$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa File: cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa (raw, json) Hash identifier: Pmb1OV4ezplv0SMSIhK6U/tVQA7a/FRUy18jqh+Vp78= Subject key identifier: B8:41:62:DC:DF:DB:CF:F8:46:54:9A:F8:D9:91:FE:E6:80:46:03:37 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC142C68C417FC2A3D3DE80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.148.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:42:c6:8c:41:7f:c2:a3:d3:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9a44faf9-f195-4447-8958-708ab5fd5416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:75:4c:4e:d4:ba:7a:71:93:bd:bd:c2:28: 06:29:3c:35:e0:d0:ff:e9:49:2f:ee:61:2e:c5:9a: 6d:32:83:ba:43:44:0f:fe:97:3d:be:50:47:41:73: 56:2e:e4:93:1f:a8:79:2f:8f:97:b2:22:83:bb:4e: 68:77:e6:85:7a:45:3b:2b:60:a2:35:2d:10:60:7e: 74:4a:d9:e6:0f:e9:1c:28:58:a9:45:47:8b:ba:3f: 81:68:5e:57:ea:c6:6f:75:45:6f:4a:67:7a:72:c3: 30:b2:53:d8:0d:ce:33:59:6c:65:2e:e0:23:93:ce: 99:88:30:8d:6d:b1:59:b9:56:8f:3a:f8:fe:5e:e3: aa:ab:4f:e1:4b:3a:08:ef:e0:08:d8:cd:74:63:b3: 60:43:16:2c:d9:f4:49:ce:d9:da:1a:27:23:11:ad: cb:b4:e8:bb:ea:52:d7:73:99:ab:f9:c9:3c:ab:66: 97:db:5a:ce:97:25:1f:70:62:d8:45:8a:b5:e7:c9: 13:59:fe:f3:7f:8a:92:b2:be:4d:d0:14:b6:f4:ee: bf:6d:d8:f8:f5:cb:fc:f4:f9:07:8a:a1:52:20:59: 4d:8e:70:4b:35:ce:98:42:7f:b3:47:a9:ed:cf:0c: 31:4c:88:9c:4c:05:0f:c5:a2:ee:e4:9f:60:35:bd: 53:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:41:62:DC:DF:DB:CF:F8:46:54:9A:F8:D9:91:FE:E6:80:46:03:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:73:66:6a:3e:a3:9d:e1:3d:be:ef:4d:2e:d3:d2:75:a4:b0: 49:79:43:e4:71:af:e8:f4:70:a8:20:d0:5d:60:f5:71:ce:db: b6:ae:a4:d3:05:b2:9d:cf:09:e5:b2:66:b4:3c:42:b8:ce:4a: 35:47:01:78:c9:84:80:0b:69:b0:56:f9:f3:27:ed:9f:98:d6: 4b:dc:0d:ff:97:1e:dd:56:b8:15:e3:a3:78:13:28:63:ea:aa: cf:10:9b:a0:04:30:6e:82:1d:b1:7e:4e:1f:2b:bb:fc:34:97: a5:76:a9:fd:06:19:5d:2b:61:0a:93:6e:07:4b:25:8a:fc:ef: f2:05:fe:8b:f4:e8:7d:35:b9:3f:22:75:f3:89:e0:68:73:b8: ce:6e:50:b8:c3:13:d7:7c:44:da:1a:a9:97:e7:01:f6:69:95: ca:9d:6b:66:4c:ad:c2:04:8a:14:de:de:92:ad:70:7d:da:59: 90:b9:52:23:c8:22:01:3e:99:56:a6:9f:cb:de:ec:fa:b8:06: 05:e5:03:a8:63:6a:ed:db:49:97:ac:fb:57:fa:cb:0a:06:67: 5b:59:d4:10:5c:a9:f9:01:01:9e:b5:ac:1c:c0:f2:49:b2:25: 55:a7:17:d4:33:a0:d3:fb:c4:99:55:35:93:7d:aa:87:94:a0: 2b:d3:0c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswULGjEF/wqPT3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OWE0NGZhZjktZjE5NS00NDQ3LTg5NTgtNzA4YWI1ZmQ1NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBd1TE7Uunpxk729wigGKTw14ND/6Ukv7mEu xZptMoO6Q0QP/pc9vlBHQXNWLuSTH6h5L4+XsiKDu05od+aFekU7K2CiNS0QYH50 StnmD+kcKFipRUeLuj+BaF5X6sZvdUVvSmd6csMwslPYDc4zWWxlLuAjk86ZiDCN bbFZuVaPOvj+XuOqq0/hSzoI7+AI2M10Y7NgQxYs2fRJztnaGicjEa3LtOi76lLX c5mr+ck8q2aX21rOlyUfcGLYRYq158kTWf7zf4qSsr5N0BS29O6/bdj49cv89PkH iqFSIFlNjnBLNc6YQn+zR6ntzwwxTIicTAUPxaLu5J9gNb1T+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhBYtzf28/4RlSa+NmR/uaARgM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvY2Y2YTRmYTAtM2RiMC0z MzU0LTg4ZDktNDhiMDI1ZTBmNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVzZmo+o53hPb7vTS7T0nWksEl5Q+Rxr+j0cKgg0F1g9XHO27aupNMF sp3PCeWyZrQ8QrjOSjVHAXjJhIALabBW+fMn7Z+Y1kvcDf+XHt1WuBXjo3gTKGPq qs8Qm6AEMG6CHbF+Th8ru/w0l6V2qf0GGV0rYQqTbgdLJYr87/IF/ov06H01uT8i dfOJ4GhzuM5uULjDE9d8RNoaqZfnAfZplcqda2ZMrcIEihTe3pKtcH3aWZC5UiPI IgE+mVamn8ve7Pq4BgXlA6hjau3bSZes+1f6ywoGZ1tZ1BBcqfkBAZ61rBzA8kmy JVWnF9QzoNP7xJlVNZN9qoeUoCvTDDg= -----END CERTIFICATE-----Generated at Sat Aug 23 16:43:14 2025 by rpki-client