$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa File: d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa (raw, json) Hash identifier: rkwEQZWF5SHgxiJw0yUquO8Tg2MwIfcckcWYYzcaxdc= Subject key identifier: 8E:88:60:1C:C9:FA:EF:21:EF:D0:33:AA:7C:D3:8A:17:EC:BE:8B:98 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC1413A3FEFE53FD6E77280 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.132.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:41:3a:3f:ef:e5:3f:d6:e7:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3e79515c-b434-4140-a7be-9129142ee22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:48:6f:54:73:a4:85:78:9a:d9:4f:1e:c5: 22:29:3e:7e:bf:82:af:24:99:3e:11:44:72:f5:d1: 5f:29:c2:35:63:29:37:98:88:0a:c3:ce:a4:39:75: a7:96:d6:32:41:b0:ca:92:14:f5:22:61:2a:db:10: d9:bc:be:7c:eb:b1:84:7c:14:3f:1d:53:4c:5b:ad: a8:4a:30:d1:03:3c:22:f1:fc:e1:ec:58:43:a0:ae: a2:c1:1c:b9:82:2e:fe:10:10:7b:e0:0a:20:a9:19: 74:43:41:4e:01:67:92:33:c7:bb:b3:b6:0e:8a:af: 67:97:f6:22:b4:8c:e4:3a:9d:7c:df:95:5c:80:f4: 02:bf:c6:13:0f:84:99:14:28:68:f7:6d:c9:b2:15: bd:a6:a8:67:1d:f0:98:9d:11:fc:84:5a:dd:65:79: dd:91:ae:54:9e:21:cf:50:db:e2:75:81:0c:78:15: c5:25:85:5b:10:f8:b9:9b:f8:d6:23:38:d0:3e:c6: b0:fa:fa:1c:1e:ab:74:d5:73:c2:95:e1:46:13:c8: fb:13:6c:aa:03:ba:e7:4d:a6:9f:88:2b:fa:9b:c9: 61:e6:d6:8d:a5:f5:ef:95:d2:ea:be:3a:d0:50:36: 6f:3a:3e:ac:bf:cc:07:87:d5:34:6f:3b:5c:ce:d8: f7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:88:60:1C:C9:FA:EF:21:EF:D0:33:AA:7C:D3:8A:17:EC:BE:8B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:5f:3b:73:68:03:db:04:ea:49:d3:d0:f3:51:b1:57:36:45: cc:0a:08:4d:3b:7d:cc:2f:41:d9:6b:c3:c9:ef:e1:8e:68:78: 89:eb:53:ec:e0:1e:5a:9b:f6:66:9b:81:9e:fc:99:17:93:39: c1:ec:27:f6:ec:c8:34:72:65:78:0f:56:95:1f:8b:a3:cf:f6: 64:71:62:3d:c2:e9:17:3b:07:8f:a4:90:3c:78:6e:9d:0c:b6: a0:2e:b7:68:29:19:3f:f0:21:c6:b8:32:b7:f4:11:04:c1:b0: 5c:4b:98:d3:1f:3a:5b:65:5f:cc:34:40:bb:fa:37:5d:c6:88: 41:02:0c:3c:14:73:ec:38:ac:44:2d:74:34:63:df:5b:01:ae: f0:68:73:de:de:16:01:c1:2a:03:f2:02:0e:18:91:01:81:54: 60:5a:0d:63:8f:b6:7d:22:01:e1:12:c4:a7:33:5f:9a:7c:f6: b3:66:b2:45:c9:cd:1b:1a:8d:60:43:38:ea:4c:24:f1:0c:00: 87:01:99:67:7e:01:d5:68:d0:57:d2:a9:ca:11:0c:80:85:5e: eb:a1:e5:29:29:d2:3b:de:70:f2:a8:c5:98:be:57:b7:08:e1: d2:58:32:60:aa:f3:47:8d:06:8c:22:e7:01:7b:7a:4e:34:c3: 55:95:1d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUE6P+/lP9bncoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2U3OTUxNWMtYjQzNC00MTQwLWE3YmUtOTEyOTE0MmVlMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta9Ib1RzpIV4mtlPHsUiKT5+v4KvJJk+EURy 9dFfKcI1Yyk3mIgKw86kOXWnltYyQbDKkhT1ImEq2xDZvL5867GEfBQ/HVNMW62o SjDRAzwi8fzh7FhDoK6iwRy5gi7+EBB74AogqRl0Q0FOAWeSM8e7s7YOiq9nl/Yi tIzkOp1835VcgPQCv8YTD4SZFCho923JshW9pqhnHfCYnRH8hFrdZXndka5UniHP UNvidYEMeBXFJYVbEPi5m/jWIzjQPsaw+vocHqt01XPCleFGE8j7E2yqA7rnTaaf iCv6m8lh5taNpfXvldLqvjrQUDZvOj6sv8wHh9U0bztcztj3nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6IYBzJ+u8h79AzqnzTihfsvouYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDU1ZTljZDEtNWU5OC0z MmQ5LTlkY2QtMzhhNGUxYTljMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFITmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFfO3NoA9sE6knT0PNRsVc2RcwKCE07fcwvQdlrw8nv4Y5oeInrU+zg Hlqb9mabgZ78mReTOcHsJ/bsyDRyZXgPVpUfi6PP9mRxYj3C6Rc7B4+kkDx4bp0M tqAut2gpGT/wIca4Mrf0EQTBsFxLmNMfOltlX8w0QLv6N13GiEECDDwUc+w4rEQt dDRj31sBrvBoc97eFgHBKgPyAg4YkQGBVGBaDWOPtn0iAeESxKczX5p89rNmskXJ zRsajWBDOOpMJPEMAIcBmWd+AdVo0FfSqcoRDICFXuuh5Skp0jvecPKoxZi+V7cI 4dJYMmCq80eNBowi5wF7ek40w1WVHWs= -----END CERTIFICATE-----Generated at Sat Aug 23 18:52:42 2025 by rpki-client