$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8fdd8a8-03ee-3363-826a-3c00eb9f5f88.roa File: f8fdd8a8-03ee-3363-826a-3c00eb9f5f88.roa (raw, json) Hash identifier: O1q+n2LUcoP0Tpc+bVBc+jYajzHSF+icwz5xa0cNFAs= Subject key identifier: 67:21:E3:15:91:65:B8:A6:02:D6:BA:EF:D8:37:51:70:5E:23:7D:F8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900BB8B8C3420400201E9C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8fdd8a8-03ee-3363-826a-3c00eb9f5f88.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 3360 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:bb:8b:8c:34:20:40:02:01:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=a3b5b6f4-0ff0-4a31-bcbb-d40fee041420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:f1:90:6e:04:1c:ad:3f:58:11:25:cd:c1: 21:60:89:19:80:df:fd:5f:f5:b4:64:01:0a:99:85: 92:e5:51:d7:37:fc:e9:c5:d5:49:c0:c2:fb:30:a2: da:5d:72:54:88:91:ab:8d:5a:e6:16:ce:68:e1:a7: 34:43:53:82:e2:2d:1d:25:0e:1a:8b:d7:66:fd:35: ff:bb:ec:55:70:4b:32:cc:b6:66:4e:29:e1:6f:ad: 7d:4c:0f:82:a4:36:86:12:d1:4f:8c:90:48:51:8e: d9:68:45:e8:2a:d4:61:1f:61:42:2c:d5:7f:05:0e: 5b:24:1a:3c:3d:5f:9e:bc:e0:83:e3:e2:4d:ca:9b: cd:fb:ab:5d:11:e0:b7:f7:0c:22:d2:84:9d:3b:f0: 8a:2f:37:1f:a5:9d:98:d8:c6:17:55:8a:4f:41:e7: 3e:f8:a7:d7:b0:be:60:d5:f8:bc:84:92:c9:07:fa: 19:38:72:5d:fd:f7:37:06:3b:db:9e:04:14:51:da: 32:11:79:2d:30:fc:1f:06:f8:2f:98:92:a2:24:d7: 19:54:8e:21:d1:b3:df:21:80:0a:31:c2:c2:71:80: 63:58:fa:77:f6:84:02:48:b0:5e:d7:f1:bd:e2:ed: 49:bc:8e:40:47:b7:bc:7a:31:7a:85:73:29:27:7c: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:21:E3:15:91:65:B8:A6:02:D6:BA:EF:D8:37:51:70:5E:23:7D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8fdd8a8-03ee-3363-826a-3c00eb9f5f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a8:35:f7:2a:56:cb:4b:4f:c4:8c:bd:cc:38:dd:9f:c4:9a: a0:70:26:3a:ff:4b:68:8d:31:f3:94:d5:f7:0b:ca:ad:23:9f: 82:3b:cb:41:65:6a:08:b4:61:8b:38:a4:18:4e:c2:47:64:af: 89:5f:4a:e2:7c:68:7e:1a:16:9b:da:79:e7:57:d3:dc:ca:d2: 6a:61:79:e8:af:44:18:95:e6:2d:80:88:f0:f1:f4:a3:23:21: 3b:02:25:12:99:b6:9b:a9:c2:6f:9b:dd:19:4a:e7:3c:e9:eb: 85:33:6b:55:8d:38:71:d9:95:1c:ae:a5:53:f0:ae:cb:a6:eb: 4f:92:7c:ea:b2:bc:78:de:d2:0d:ed:ec:bb:23:7d:92:eb:8d: 36:74:57:cb:14:b1:ce:0f:a5:d6:03:9b:57:2e:8b:56:72:42: d3:22:fe:54:8e:72:3e:b8:e9:22:4a:8e:7a:87:fb:31:7a:4d: 8a:5a:98:63:fa:36:a1:89:46:d9:b9:cd:6d:ea:03:f4:15:c7: df:3d:76:5f:dc:70:58:c1:d9:ec:be:aa:80:a5:b4:14:d3:68: e7:35:61:3e:13:e5:a4:d8:1b:f7:87:ad:1c:bc:3b:43:a9:8b: 3d:02:ef:4c:18:29:aa:67:af:11:a3:a8:1a:77:63:82:0f:34: 7d:52:e7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALuLjDQgQAIB6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YTNiNWI2ZjQtMGZmMC00YTMxLWJjYmItZDQwZmVlMDQxNDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMHxkG4EHK0/WBElzcEhYIkZgN/9X/W0ZAEK mYWS5VHXN/zpxdVJwML7MKLaXXJUiJGrjVrmFs5o4ac0Q1OC4i0dJQ4ai9dm/TX/ u+xVcEsyzLZmTinhb619TA+CpDaGEtFPjJBIUY7ZaEXoKtRhH2FCLNV/BQ5bJBo8 PV+evOCD4+JNypvN+6tdEeC39wwi0oSdO/CKLzcfpZ2Y2MYXVYpPQec++KfXsL5g 1fi8hJLJB/oZOHJd/fc3BjvbngQUUdoyEXktMPwfBvgvmJKiJNcZVI4h0bPfIYAK McLCcYBjWPp39oQCSLBe1/G94u1JvI5AR7e8ejF6hXMpJ3xUawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGch4xWRZbimAta679g3UXBeI334MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjhmZGQ4YTgtMDNlZS0z MzYzLTgyNmEtM2MwMGViOWY1Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6oNfcqVstLT8SMvcw43Z/EmqBwJjr/S2iNMfOU1fcLyq0jn4I7y0Fl agi0YYs4pBhOwkdkr4lfSuJ8aH4aFpvaeedX09zK0mpheeivRBiV5i2AiPDx9KMj ITsCJRKZtpupwm+b3RlK5zzp64Uza1WNOHHZlRyupVPwrsum60+SfOqyvHje0g3t 7LsjfZLrjTZ0V8sUsc4PpdYDm1cui1ZyQtMi/lSOcj646SJKjnqH+zF6TYpamGP6 NqGJRtm5zW3qA/QVx989dl/ccFjB2ey+qoCltBTTaOc1YT4T5aTYG/eHrRy8O0Op iz0C70wYKapnrxGjqBp3Y4IPNH1S5x8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:52:00 2025 by rpki-client