$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5dc3da9-afde-3a03-a6ca-0024e5a75c8e.roa File: e5dc3da9-afde-3a03-a6ca-0024e5a75c8e.roa (raw, json) Hash identifier: QheHpOAgGM9frw+WeD5YwSl+sPUSb1xuTXTnLQZgklk= Subject key identifier: A7:B1:D3:65:1B:20:50:8D:44:A2:94:B0:BC:58:85:31:47:13:93:DB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC142342A2C1986EA5B12C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5dc3da9-afde-3a03-a6ca-0024e5a75c8e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.148.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:42:34:2a:2c:19:86:ea:5b:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=00a918c9-39ba-4552-87aa-8f63a8b57f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:bd:bb:57:80:6c:2c:81:2c:b0:85:f7:07: ad:9f:22:d1:47:3d:e5:51:30:19:21:ed:34:c2:f2: 89:9c:db:34:d4:b0:af:08:c1:19:fc:cc:0e:03:9f: 34:49:d1:94:77:a3:bd:b7:18:16:92:d9:15:56:54: 54:4c:80:df:7e:dd:5a:22:64:f2:f3:05:1e:47:9b: 34:95:f1:49:dc:20:64:e1:0e:32:e3:4f:e0:2e:68: 12:52:d3:a5:7a:c1:60:5b:11:af:98:f9:3a:8b:95: 81:06:c8:4c:8f:de:2d:0f:bf:1a:66:2d:f5:9a:eb: d1:34:8e:48:80:9d:d4:77:65:0b:83:f2:49:96:64: 6c:6e:1f:f8:1d:3d:be:b8:d9:a1:1f:7d:3a:c1:00: c5:c9:e1:73:c4:24:85:9c:3a:96:7b:c5:80:43:0b: 4c:36:06:62:b3:5a:3f:96:65:0e:03:ca:f4:e7:3e: 6d:c4:11:eb:b0:49:04:c2:cd:67:a9:b6:cc:7e:0d: 2c:fa:2e:1c:98:7a:b1:a1:79:5f:a2:85:a5:86:b5: db:e1:f9:a0:4f:74:c0:9f:54:5b:18:ee:1d:9a:9c: 80:a6:ca:0a:3c:7f:8b:03:dc:ef:5a:98:51:cd:35: fe:2e:31:8f:28:36:8d:63:b0:cb:6e:26:01:bc:6e: be:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B1:D3:65:1B:20:50:8D:44:A2:94:B0:BC:58:85:31:47:13:93:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5dc3da9-afde-3a03-a6ca-0024e5a75c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6d:70:02:b9:7c:69:54:19:6d:4d:e9:f9:59:0a:8e:e3:cf: ce:e6:fb:4a:ef:0f:8f:47:ee:f3:a9:13:06:75:68:4f:16:59: 3b:50:a8:67:b1:23:85:47:ac:0a:a3:ca:47:6b:84:d7:61:b4: 2c:1e:fd:bc:b6:2b:94:48:f9:15:0a:d9:3a:99:29:c8:0f:cc: e9:c5:1b:8b:cc:8c:1e:fc:ed:e4:28:7a:46:0f:7b:a1:e2:73: 27:6b:6f:6b:6d:b0:89:85:9a:7c:7b:e2:c6:6a:70:b9:56:65: 0c:33:72:14:16:3d:e9:ff:5c:a2:50:54:0a:48:1c:ff:8a:ed: 1d:70:69:91:9d:a3:3d:d5:4a:b9:54:fd:44:64:2d:94:68:e5: 7b:8a:02:e6:79:73:6b:e6:d2:a0:e2:aa:a9:23:a7:04:a2:54: b8:ad:54:e5:77:dc:4c:a5:db:fa:17:f4:f4:d9:c4:f6:d3:8a: fc:f5:b8:47:b2:2c:0b:4b:e6:2a:9b:35:83:a4:8a:7d:dd:33: cf:f0:b5:28:a2:64:bd:ba:e0:84:8a:06:3b:37:08:57:98:c9: 77:40:0e:8f:99:b9:05:88:75:74:7b:e1:fa:2a:af:a7:23:91: c2:49:32:98:a5:35:99:32:93:45:83:72:d4:6a:2b:c1:6a:2b: f6:11:db:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUI0KiwZhupbEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDBhOTE4YzktMzliYS00NTUyLTg3YWEtOGY2M2E4YjU3ZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4y9u1eAbCyBLLCF9wetnyLRRz3lUTAZIe00 wvKJnNs01LCvCMEZ/MwOA580SdGUd6O9txgWktkVVlRUTIDfft1aImTy8wUeR5s0 lfFJ3CBk4Q4y40/gLmgSUtOlesFgWxGvmPk6i5WBBshMj94tD78aZi31muvRNI5I gJ3Ud2ULg/JJlmRsbh/4HT2+uNmhH306wQDFyeFzxCSFnDqWe8WAQwtMNgZis1o/ lmUOA8r05z5txBHrsEkEws1nqbbMfg0s+i4cmHqxoXlfooWlhrXb4fmgT3TAn1Rb GO4dmpyApsoKPH+LA9zvWphRzTX+LjGPKDaNY7DLbiYBvG6+KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKex02UbIFCNRKKUsLxYhTFHE5PbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTVkYzNkYTktYWZkZS0z YTAzLWE2Y2EtMDAyNGU1YTc1YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAttcAK5fGlUGW1N6flZCo7jz87m+0rvD49H7vOpEwZ1aE8WWTtQqGex I4VHrAqjykdrhNdhtCwe/by2K5RI+RUK2TqZKcgPzOnFG4vMjB787eQoekYPe6Hi cydrb2ttsImFmnx74sZqcLlWZQwzchQWPen/XKJQVApIHP+K7R1waZGdoz3VSrlU /URkLZRo5XuKAuZ5c2vm0qDiqqkjpwSiVLitVOV33Eyl2/oX9PTZxPbTivz1uEey LAtL5iqbNYOkin3dM8/wtSiiZL264ISKBjs3CFeYyXdADo+ZuQWIdXR74foqr6cj kcJJMpilNZkyk0WDctRqK8FqK/YR29s= -----END CERTIFICATE-----Generated at Sat Aug 23 15:42:30 2025 by rpki-client