$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cccc300f-4729-3b3c-b680-5303ebeca2ca.roa File: cccc300f-4729-3b3c-b680-5303ebeca2ca.roa (raw, json) Hash identifier: Stqka/N0eKNbVc14yP0aJjw5L6zPxBaFR4VmpSTbFdc= Subject key identifier: 1C:18:12:1F:15:4D:A5:C3:F5:57:42:CD:C4:40:59:BF:47:2C:28:B9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC1426B7D23A669EC204400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cccc300f-4729-3b3c-b680-5303ebeca2ca.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 4237 IP address blocks: 20.148.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:42:6b:7d:23:a6:69:ec:20:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=47021b81-3b4e-4634-892c-6d491fac69ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:2f:a4:2b:9e:56:85:f2:5b:dc:6d:84:52: b3:79:45:99:a6:2e:58:90:21:d7:e2:c7:c4:67:49: 39:35:26:ea:b9:d9:88:1d:a7:24:5e:34:c1:d2:ec: f2:0f:ef:91:d4:be:4b:c2:79:08:7b:1c:a9:90:05: 6d:ea:58:20:a5:4d:ec:dd:bb:59:fc:3b:24:65:7a: 0a:62:be:ad:cf:f2:ec:d3:ed:a8:82:a3:c5:74:6c: 16:d3:1f:52:84:b0:e1:1a:71:76:65:45:e2:d8:c9: 32:63:60:b6:27:57:d2:fd:b9:7a:02:43:bf:fb:31: c9:c1:69:8c:09:49:03:95:00:a7:54:db:bc:81:33: 6c:c5:e1:b4:bc:46:68:89:74:23:1d:2a:23:8f:2e: ee:86:95:6a:3f:74:65:00:52:e0:9e:9c:83:34:d6: ed:79:cf:91:d6:b4:61:72:c1:19:4f:ed:8d:90:90: de:15:c4:94:48:66:03:da:d9:f8:9d:82:58:46:8c: 4a:1a:13:7c:9d:3e:ad:b4:1c:0c:7a:fb:19:08:85: ae:7c:3b:43:3e:19:9c:3f:a6:5c:9d:4b:59:de:e5: 16:b5:fa:5d:ec:e8:20:ee:f7:36:a3:78:d9:bb:22: fb:be:aa:73:fc:93:c6:93:c5:dd:1e:8a:e3:3b:3c: d2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:18:12:1F:15:4D:A5:C3:F5:57:42:CD:C4:40:59:BF:47:2C:28:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cccc300f-4729-3b3c-b680-5303ebeca2ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d4:10:55:c2:f1:99:5e:c5:51:e6:5d:bf:c7:10:5a:dd:84: 80:bf:a0:82:8b:6f:4f:34:d1:e2:88:ec:c2:26:9f:fc:cf:0f: b8:5e:90:9f:8c:cf:bb:e1:13:ad:71:a3:32:36:c3:73:a3:14: b8:c5:74:f5:b2:e3:8a:ba:fb:2a:a8:fc:06:ca:95:00:24:81: 5d:42:95:e0:c6:01:b3:25:5e:7b:cf:d2:ff:07:e5:5e:7b:71: ab:7f:b3:b6:3a:cf:a7:98:68:79:62:93:bf:5d:ff:bc:a6:76: d9:b7:d9:46:06:75:8d:51:6d:e2:53:e2:d4:a5:4e:07:fb:88: e1:d3:1b:d1:46:7f:3d:b9:fe:ff:b8:26:e5:99:39:b5:9c:e9: 21:79:c9:4c:ff:94:df:bc:d3:41:1b:59:48:97:09:c7:32:d8: fa:58:82:fa:fe:f8:29:2f:8a:31:e0:f9:30:69:92:49:79:46: 9d:b0:a2:d0:62:e6:87:0c:c8:26:c1:72:9e:fd:66:57:e1:13: 7a:ac:9b:a9:0b:60:b4:ab:27:57:33:4a:a9:33:05:b8:af:f1: 0b:e9:5e:05:ee:54:30:68:85:3c:f8:0f:6d:8f:1d:f2:47:da: a9:85:51:5e:dd:7c:dc:85:c8:ef:5f:ec:91:0c:62:0f:22:5e: c0:64:28:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUJrfSOmaewgRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDcwMjFiODEtM2I0ZS00NjM0LTg5MmMtNmQ0OTFmYWM2OWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxsvpCueVoXyW9xthFKzeUWZpi5YkCHX4sfE Z0k5NSbqudmIHackXjTB0uzyD++R1L5LwnkIexypkAVt6lggpU3s3btZ/DskZXoK Yr6tz/Ls0+2ogqPFdGwW0x9ShLDhGnF2ZUXi2MkyY2C2J1fS/bl6AkO/+zHJwWmM CUkDlQCnVNu8gTNsxeG0vEZoiXQjHSojjy7uhpVqP3RlAFLgnpyDNNbtec+R1rRh csEZT+2NkJDeFcSUSGYD2tn4nYJYRoxKGhN8nT6ttBwMevsZCIWufDtDPhmcP6Zc nUtZ3uUWtfpd7Ogg7vc2o3jZuyL7vqpz/JPGk8XdHorjOzzSyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwYEh8VTaXD9VdCzcRAWb9HLCi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvY2NjYzMwMGYtNDcyOS0z YjNjLWI2ODAtNTMwM2ViZWNhMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALUEFXC8ZlexVHmXb/HEFrdhIC/oIKLb0800eKI7MImn/zPD7hekJ+M z7vhE61xozI2w3OjFLjFdPWy44q6+yqo/AbKlQAkgV1CleDGAbMlXnvP0v8H5V57 cat/s7Y6z6eYaHlik79d/7ymdtm32UYGdY1RbeJT4tSlTgf7iOHTG9FGfz25/v+4 JuWZObWc6SF5yUz/lN+800EbWUiXCccy2PpYgvr++CkvijHg+TBpkkl5Rp2wotBi 5ocMyCbBcp79ZlfhE3qsm6kLYLSrJ1czSqkzBbiv8QvpXgXuVDBohTz4D22PHfJH 2qmFUV7dfNyFyO9f7JEMYg8iXsBkKK4= -----END CERTIFICATE-----Generated at Sun Aug 24 00:32:11 2025 by rpki-client