$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bca9f9d7-d0db-3df9-acf8-7d93676af797.roa File: bca9f9d7-d0db-3df9-acf8-7d93676af797.roa (raw, json) Hash identifier: oeyNvaxVFDtwC09Br9zC1Hy++x9nkGYiwEh2wL4xRk8= Subject key identifier: B6:E2:0B:AF:5B:49:FF:F6:5A:A9:E3:30:D2:69:43:22:FA:A5:3E:14 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900BB319001D1191B09B5C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bca9f9d7-d0db-3df9-acf8-7d93676af797.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 203 IP address blocks: 20.149.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:bb:31:90:01:d1:19:1b:09:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=f3f47b8f-c4e4-42c5-b407-e331e0217122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a4:e5:7a:fe:41:1d:2e:a4:59:5c:84:64:c4: bf:47:6f:96:80:53:87:bc:30:65:bb:00:8c:bd:67: 62:bd:72:58:23:1f:d4:56:e5:b3:3b:89:c5:b5:81: dd:25:b6:4f:e7:c3:29:15:bc:4a:1d:bf:bd:67:d9: 09:e4:84:07:32:f4:59:7c:7a:d0:e3:6f:df:95:13: 7b:c2:6e:ea:85:67:a1:66:d1:37:70:5d:91:89:00: fd:a7:ba:22:a3:bc:f7:68:79:75:7a:7a:cf:45:7e: 69:89:3f:48:ab:2d:43:46:51:3a:40:13:1e:9c:08: 70:67:1a:d2:8d:82:86:ea:71:0c:34:dd:86:05:75: 45:fd:66:21:2d:31:d9:5f:d3:ad:3e:85:07:79:cb: 76:c9:3b:a0:12:a9:74:f1:81:94:aa:c8:74:b6:fd: 2b:62:07:0d:dd:11:e3:a5:bf:fd:43:e0:59:c0:f5: b2:81:cb:e6:4c:df:25:35:f0:8b:1d:25:b9:96:59: 97:d3:ba:19:12:d2:fa:15:8c:3f:07:a7:87:e8:3d: 20:e8:78:6f:8f:22:a3:e3:85:f2:88:b9:38:98:80: d5:a6:61:3a:09:1f:9c:7d:4c:e0:bc:cb:cc:64:85: a3:af:79:3a:87:fa:5f:bb:62:4d:3c:40:ce:3b:22: c0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E2:0B:AF:5B:49:FF:F6:5A:A9:E3:30:D2:69:43:22:FA:A5:3E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bca9f9d7-d0db-3df9-acf8-7d93676af797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:24:5d:79:26:d1:a0:f6:8c:8a:d1:27:89:e5:41:62:18:6b: a9:9a:e0:9b:4d:0d:bd:e8:5d:af:05:76:bd:a9:2f:20:14:f4: 54:72:3f:0a:80:94:b7:c1:ba:56:8f:c9:46:44:01:ec:db:22: cb:b8:8c:60:e5:d2:9b:9f:d1:60:06:55:c1:8d:b4:4d:72:94: 0d:46:1d:b3:ed:c4:f4:c5:41:42:9b:aa:5e:c4:7a:54:be:cb: b5:02:7d:4e:cf:97:cc:37:c1:4b:9d:f8:dd:e7:fe:f4:d6:e3: 7c:8c:0d:0a:11:12:f3:99:b3:b4:73:4a:bf:af:84:da:31:2d: bb:fc:be:32:84:c4:16:d0:b8:2b:df:27:59:6a:42:3a:35:c8: 9a:a9:7c:9b:2d:c7:96:84:65:8c:60:fc:3d:bc:fd:17:be:df: 56:12:cd:02:2d:fa:9d:5c:5f:0d:78:14:04:f1:b1:08:5c:7a: 42:38:75:8b:13:57:fa:42:2b:a1:b2:77:38:4f:51:da:92:8d: 44:83:1b:50:9e:05:f9:14:be:23:01:a1:19:0b:fa:28:11:71: 79:de:eb:4b:97:02:6d:ec:6f:5a:dc:f3:5e:10:bb:b7:af:53: 22:43:3f:60:c7:b5:5b:77:77:18:82:5f:9c:be:45:9d:bd:e3: b6:65:a5:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALsxkAHRGRsJtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZjNmNDdiOGYtYzRlNC00MmM1LWI0MDctZTMzMWUwMjE3MTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaTlev5BHS6kWVyEZMS/R2+WgFOHvDBluwCM vWdivXJYIx/UVuWzO4nFtYHdJbZP58MpFbxKHb+9Z9kJ5IQHMvRZfHrQ42/flRN7 wm7qhWehZtE3cF2RiQD9p7oio7z3aHl1enrPRX5piT9Iqy1DRlE6QBMenAhwZxrS jYKG6nEMNN2GBXVF/WYhLTHZX9OtPoUHect2yTugEql08YGUqsh0tv0rYgcN3RHj pb/9Q+BZwPWygcvmTN8lNfCLHSW5llmX07oZEtL6FYw/B6eH6D0g6HhvjyKj44Xy iLk4mIDVpmE6CR+cfUzgvMvMZIWjr3k6h/pfu2JNPEDOOyLAtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbiC69bSf/2WqnjMNJpQyL6pT4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmNhOWY5ZDctZDBkYi0z ZGY5LWFjZjgtN2Q5MzY3NmFmNzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUkXXkm0aD2jIrRJ4nlQWIYa6ma4JtNDb3oXa8Fdr2pLyAU9FRyPwqA lLfBulaPyUZEAezbIsu4jGDl0puf0WAGVcGNtE1ylA1GHbPtxPTFQUKbql7EelS+ y7UCfU7Pl8w3wUud+N3n/vTW43yMDQoREvOZs7RzSr+vhNoxLbv8vjKExBbQuCvf J1lqQjo1yJqpfJstx5aEZYxg/D28/Re+31YSzQIt+p1cXw14FATxsQhcekI4dYsT V/pCK6GydzhPUdqSjUSDG1CeBfkUviMBoRkL+igRcXne60uXAm3sb1rc814Qu7ev UyJDP2DHtVt3dxiCX5y+RZ2947Zlpdo= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:06 2025 by rpki-client