$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9c1f01c-f483-3a6c-b436-d6ffb3cd7c28.roa File: b9c1f01c-f483-3a6c-b436-d6ffb3cd7c28.roa (raw, json) Hash identifier: +nE+usejZMeCLFZyfIrMmlp3cct1KsdM8MV1NJeC8jI= Subject key identifier: 68:28:57:93:FD:C0:AC:79:67:C5:7A:6D:B9:DC:7E:AF:1F:5C:29:BC Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC1416148FC83160A166E40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9c1f01c-f483-3a6c-b436-d6ffb3cd7c28.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 202 IP address blocks: 20.132.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:41:61:48:fc:83:16:0a:16:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d407d1d0-eb9d-49f6-a6b3-c36b642f0135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:6c:a9:a4:c0:3c:a0:74:9e:27:f2:92:37: 67:97:a8:fd:42:5d:d3:cc:6d:68:1b:b0:e1:01:6d: ab:4a:76:8e:58:77:ff:b1:8e:4c:75:a9:90:ca:fd: 8e:37:c6:81:10:41:e5:be:14:79:92:b4:56:93:5c: 97:29:ad:65:33:a0:1f:1a:0b:14:06:37:4b:21:ea: 48:c3:59:17:dc:ee:a1:de:14:91:1f:59:0f:00:44: f9:a5:e4:c1:2e:9c:38:42:ed:db:fa:9c:be:5c:e8: d1:17:c4:53:9e:1a:bb:86:b6:6a:78:c7:70:4f:32: c2:3f:4b:44:9d:4c:3e:7e:83:32:78:fe:c9:2d:32: 40:8d:e6:4d:a9:ee:64:e3:f0:cb:1b:5c:dd:d2:cf: 5e:c2:ee:65:d5:99:2b:cf:52:c3:bf:9d:d9:f1:3c: 65:81:e5:a3:94:5d:b7:5e:00:fe:62:b3:ba:a2:11: 2c:db:41:98:f5:47:f5:9e:73:23:79:30:ad:bf:a5: bf:ca:5d:bc:9b:30:15:5c:45:be:78:fe:4a:9b:7b: 5e:c2:cb:6b:97:d3:21:53:e0:b9:13:ab:1a:f9:2b: 37:ba:e6:24:24:56:17:52:4f:f1:58:af:b0:3c:a4: 62:ee:35:f4:bc:36:15:88:12:ec:e1:fb:7c:38:8e: 82:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:28:57:93:FD:C0:AC:79:67:C5:7A:6D:B9:DC:7E:AF:1F:5C:29:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9c1f01c-f483-3a6c-b436-d6ffb3cd7c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:de:94:f6:78:b6:eb:c5:f4:86:dd:a8:35:94:35:5a:1b:3c: eb:31:7b:dc:98:5a:ff:8b:02:0c:e3:ae:00:df:9b:a8:0e:67: 49:ab:8c:be:9a:12:4b:4f:3a:ca:f9:03:7a:bd:93:48:73:59: 4f:54:6b:f3:bd:ca:8c:4c:d4:e3:44:01:94:9e:32:da:6c:f0: 40:c2:fd:16:7e:29:9c:8c:de:53:c0:fe:77:64:24:b6:37:2f: de:db:9c:68:5b:27:76:74:c1:23:60:ee:c4:2e:6e:bb:7f:1a: f3:a7:4f:5e:43:f1:b9:6d:c8:64:3c:14:35:57:1b:da:73:04: 53:3a:c0:14:96:bb:a3:e2:05:f7:45:a2:c1:5b:66:b1:6c:1b: 2d:f8:6b:27:86:0d:a4:c3:d9:27:f7:8f:f0:15:9d:0c:49:ed: 1b:52:65:46:73:01:4a:25:99:e1:24:97:39:ca:eb:b1:4d:62: cb:3d:36:d2:f8:8c:9d:c5:35:b4:a0:39:c1:e5:81:4a:0f:69: 6d:2c:93:98:a6:a5:43:55:ff:f0:23:bc:2d:33:bb:2d:67:09: fd:8f:f4:86:46:0b:e6:52:e1:02:0e:62:91:e4:5a:39:f0:53: 26:5c:77:39:21:ab:cd:67:e0:18:ec:6a:f0:41:59:03:28:46: f3:0a:d8:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUFhSPyDFgoWbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDQwN2QxZDAtZWI5ZC00OWY2LWE2YjMtYzM2YjY0MmYwMTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk5sqaTAPKB0nifykjdnl6j9Ql3TzG1oG7Dh AW2rSnaOWHf/sY5MdamQyv2ON8aBEEHlvhR5krRWk1yXKa1lM6AfGgsUBjdLIepI w1kX3O6h3hSRH1kPAET5peTBLpw4Qu3b+py+XOjRF8RTnhq7hrZqeMdwTzLCP0tE nUw+foMyeP7JLTJAjeZNqe5k4/DLG1zd0s9ewu5l1Zkrz1LDv53Z8TxlgeWjlF23 XgD+YrO6ohEs20GY9Uf1nnMjeTCtv6W/yl28mzAVXEW+eP5Km3tewstrl9MhU+C5 E6sa+Ss3uuYkJFYXUk/xWK+wPKRi7jX0vDYViBLs4ft8OI6CjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgoV5P9wKx5Z8V6bbncfq8fXCm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjljMWYwMWMtZjQ4My0z YTZjLWI0MzYtZDZmZmIzY2Q3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFITmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfelPZ4tuvF9IbdqDWUNVobPOsxe9yYWv+LAgzjrgDfm6gOZ0mrjL6a EktPOsr5A3q9k0hzWU9Ua/O9yoxM1ONEAZSeMtps8EDC/RZ+KZyM3lPA/ndkJLY3 L97bnGhbJ3Z0wSNg7sQubrt/GvOnT15D8bltyGQ8FDVXG9pzBFM6wBSWu6PiBfdF osFbZrFsGy34ayeGDaTD2Sf3j/AVnQxJ7RtSZUZzAUolmeEklznK67FNYss9NtL4 jJ3FNbSgOcHlgUoPaW0sk5impUNV//AjvC0zuy1nCf2P9IZGC+ZS4QIOYpHkWjnw UyZcdzkhq81n4BjsavBBWQMoRvMK2H0= -----END CERTIFICATE-----Generated at Sat Aug 23 20:09:41 2025 by rpki-client