$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa File: 38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa (raw, json) Hash identifier: ersXaEvj9kvy99Ylac+u0DYDU1VSKPGDQfYfzONtRPo= Subject key identifier: 61:D2:94:C8:28:3B:46:19:1D:ED:82:B5:04:EE:AB:4F:EC:CB:7E:6C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900BA8CC6460BC64BDC0300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 202 IP address blocks: 20.156.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:ba:8c:c6:46:0b:c6:4b:dc:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=f0aef583-7e81-4629-aeaa-a9b4f69e9b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:23:e1:30:c9:96:fe:d5:62:65:2f:3a:e4:65: 58:d4:c9:51:f8:3b:4b:10:30:45:02:13:51:e7:f6: b4:ba:68:b9:7f:09:27:53:85:13:95:09:3b:d3:73: 6e:ab:a2:2c:39:05:f1:69:c2:a1:ae:67:be:c2:08: c4:17:13:d1:ba:c2:43:45:80:c2:0d:c9:36:c3:9f: cc:a4:8c:dd:e5:0d:5c:ab:9d:0b:43:ef:1b:ea:a2: 3b:b1:9d:22:be:89:1d:38:98:9b:34:ab:f5:56:87: 6b:2f:cb:6e:6e:33:2d:76:91:2f:e6:e4:34:02:a1: 4f:8d:e3:b5:21:3f:ea:b2:3e:27:7a:85:e8:c0:70: e9:f8:f5:de:04:89:99:10:86:8e:82:4b:d5:e7:b4: e4:e1:5f:da:76:12:a8:c3:ed:0e:0b:99:3c:97:2d: 3b:36:7c:3f:ee:d0:f6:e7:7f:f5:55:15:de:15:34: 2a:37:c1:a4:a2:ff:2a:82:e0:28:9c:f0:59:6c:6e: 87:f1:65:a9:0b:75:5a:cd:13:00:ae:f4:f9:24:96: 4c:3f:bd:56:2a:09:22:e6:9a:4b:da:f6:87:de:e9: e0:01:f6:4a:33:6a:b9:b8:94:a3:af:a8:a1:3a:96: 1b:a6:6a:b9:6a:95:db:b8:ea:6b:ae:77:cd:50:38: 1f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D2:94:C8:28:3B:46:19:1D:ED:82:B5:04:EE:AB:4F:EC:CB:7E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.156.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:40:6c:0b:fc:05:47:c2:d2:86:4a:fa:c0:1d:27:6e:59:dc: 26:81:b6:6f:0e:2d:1a:fc:c2:b7:5b:bb:39:c7:e1:b0:a7:1f: 18:9b:06:e8:f5:5e:1c:49:cb:e6:4a:f4:44:f9:d1:65:bb:04: 56:5b:09:70:58:46:a2:ab:f6:cb:4c:44:d2:9d:7b:5c:c1:52: aa:02:83:e5:df:7c:6d:c8:59:86:43:d8:12:d6:de:ec:19:b2: c1:d7:03:e8:0b:87:02:e2:ac:03:be:de:c0:bf:95:10:79:66: aa:59:54:58:70:63:80:ea:5d:be:13:5c:21:1f:d6:19:c1:30: f3:93:16:17:6f:56:a5:1a:cc:04:f8:74:b4:70:48:9e:6e:b9: 46:09:d9:79:4e:53:4a:e0:1b:04:c5:f2:e4:5b:5c:e8:65:2d: de:f9:c5:9e:45:ea:27:35:62:9f:d0:6a:8c:0d:92:2b:81:36: 4e:c3:3b:ff:eb:24:ac:52:2f:11:fb:9c:86:5e:dc:61:b8:36: 1d:bf:1f:a3:1b:ed:29:5a:e3:aa:4b:34:0b:65:70:b4:cb:63: 8a:2f:8a:a9:be:71:2e:07:70:93:62:17:d7:e4:a3:b5:87:e1: 50:51:5b:a6:ff:6e:8d:69:20:43:ac:d4:a6:54:70:69:a6:7e: 1d:c6:d1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALqMxkYLxkvcAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZjBhZWY1ODMtN2U4MS00NjI5LWFlYWEtYTliNGY2OWU5YjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSPhMMmW/tViZS865GVY1MlR+DtLEDBFAhNR 5/a0umi5fwknU4UTlQk703Nuq6IsOQXxacKhrme+wgjEFxPRusJDRYDCDck2w5/M pIzd5Q1cq50LQ+8b6qI7sZ0ivokdOJibNKv1VodrL8tubjMtdpEv5uQ0AqFPjeO1 IT/qsj4neoXowHDp+PXeBImZEIaOgkvV57Tk4V/adhKow+0OC5k8ly07Nnw/7tD2 53/1VRXeFTQqN8Gkov8qguAonPBZbG6H8WWpC3VazRMArvT5JJZMP71WKgki5ppL 2vaH3ungAfZKM2q5uJSjr6ihOpYbpmq5apXbuOprrnfNUDgfQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHSlMgoO0YZHe2CtQTuq0/sy35sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhjYTU2NDMtZmU0OS0z MTA4LThkYmQtZDRjYjYzZTRlOTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJypMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZAbAv8BUfC0oZK+sAdJ25Z3CaBtm8OLRr8wrdbuznH4bCnHxibBuj1 XhxJy+ZK9ET50WW7BFZbCXBYRqKr9stMRNKde1zBUqoCg+XffG3IWYZD2BLW3uwZ ssHXA+gLhwLirAO+3sC/lRB5ZqpZVFhwY4DqXb4TXCEf1hnBMPOTFhdvVqUazAT4 dLRwSJ5uuUYJ2XlOU0rgGwTF8uRbXOhlLd75xZ5F6ic1Yp/QaowNkiuBNk7DO//r JKxSLxH7nIZe3GG4Nh2/H6Mb7Sla46pLNAtlcLTLY4oviqm+cS4HcJNiF9fko7WH 4VBRW6b/bo1pIEOs1KZUcGmmfh3G0ZE= -----END CERTIFICATE-----Generated at Fri Aug 8 10:14:10 2025 by rpki-client