$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa File: da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa (raw, json) Hash identifier: yJs3MI4bOPN1AAA7IRIBwJm/RbC8r91TRxFw/qOmjhI= Subject key identifier: 35:79:FF:C7:7D:76:E0:4F:9A:25:AE:2B:5F:AB:B8:26:1A:3D:D7:59 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900CE936798CC97C5B4B160 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 203 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:ce:93:67:98:cc:97:c5:b4:b1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=2ccd944d-1d8b-4fd8-a37c-aa5ea3942d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:43:52:14:d8:d9:1a:e4:ab:44:84:05:5a: 34:f7:a9:cc:45:fc:72:f8:ff:ee:52:77:8b:12:a6: ff:eb:7f:1d:bf:be:9b:17:b8:b6:0b:84:b6:fa:ff: d4:ff:80:35:fd:fe:34:53:df:be:a6:1f:9a:77:75: ee:e5:5b:85:c9:0a:1f:83:d1:fe:f2:92:f0:c6:e8: 96:00:3c:a3:0f:0f:fe:81:bb:6a:ac:94:5e:5d:1e: c5:cb:cf:97:28:99:b8:93:9f:92:66:f9:3c:1c:be: aa:2c:c3:12:07:e8:52:3a:83:7f:7b:5b:b1:04:af: 41:c4:a1:fe:a7:88:f3:d1:8d:d4:68:0b:f4:22:bb: 79:1c:2d:78:d2:19:f2:ed:0a:b6:f5:b9:95:4d:ca: 91:1e:c5:5b:48:d7:68:96:25:6d:4d:2a:2d:1d:f3: db:e7:d7:c2:41:c0:85:b7:71:66:28:9c:4d:5a:ca: 5e:92:62:6f:48:87:a3:35:d1:a5:5c:8e:99:c8:b1: 82:7c:6e:f4:f6:6b:64:c8:5f:6e:fe:51:7f:d3:ed: d9:58:a0:0c:dd:47:04:68:ee:04:2c:1a:46:71:90: a7:f5:ba:c6:db:a2:cd:e9:b8:8a:f5:9f:b7:8b:39: 05:53:9d:09:79:0b:f2:b8:24:f4:9c:88:f3:4b:82: b5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:79:FF:C7:7D:76:E0:4F:9A:25:AE:2B:5F:AB:B8:26:1A:3D:D7:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ba:d8:ce:d9:c5:11:fc:26:35:7f:14:e9:1b:b3:88:48:57: bc:05:56:54:3b:75:48:96:41:9c:d5:7a:fc:ab:1c:0d:79:5e: 3f:51:74:9c:12:26:86:a5:0e:09:f4:a0:c9:1e:c0:c8:50:f7: 69:f5:05:8a:11:d8:3a:95:47:66:5f:95:0c:ca:27:b1:6f:f5: 93:ad:82:55:69:1b:21:01:fd:9e:a2:34:93:be:7e:70:62:6f: b7:be:6d:93:6d:96:b3:e0:e0:1a:c9:31:db:c3:56:55:9f:5d: 1d:61:6a:29:f6:72:32:60:4a:19:8d:a8:d8:d5:f7:79:20:44: a0:87:ca:6b:67:53:42:2c:f3:38:79:81:5e:af:9b:bd:6b:19: 41:ed:8f:31:cb:3e:b9:da:56:14:f2:f9:3a:59:de:94:b9:b4: bf:9c:4a:40:f3:08:a6:2f:27:b0:42:0c:15:e7:2b:00:13:ff: f6:87:a6:4b:71:ee:f9:d0:83:75:3a:86:b3:8c:e4:e7:b3:03: 8a:65:e9:f1:be:63:dd:d4:e0:d5:f1:e5:30:7c:cd:61:9a:3f: de:78:47:03:57:b6:6f:93:7c:8d:d1:59:bc:01:f7:4c:8d:a0: 23:50:67:dd:af:ea:c8:ba:a2:cb:f4:b8:44:b1:d0:57:df:39: 10:26:2f:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAM6TZ5jMl8W0sWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MmNjZDk0NGQtMWQ4Yi00ZmQ4LWEzN2MtYWE1ZWEzOTQyZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGRDUhTY2Rrkq0SEBVo096nMRfxy+P/uUneL Eqb/638dv76bF7i2C4S2+v/U/4A1/f40U9++ph+ad3Xu5VuFyQofg9H+8pLwxuiW ADyjDw/+gbtqrJReXR7Fy8+XKJm4k5+SZvk8HL6qLMMSB+hSOoN/e1uxBK9BxKH+ p4jz0Y3UaAv0Irt5HC140hny7Qq29bmVTcqRHsVbSNdoliVtTSotHfPb59fCQcCF t3FmKJxNWspekmJvSIejNdGlXI6ZyLGCfG709mtkyF9u/lF/0+3ZWKAM3UcEaO4E LBpGcZCn9brG26LN6biK9Z+3izkFU50JeQvyuCT0nIjzS4K1GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDV5/8d9duBPmiWuK1+ruCYaPddZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwYWE1ZjEtNTllNi0z ZmRkLTgyYmItYTA0OTI0MWY2MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi62M7ZxRH8JjV/FOkbs4hIV7wFVlQ7dUiWQZzVevyrHA15Xj9RdJwS JoalDgn0oMkewMhQ92n1BYoR2DqVR2ZflQzKJ7Fv9ZOtglVpGyEB/Z6iNJO+fnBi b7e+bZNtlrPg4BrJMdvDVlWfXR1hain2cjJgShmNqNjV93kgRKCHymtnU0Is8zh5 gV6vm71rGUHtjzHLPrnaVhTy+TpZ3pS5tL+cSkDzCKYvJ7BCDBXnKwAT//aHpktx 7vnQg3U6hrOM5OezA4pl6fG+Y93U4NXx5TB8zWGaP954RwNXtm+TfI3RWbwB90yN oCNQZ92v6si6osv0uESx0FffORAmLxM= -----END CERTIFICATE-----Generated at Sat Aug 23 20:19:38 2025 by rpki-client