96K sQL+SR1CzpO7ZMSdtHkd90PLjd2OBy6VEOW3jB+h0HS7SwLxHOzxP6CFNC2rTj5I IdkabCEbsCSHx+pHLBFINEMkhLOgr6c1ws2OlmhwaKqOu+EYKYpXuZtKrid104Jk 41l0TWwsS7bsH+qt23fuaWfocZ2jnOsr3FcYEUg+XJE648hOVJJO4wL9kLLjdIzq 2SIlbp/by6iec6VfUA+gbvzBW9NDeOk8j/tOVyjyQ7Fa1YKfUEQHtydo67eBoXRq 0zlqgZoqAsbST+XNaJenFWYCx+Ytq+g= -----END CERTIFICATE-----Generated at Sat Aug 23 15:53:27 2025 by rpki-client