$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a0a7662e-747b-33e3-8354-fbbed9b696f8.roa File: a0a7662e-747b-33e3-8354-fbbed9b696f8.roa (raw, json) Hash identifier: lh9rTla+34Z18QSMlMMPLk/6Aw5boPtSvG5XqOQCAmo= Subject key identifier: 2B:B0:19:50:A0:D1:47:B0:06:6B:6A:D0:92:3C:B0:F0:BA:94:EA:69 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900BA1C8E0B1A6AFA05C480 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a0a7662e-747b-33e3-8354-fbbed9b696f8.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 3356 IP address blocks: 20.156.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:ba:1c:8e:0b:1a:6a:fa:05:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=14b482a2-4474-47d0-920e-e2b41f966d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:91:20:fa:20:62:d8:ae:0f:8c:3f:a0:07:4a: 9c:12:1c:a7:e0:67:a5:eb:04:56:ba:20:12:3d:68: 0b:7c:ef:a5:85:92:8e:2a:91:84:e7:79:c0:87:ba: 77:dc:2b:92:aa:54:31:27:5a:7b:4f:63:19:f6:02: b2:1e:67:ef:d6:55:ad:5b:a3:90:45:7d:bc:a0:6f: 02:f4:ce:d0:40:93:c3:5c:63:b9:b5:f0:32:74:97: d4:4e:b9:83:ad:18:3f:44:d0:46:42:67:b2:7e:eb: 30:bc:84:63:8e:89:62:42:fd:eb:f9:79:50:97:0a: f3:b6:1e:d2:18:fa:39:cd:0b:b8:46:b8:a3:4c:ea: bf:31:24:7a:1d:f6:68:1e:7f:de:d5:81:aa:66:c8: 55:5e:30:7d:49:8c:b1:af:69:64:12:bc:e9:d9:7d: 2d:30:5c:8b:70:13:a2:4f:e1:e9:f3:9c:f4:6a:2e: e8:09:15:ba:95:7f:4a:d5:aa:0a:c5:3b:12:6d:e5: 97:3c:6e:3a:45:29:50:55:cf:9d:4c:4f:af:fd:c2: b8:5f:aa:72:92:38:cd:e5:a2:1f:5c:2e:40:77:d1: b7:9e:ce:a1:67:cc:ac:8e:31:36:c2:39:52:74:fa: 7d:71:15:d2:54:71:f3:4d:7e:95:84:d2:47:3a:56: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B0:19:50:A0:D1:47:B0:06:6B:6A:D0:92:3C:B0:F0:BA:94:EA:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a0a7662e-747b-33e3-8354-fbbed9b696f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.156.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:aa:22:a7:9e:b2:d6:28:68:3d:c9:70:d8:8d:d2:a8:65:6a: 6f:c4:1e:37:92:56:da:e1:e0:a8:cb:2e:6e:42:34:5e:06:3a: 6a:b6:7f:4f:78:4f:e8:4e:96:b1:30:0a:20:95:6f:a5:04:9f: 60:fc:b9:2d:33:63:ed:57:9d:1a:58:a8:b2:ab:a4:61:60:82: 7a:18:89:8d:c8:94:59:77:75:2f:a0:6f:ee:39:d4:e5:10:5f: 32:95:58:3a:f6:c1:f9:cd:41:a0:04:03:ef:d9:53:a6:77:16: 1b:bb:60:d8:29:b4:be:b3:e4:d5:3b:30:3e:47:3a:a0:37:c3: dd:a0:33:09:71:d9:f0:fb:00:a5:2b:cd:7a:57:c6:52:e3:4d: 3d:b0:60:d7:61:b9:fc:c7:9d:a9:89:15:81:86:1b:8c:e9:1b: cf:0d:69:e8:a8:fb:e4:08:6e:78:f4:c8:06:08:23:0e:4f:f9: a8:d1:e4:65:b4:ab:5c:f5:a4:b7:c0:c6:45:50:06:40:06:4c: 1e:6e:37:98:32:a1:3a:90:95:7f:16:8b:2b:a3:5f:9e:cf:a7: 9b:3a:6f:70:cd:22:58:ee:c5:e7:fe:b6:d8:27:54:46:05:9d: 19:ba:90:3e:51:12:cd:05:48:2a:c3:ea:9c:05:e6:65:38:6d: 86:56:a7:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALocjgsaavoFxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MTRiNDgyYTItNDQ3NC00N2QwLTkyMGUtZTJiNDFmOTY2ZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Eg+iBi2K4PjD+gB0qcEhyn4Gel6wRWuiAS PWgLfO+lhZKOKpGE53nAh7p33CuSqlQxJ1p7T2MZ9gKyHmfv1lWtW6OQRX28oG8C 9M7QQJPDXGO5tfAydJfUTrmDrRg/RNBGQmeyfuswvIRjjoliQv3r+XlQlwrzth7S GPo5zQu4RrijTOq/MSR6HfZoHn/e1YGqZshVXjB9SYyxr2lkErzp2X0tMFyLcBOi T+Hp85z0ai7oCRW6lX9K1aoKxTsSbeWXPG46RSlQVc+dTE+v/cK4X6pykjjN5aIf XC5Ad9G3ns6hZ8ysjjE2wjlSdPp9cRXSVHHzTX6VhNJHOla8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuwGVCg0UewBmtq0JI8sPC6lOppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTBhNzY2MmUtNzQ3Yi0z M2UzLTgzNTQtZmJiZWQ5YjY5NmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJypMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKqIqeestYoaD3JcNiN0qhlam/EHjeSVtrh4KjLLm5CNF4GOmq2f094 T+hOlrEwCiCVb6UEn2D8uS0zY+1XnRpYqLKrpGFggnoYiY3IlFl3dS+gb+451OUQ XzKVWDr2wfnNQaAEA+/ZU6Z3Fhu7YNgptL6z5NU7MD5HOqA3w92gMwlx2fD7AKUr zXpXxlLjTT2wYNdhufzHnamJFYGGG4zpG88Naeio++QIbnj0yAYIIw5P+ajR5GW0 q1z1pLfAxkVQBkAGTB5uN5gyoTqQlX8WiyujX57Pp5s6b3DNIljuxef+ttgnVEYF nRm6kD5REs0FSCrD6pwF5mU4bYZWp0A= -----END CERTIFICATE-----Generated at Thu Jul 31 02:11:39 2025 by rpki-client