$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0cbe70e0-5696-393a-9fc7-73ad4f3a0fcc.roa File: 0cbe70e0-5696-393a-9fc7-73ad4f3a0fcc.roa (raw, json) Hash identifier: nfEF4FqhSBMAV2nGKaLc4Kd4939w6Lfck0MD57AYAlc= Subject key identifier: 4D:88:2F:31:05:09:7C:F3:54:8B:6D:F7:97:9C:D7:A5:94:39:64:25 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A549B215E8E3864F58E2D8D00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0cbe70e0-5696-393a-9fc7-73ad4f3a0fcc.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 202 IP address blocks: 20.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:21:5e:8e:38:64:f5:8e:2d:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=0ae3180e-ab6a-47b7-be25-0f7a0dca19b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:26:51:d6:65:f3:97:51:29:73:a0:fa:5c: 57:0d:19:8a:22:7d:91:79:91:ff:8e:55:18:c4:85: 83:f8:3d:f8:4d:61:45:8a:85:52:ac:30:0e:9e:94: 05:36:78:25:06:ca:17:9e:05:e7:58:ac:a6:0b:7c: 5b:45:17:dc:b6:11:17:c2:c4:e3:d8:60:ff:fc:48: 6a:03:cf:46:9d:f2:42:cc:52:62:11:dd:97:aa:5a: c6:b4:06:0b:10:43:7b:d1:43:bc:04:88:af:7c:fa: 12:b7:ab:5c:3d:77:52:93:25:9a:11:01:a5:fe:e5: 0c:87:dc:9f:e4:a6:23:0c:42:1b:79:da:a2:84:83: 52:ae:9c:38:bb:b3:ea:4b:0b:dd:5b:0f:aa:1c:1e: 06:99:f9:d4:32:e3:cc:55:0e:27:a6:07:f3:66:46: 13:68:3c:e6:5b:e0:a3:f8:46:55:a8:7d:84:23:ac: 8a:f7:31:d0:9a:6c:4c:a3:08:cf:f9:72:c2:85:d5: c5:bf:bd:68:3a:5d:c9:fb:f6:05:eb:f1:2d:a9:c1: 65:1b:eb:be:ff:95:a1:e5:21:5f:18:94:a3:b5:41: c7:59:21:5e:37:02:89:15:7e:81:1a:a7:2c:bb:21: dc:2c:9b:f1:cc:44:c7:b0:5b:4c:53:69:73:85:99: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:88:2F:31:05:09:7C:F3:54:8B:6D:F7:97:9C:D7:A5:94:39:64:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0cbe70e0-5696-393a-9fc7-73ad4f3a0fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b3:7c:99:90:2f:2e:bf:91:f0:6d:d2:68:79:0b:72:1d:f5: 91:26:f5:53:2c:32:cf:58:f0:f8:6a:c0:1d:9d:49:7f:3c:f2: 42:48:58:d3:b0:b1:c3:93:c0:c4:ba:0f:34:a7:75:cb:eb:e2: 8c:1b:91:ce:86:f1:86:0b:21:eb:f0:9f:2c:ca:ed:cc:dc:7b: bb:83:4f:97:e4:79:ea:b8:05:c4:96:14:4c:88:f7:6d:1d:2d: b2:14:f7:b0:cb:73:52:d2:c0:f0:50:8e:d8:aa:fd:b7:1c:e0: a9:6a:05:c3:ee:e1:0a:2a:14:15:1f:86:37:e7:3c:21:54:6d: 43:2f:64:14:70:67:a4:d9:94:8e:35:b1:36:ae:44:53:32:cd: 20:80:84:2f:fe:d0:26:24:90:88:26:45:83:40:29:07:87:48: 44:27:d8:91:44:43:a5:77:22:6d:44:2e:4f:0f:c7:22:b5:bf: f8:91:e8:37:35:56:1e:e2:75:de:43:e5:ef:b9:e0:bb:57:00: 27:b3:bd:63:b0:6c:9d:5f:aa:f8:40:62:b7:7b:e8:3a:90:e4: 72:11:5d:11:31:77:73:0f:9e:ba:2f:8b:e3:c8:73:02:eb:70: 85:97:6e:ef:01:3d:a3:ac:92:f1:24:15:11:6e:42:7e:b5:06: e8:71:ea:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmyFejjhk9Y4tjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MGFlMzE4MGUtYWI2YS00N2I3LWJlMjUtMGY3YTBkY2ExOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1omUdZl85dRKXOg+lxXDRmKIn2ReZH/jlUY xIWD+D34TWFFioVSrDAOnpQFNnglBsoXngXnWKymC3xbRRfcthEXwsTj2GD//Ehq A89GnfJCzFJiEd2XqlrGtAYLEEN70UO8BIivfPoSt6tcPXdSkyWaEQGl/uUMh9yf 5KYjDEIbedqihINSrpw4u7PqSwvdWw+qHB4GmfnUMuPMVQ4npgfzZkYTaDzmW+Cj +EZVqH2EI6yK9zHQmmxMowjP+XLChdXFv71oOl3J+/YF6/EtqcFlG+u+/5Wh5SFf GJSjtUHHWSFeNwKJFX6BGqcsuyHcLJvxzETHsFtMU2lzhZl37wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2ILzEFCXzzVItt95ec16WUOWQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGNiZTcwZTAtNTY5Ni0z OTNhLTlmYzctNzNhZDRmM2EwZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABezfJmQLy6/kfBt0mh5C3Id9ZEm9VMsMs9Y8PhqwB2dSX888kJIWNOw scOTwMS6DzSndcvr4owbkc6G8YYLIevwnyzK7czce7uDT5fkeeq4BcSWFEyI920d LbIU97DLc1LSwPBQjtiq/bcc4KlqBcPu4QoqFBUfhjfnPCFUbUMvZBRwZ6TZlI41 sTauRFMyzSCAhC/+0CYkkIgmRYNAKQeHSEQn2JFEQ6V3Im1ELk8PxyK1v/iR6Dc1 Vh7idd5D5e+54LtXACezvWOwbJ1fqvhAYrd76DqQ5HIRXRExd3MPnrovi+PIcwLr cIWXbu8BPaOskvEkFRFuQn61Buhx6jA= -----END CERTIFICATE-----Generated at Tue Jul 1 07:42:19 2025 by rpki-client