$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b52783db-6e4d-373b-ae95-1528b234da8f.roa File: b52783db-6e4d-373b-ae95-1528b234da8f.roa (raw, json) Hash identifier: 9vlHxb2KaC1IVn8CbgtWzdoNZrdPIYSb9GhInks7Pm4= Subject key identifier: B4:24:6F:0F:62:04:4D:E7:6A:34:DC:C4:DB:35:C0:CE:2C:4E:1F:95 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC141274940163A2B11FA80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b52783db-6e4d-373b-ae95-1528b234da8f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 203 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:41:27:49:40:16:3a:2b:11:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c7795cb0-8bab-4c20-b02e-3c9837ca4d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:22:7b:bc:6f:d0:43:3f:74:76:aa:f7:5e:af: 07:02:0c:77:e7:99:1a:09:cf:73:a1:b9:05:3f:2c: bf:6c:1a:20:cf:09:54:4e:f8:71:98:bb:c7:69:48: 1e:22:10:28:c3:82:6b:f8:9c:bc:d7:24:92:a1:f3: 6e:f0:d3:ab:a9:24:c0:51:3c:8a:0c:c0:8c:97:98: be:d2:24:06:8f:3e:95:51:2e:d9:05:bb:5b:18:0b: 5a:ba:70:88:7a:c2:4d:27:67:80:89:fd:e1:91:64: cc:3d:42:40:50:cb:48:34:c5:ae:98:cd:b1:53:67: d3:59:8a:b3:f7:fe:e1:93:8b:83:1e:a5:70:98:17: 3d:a8:8b:ba:81:fd:4e:21:7f:97:32:2b:9f:27:85: 07:d3:08:64:ed:22:0f:fe:b4:c5:9f:a6:30:07:c8: f5:5b:eb:03:f6:20:9c:3e:da:2d:9f:98:12:9f:ea: 39:5b:ba:76:0d:40:e5:32:bd:c3:05:5c:63:bb:c2: b0:c7:c8:be:3e:27:44:5b:0f:5c:18:a7:c4:01:0c: d5:96:a3:9b:1c:9d:ec:f9:5d:81:76:c4:06:69:b1: eb:5d:85:42:ac:33:5a:84:9c:a0:4c:f5:5c:20:5e: 24:3d:25:c8:4d:99:75:e7:cf:21:1f:97:e5:df:95: f7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:24:6F:0F:62:04:4D:E7:6A:34:DC:C4:DB:35:C0:CE:2C:4E:1F:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b52783db-6e4d-373b-ae95-1528b234da8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ec:3d:94:4e:49:82:f7:91:fb:e4:c8:8e:45:84:2d:e0:2f: 58:f1:90:c7:b5:4d:7e:23:34:ad:91:9d:48:51:f3:4e:2d:68: d7:37:0b:70:8e:7f:9e:ce:88:c5:20:48:36:87:ee:db:98:c9: 95:6d:b2:05:f1:fe:16:59:ab:a5:9b:b0:86:d9:b4:44:43:8d: 58:19:fe:6b:8c:13:28:e3:70:32:d9:1b:4e:25:a7:6b:0a:98: 08:c3:9e:49:d6:88:21:7d:ab:f1:41:20:0a:c1:cf:4d:e3:0c: c1:b0:a7:d9:3e:7a:e6:1a:d5:09:83:11:9c:98:1c:12:2d:47: 86:d1:5d:b8:d1:bc:b5:65:64:7a:1c:76:a8:57:15:8e:ce:2f: 8d:c2:2a:d1:8c:7b:f0:c7:7e:68:ba:27:6b:a8:0d:18:23:c3: be:b4:16:05:02:e4:8d:cd:67:30:2e:75:88:2c:ad:ca:71:de: 40:d5:15:54:a6:b4:3a:a7:e8:03:71:6e:3d:61:ea:18:b3:57: 30:6b:4e:4d:b4:5f:54:e3:3f:d6:07:18:d6:5e:44:d2:b2:4d: ad:aa:5e:e9:a3:7e:e9:92:42:14:8a:c8:6f:01:7d:ef:53:ca: cd:fb:2d:85:4b:b8:a8:e1:2b:d8:b9:ab:42:50:53:cc:0f:8b: f9:ba:f5:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUEnSUAWOisR+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Yzc3OTVjYjAtOGJhYi00YzIwLWIwMmUtM2M5ODM3Y2E0ZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyJ7vG/QQz90dqr3Xq8HAgx355kaCc9zobkF Pyy/bBogzwlUTvhxmLvHaUgeIhAow4Jr+Jy81ySSofNu8NOrqSTAUTyKDMCMl5i+ 0iQGjz6VUS7ZBbtbGAtaunCIesJNJ2eAif3hkWTMPUJAUMtINMWumM2xU2fTWYqz 9/7hk4uDHqVwmBc9qIu6gf1OIX+XMiufJ4UH0whk7SIP/rTFn6YwB8j1W+sD9iCc Ptotn5gSn+o5W7p2DUDlMr3DBVxju8Kwx8i+PidEWw9cGKfEAQzVlqObHJ3s+V2B dsQGabHrXYVCrDNahJygTPVcIF4kPSXITZl1588hH5fl35X3QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQkbw9iBE3najTcxNs1wM4sTh+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjUyNzgzZGItNmU0ZC0z NzNiLWFlOTUtMTUyOGIyMzRkYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTsPZROSYL3kfvkyI5FhC3gL1jxkMe1TX4jNK2RnUhR804taNc3C3CO f57OiMUgSDaH7tuYyZVtsgXx/hZZq6WbsIbZtERDjVgZ/muMEyjjcDLZG04lp2sK mAjDnknWiCF9q/FBIArBz03jDMGwp9k+euYa1QmDEZyYHBItR4bRXbjRvLVlZHoc dqhXFY7OL43CKtGMe/DHfmi6J2uoDRgjw760FgUC5I3NZzAudYgsrcpx3kDVFVSm tDqn6ANxbj1h6hizVzBrTk20X1TjP9YHGNZeRNKyTa2qXumjfumSQhSKyG8Bfe9T ys37LYVLuKjhK9i5q0JQU8wPi/m69aY= -----END CERTIFICATE-----Generated at Sat Aug 23 20:09:31 2025 by rpki-client