$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa File: 40d296d1-278c-3f5b-b993-eb056d922ec1.roa (raw, json) Hash identifier: xaauKAgf6kBx/YJRRTp9QuCYLG377Blnp95uwSktLhw= Subject key identifier: 95:79:2D:A5:91:7D:9A:10:7F:1F:59:DE:DB:CE:DC:35:A8:D8:D1:B0 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900CFC385C75234E0777980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 202 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cf:c3:85:c7:52:34:e0:77:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=58c8d35f-6706-4a85-82ca-aa957846a228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:61:4b:b3:1c:38:a4:36:08:68:2f:f7:26:33: 63:21:e6:ae:7e:c3:e8:e9:3b:d0:c2:22:b5:2f:fa: c3:eb:77:5e:a5:fd:70:f5:0d:c8:e8:3b:39:ab:fe: 0d:99:f1:34:09:ca:8c:e6:66:a3:6c:25:80:49:52: c2:e1:c1:b5:f4:4b:a3:ec:1a:b1:bc:25:06:b7:1c: 37:38:96:64:af:84:91:3d:a3:88:86:8f:10:b2:92: c6:2b:07:3a:ed:90:de:bb:46:10:ea:27:dd:95:84: 8b:7d:50:a6:c8:46:11:52:bb:4b:7f:20:63:cd:85: d5:f9:37:7c:9a:dd:b9:c0:ec:44:f3:ed:ae:38:b4: 23:50:01:e8:92:0f:d1:60:60:27:dc:8d:4d:a3:69: 6c:46:1b:d9:19:ce:f3:ac:93:47:67:c9:bc:9e:90: de:bf:8b:fb:48:39:a9:fc:30:1c:a6:ef:ab:b6:c2: 67:2b:31:89:c6:da:61:70:09:23:97:48:38:ae:d8: a3:8d:7b:62:2f:66:73:f6:01:86:ce:e7:22:20:74: e6:be:ed:6d:8e:0b:d5:98:c0:24:7f:d8:58:11:d8: 67:db:ab:37:ae:be:8d:b2:61:fd:ff:9c:9a:a1:a5: fa:9b:d4:d1:93:31:d2:ae:ae:e1:29:72:ae:a2:0f: dd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:79:2D:A5:91:7D:9A:10:7F:1F:59:DE:DB:CE:DC:35:A8:D8:D1:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:8a:4f:55:f3:0c:a9:5c:ca:ea:df:51:11:ab:6d:bc:5d:37: b5:a1:70:07:33:6f:e5:12:2e:aa:c8:4a:3e:f2:c9:fc:ed:f6: 1b:f8:ee:34:ae:13:2c:77:c8:0b:21:64:60:fb:20:34:92:1b: fa:aa:3d:d6:e9:35:3c:07:a3:c2:f6:e9:41:80:5f:1c:ac:4d: 42:13:cc:31:33:1a:b8:28:63:82:b4:a4:dc:eb:b9:51:3a:b0: 8c:86:4d:71:2a:61:b2:7f:ff:8a:af:58:c8:95:44:ab:88:67: 47:a4:82:6c:94:47:4c:24:9a:b3:1b:e1:bb:6d:25:a5:1c:a0: 30:43:8b:12:21:6f:72:5c:f0:82:b3:7f:bf:f5:55:3f:03:1a: 7e:8a:e4:a8:b7:2c:90:a5:94:35:13:f5:66:a7:55:a8:48:01: af:4d:d8:f3:da:de:25:dc:d8:13:92:55:61:40:1d:ac:65:a5: a6:aa:5d:b4:5f:e7:d2:31:67:d1:c0:e6:42:12:50:4b:cd:62: c3:4f:12:3a:47:05:25:52:38:7b:0d:e3:12:0f:8e:f9:72:6e: de:e8:3b:c9:3e:72:38:ee:1d:13:f9:90:bd:73:0c:3e:9a:4b: ed:46:47:8a:0a:05:aa:28:04:9f:e1:6b:13:a8:c8:5a:d0:24: ed:58:51:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAM/DhcdSNOB3eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NThjOGQzNWYtNjcwNi00YTg1LTgyY2EtYWE5NTc4NDZhMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWFLsxw4pDYIaC/3JjNjIeaufsPo6TvQwiK1 L/rD63depf1w9Q3I6Ds5q/4NmfE0CcqM5majbCWASVLC4cG19Euj7BqxvCUGtxw3 OJZkr4SRPaOIho8QspLGKwc67ZDeu0YQ6ifdlYSLfVCmyEYRUrtLfyBjzYXV+Td8 mt25wOxE8+2uOLQjUAHokg/RYGAn3I1No2lsRhvZGc7zrJNHZ8m8npDev4v7SDmp /DAcpu+rtsJnKzGJxtphcAkjl0g4rtijjXtiL2Zz9gGGzuciIHTmvu1tjgvVmMAk f9hYEdhn26s3rr6NsmH9/5yaoaX6m9TRkzHSrq7hKXKuog/dAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV5LaWRfZoQfx9Z3tvO3DWo2NGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDBkMjk2ZDEtMjc4Yy0z ZjViLWI5OTMtZWIwNTZkOTIyZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGKT1XzDKlcyurfURGrbbxdN7WhcAczb+USLqrISj7yyfzt9hv47jSu Eyx3yAshZGD7IDSSG/qqPdbpNTwHo8L26UGAXxysTUITzDEzGrgoY4K0pNzruVE6 sIyGTXEqYbJ//4qvWMiVRKuIZ0ekgmyUR0wkmrMb4bttJaUcoDBDixIhb3Jc8IKz f7/1VT8DGn6K5Ki3LJCllDUT9WanVahIAa9N2PPa3iXc2BOSVWFAHaxlpaaqXbRf 59IxZ9HA5kISUEvNYsNPEjpHBSVSOHsN4xIPjvlybt7oO8k+cjjuHRP5kL1zDD6a S+1GR4oKBaooBJ/haxOoyFrQJO1YUdk= -----END CERTIFICATE-----Generated at Wed Aug 6 09:37:45 2025 by rpki-client