$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6e4997bf-68a7-3e50-afe4-11cfb54fc73f.roa File: 6e4997bf-68a7-3e50-afe4-11cfb54fc73f.roa (raw, json) Hash identifier: tAuaXedGBRp+ipwc64MUwxUZJvKb9CrY68M37LyJhWM= Subject key identifier: 3E:2B:C7:81:2D:AC:E3:2B:3C:A4:2F:07:FA:42:63:36:BF:7B:49:91 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900BAC63DB31DFB3C44A700 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6e4997bf-68a7-3e50-afe4-11cfb54fc73f.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 3356 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:ba:c6:3d:b3:1d:fb:3c:44:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=1efd5881-a7bd-4058-a6ad-ecf1f4a98bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:94:64:24:60:8b:e9:b7:e8:61:56:59:ce: db:e9:84:67:75:cd:f9:fa:c2:20:05:f4:b6:aa:2f: 37:de:fb:ae:3d:56:43:7c:24:72:d4:47:a1:08:74: 4d:c9:92:9d:c3:17:9b:39:7e:72:5d:28:fc:5f:e3: 62:94:40:60:64:7c:ea:db:25:77:61:03:14:e7:34: bf:b5:00:5d:7c:3c:86:7c:6c:b4:0c:ce:82:68:0f: 93:1e:3a:d2:57:a0:65:6f:dc:c2:be:76:03:8b:b4: 3f:57:77:f6:3c:ae:50:f9:8d:2b:1d:c0:63:3d:35: ca:46:f3:50:70:c1:1d:33:43:2d:60:52:24:65:fc: cd:34:37:1a:ce:16:4a:25:01:c6:61:d6:14:d2:96: 57:31:ba:66:83:32:26:fa:05:d8:ee:3d:77:3e:49: 63:cc:1d:8e:76:a1:63:3a:8c:61:37:1a:86:62:8f: bc:c2:bf:0e:58:7e:bb:a4:43:fa:8d:40:fe:85:4c: b3:7d:78:d2:ec:f6:75:6b:67:9e:5b:61:c1:1c:4f: e3:4d:d1:75:3e:68:d5:09:c4:ab:bb:d8:38:d4:86: ce:ff:5d:aa:37:ae:44:f0:ad:0c:ee:79:e8:fd:5c: af:ef:05:d3:b7:73:a4:bb:8b:b0:8a:61:9a:0c:ad: 1d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2B:C7:81:2D:AC:E3:2B:3C:A4:2F:07:FA:42:63:36:BF:7B:49:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6e4997bf-68a7-3e50-afe4-11cfb54fc73f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:32:4f:91:43:18:82:14:4d:05:45:0c:f5:df:4f:4a:49:da: 37:0d:63:19:7c:78:f5:21:b8:15:5b:d7:a8:7a:ee:bc:3c:7a: 1b:c8:93:44:4d:77:b5:a1:c5:90:fd:b8:e2:53:d3:4d:57:e3: 67:dc:ba:51:9c:1e:84:4a:00:d4:36:78:e3:76:59:3e:81:df: 5e:36:08:01:a7:c0:d0:f4:30:b1:38:25:11:0a:ea:74:c6:96: 8f:45:a8:89:16:e4:9a:43:4f:a6:63:3f:e4:2e:cb:ec:5d:53: 86:28:6a:e7:4d:ad:01:11:c9:a9:0d:15:1f:cb:4c:54:6e:fd: b5:91:4f:2d:17:cd:69:11:9c:8a:26:ab:d6:a4:8b:45:d4:a5: e8:68:78:6a:09:34:89:f5:8d:3d:25:e0:8f:bd:b8:ec:5e:26: 9c:7a:9e:b8:b9:7c:ce:e9:69:f1:aa:c0:6e:e7:5d:64:27:e2: ae:da:54:ac:92:56:65:6e:1e:80:29:e3:4f:ef:e0:ce:ef:e7: d7:4d:4b:c6:5b:95:24:8b:8d:c2:3d:43:3d:6f:d3:86:52:d7: b7:69:7b:92:3f:67:b8:e1:70:5c:25:ad:f3:32:d9:69:03:f7: 16:1c:26:5c:80:ce:df:98:07:4c:e3:c3:ea:d8:e5:c9:22:10: b4:3b:18:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALrGPbMd+zxEpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MWVmZDU4ODEtYTdiZC00MDU4LWE2YWQtZWNmMWY0YTk4YmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsqUZCRgi+m36GFWWc7b6YRndc35+sIgBfS2 qi833vuuPVZDfCRy1EehCHRNyZKdwxebOX5yXSj8X+NilEBgZHzq2yV3YQMU5zS/ tQBdfDyGfGy0DM6CaA+THjrSV6Blb9zCvnYDi7Q/V3f2PK5Q+Y0rHcBjPTXKRvNQ cMEdM0MtYFIkZfzNNDcazhZKJQHGYdYU0pZXMbpmgzIm+gXY7j13PkljzB2OdqFj OoxhNxqGYo+8wr8OWH67pEP6jUD+hUyzfXjS7PZ1a2eeW2HBHE/jTdF1PmjVCcSr u9g41IbO/12qN65E8K0M7nno/Vyv7wXTt3Oku4uwimGaDK0dDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4rx4EtrOMrPKQvB/pCYza/e0mRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNmU0OTk3YmYtNjhhNy0z ZTUwLWFmZTQtMTFjZmI1NGZjNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwyT5FDGIIUTQVFDPXfT0pJ2jcNYxl8ePUhuBVb16h67rw8ehvIk0RN d7WhxZD9uOJT001X42fculGcHoRKANQ2eON2WT6B3142CAGnwND0MLE4JREK6nTG lo9FqIkW5JpDT6ZjP+Quy+xdU4YoaudNrQERyakNFR/LTFRu/bWRTy0XzWkRnIom q9aki0XUpehoeGoJNIn1jT0l4I+9uOxeJpx6nri5fM7pafGqwG7nXWQn4q7aVKyS VmVuHoAp40/v4M7v59dNS8ZblSSLjcI9Qz1v04ZS17dpe5I/Z7jhcFwlrfMy2WkD 9xYcJlyAzt+YB0zjw+rY5ckiELQ7GMg= -----END CERTIFICATE-----Generated at Wed Aug 6 11:04:21 2025 by rpki-client