$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa File: c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa (raw, json) Hash identifier: mKelOlv/hwX2z4mNVDy5DV1msPkfW5/cEhNgzVaXh30= Subject key identifier: 1F:F4:AE:A2:E6:55:93:22:BC:D5:11:40:B2:05:D8:1E:E7:A3:C1:36 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900BC59024D407E0CB90380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 202 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:bc:59:02:4d:40:7e:0c:b9:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=7876141a-5d0e-470b-8a94-a41db0d4ea4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c6:2c:84:50:5d:0b:32:71:49:04:ce:77:38: c7:b8:66:98:5b:fe:42:81:f5:b2:04:1b:65:b5:97: 53:52:d6:0c:07:7d:3b:ed:12:c1:61:f7:85:0b:a7: 3e:5a:e7:f1:1c:ac:dc:b1:14:e9:2a:1d:03:e4:4f: b2:8e:92:42:42:7e:4f:a0:2d:60:07:6c:15:e5:f5: 3a:e2:80:16:97:fd:17:3c:c4:34:7e:15:f6:28:6f: 0d:5a:20:28:bf:9c:a9:f3:f7:bd:4a:18:b2:25:9c: 3b:3b:c8:7e:e2:ab:a7:99:e9:84:3b:ca:d3:65:0b: 3d:b2:0c:d7:f7:bd:03:ca:c8:1c:b0:f8:5d:72:17: 53:b9:8e:50:01:62:37:67:68:93:53:4a:9c:9c:c4: 99:ba:71:d7:92:13:7f:e2:35:83:ec:cf:60:a8:a6: a2:9c:29:4f:60:bf:e3:9d:9b:26:15:bb:b9:94:49: 75:0a:4e:dc:6f:60:e0:b8:97:e0:dc:b0:6a:36:25: 08:5c:09:e4:89:ff:e0:da:46:85:b2:7b:6b:c6:0e: ff:fa:da:9e:e8:65:ab:33:a6:51:ee:ec:83:7d:96: c0:9b:11:b1:2d:f4:65:99:41:59:a6:38:ac:55:15: 23:fa:f8:c7:4f:d8:71:73:00:25:95:25:47:7a:ca: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F4:AE:A2:E6:55:93:22:BC:D5:11:40:B2:05:D8:1E:E7:A3:C1:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a5:6f:f2:6b:8d:bd:b5:9f:32:ee:93:a2:a1:be:96:cb:09: 85:af:fb:27:97:fd:6f:63:28:42:10:c8:52:e8:0e:1d:42:9d: af:6b:d3:de:ad:eb:60:7f:8d:f5:57:89:e1:cf:85:03:8b:c8: 59:41:61:50:97:5b:84:3e:f7:cf:ab:13:f3:33:13:05:e9:61: d3:c8:cb:7f:6b:15:2a:39:2f:fa:31:23:8c:31:36:80:cd:a3: 96:a7:13:d0:a8:6b:1b:b4:37:2c:d1:ca:6b:0b:db:3e:91:9e: c4:af:3c:2d:6b:4f:6b:a4:fc:ba:53:aa:63:87:e0:f2:23:d6: 17:d9:67:36:a1:68:6d:2a:3b:24:56:3e:5b:65:a6:76:fa:06: 1f:88:cb:49:9c:93:0c:69:d4:fd:06:33:a6:be:0e:8d:dc:66: 2e:1a:ee:fc:06:c3:70:08:55:4f:89:51:39:83:03:de:b0:7a: a2:e4:29:60:ce:4f:97:39:62:dc:ba:a3:28:35:7a:05:b7:87: d2:9a:c1:e4:45:37:6d:d2:53:8c:5b:18:36:00:dc:e7:26:47: 24:eb:61:ab:97:1f:87:fc:dc:67:43:ff:3f:57:f6:3a:b1:13: d8:27:24:d4:b6:17:4f:7a:c8:1c:20:94:19:ad:9c:dd:96:da: 2e:3b:3e:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALxZAk1Afgy5A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk Nzg3NjE0MWEtNWQwZS00NzBiLThhOTQtYTQxZGIwZDRlYTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMYshFBdCzJxSQTOdzjHuGaYW/5CgfWyBBtl tZdTUtYMB3077RLBYfeFC6c+WufxHKzcsRTpKh0D5E+yjpJCQn5PoC1gB2wV5fU6 4oAWl/0XPMQ0fhX2KG8NWiAov5yp8/e9ShiyJZw7O8h+4qunmemEO8rTZQs9sgzX 970DysgcsPhdchdTuY5QAWI3Z2iTU0qcnMSZunHXkhN/4jWD7M9gqKainClPYL/j nZsmFbu5lEl1Ck7cb2DguJfg3LBqNiUIXAnkif/g2kaFsntrxg7/+tqe6GWrM6ZR 7uyDfZbAmxGxLfRlmUFZpjisVRUj+vjHT9hxcwAllSVHesp6JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/0rqLmVZMivNURQLIF2B7no8E2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzQ4Y2M3MzAtOWE4Yi0z Mzc2LWFiNTctOWY0YWFmYzc5MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+lb/Jrjb21nzLuk6KhvpbLCYWv+yeX/W9jKEIQyFLoDh1Cna9r096t 62B/jfVXieHPhQOLyFlBYVCXW4Q+98+rE/MzEwXpYdPIy39rFSo5L/oxI4wxNoDN o5anE9Coaxu0NyzRymsL2z6RnsSvPC1rT2uk/LpTqmOH4PIj1hfZZzahaG0qOyRW Pltlpnb6Bh+Iy0mckwxp1P0GM6a+Do3cZi4a7vwGw3AIVU+JUTmDA96weqLkKWDO T5c5Yty6oyg1egW3h9KaweRFN23SU4xbGDYA3OcmRyTrYauXH4f83GdD/z9X9jqx E9gnJNS2F096yBwglBmtnN2W2i47Pn8= -----END CERTIFICATE-----Generated at Wed Aug 6 14:09:48 2025 by rpki-client