$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa File: 18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa (raw, json) Hash identifier: WumzDoMHJ4V0d6PA5jhdgxXLm6VbeYoJA8fNOAeZRDs= Subject key identifier: 0B:BB:34:31:58:C9:24:52:9E:A3:55:C7:8B:38:72:EE:F5:1C:3C:06 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A427587211DD19081B396A180 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 203 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:87:21:1d:d1:90:81:b3:96:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=059d0c19-9b35-431c-a36a-f2b192afecd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:76:6c:18:f7:76:8d:fc:48:be:9e:8a:b4:99: 10:1e:4d:f9:1a:ff:0a:8a:af:55:90:58:19:93:46: 6b:e5:c2:3e:07:88:1a:1b:c8:14:33:ab:1d:ae:ee: b7:83:3a:30:f7:8d:f9:6c:89:67:2d:34:2c:a4:00: 37:e1:8c:e6:7c:8d:a6:48:4f:44:ec:56:79:0e:2f: 14:f8:54:53:c7:c4:2b:7b:6d:88:de:0f:46:ed:64: 73:b6:8d:e6:e1:b3:6a:80:17:16:3d:9b:24:ad:e5: c6:f9:b8:7f:d3:bc:25:1a:33:0e:06:65:d1:d5:03: 28:a3:56:4f:c3:51:41:31:46:59:71:e7:71:88:e0: d6:6c:72:11:ad:c4:8a:89:65:f9:56:4e:b4:44:17: 87:14:2d:23:7e:bc:3b:ff:0c:a3:ac:68:0d:4e:c3: c1:a4:f8:b9:a5:10:a6:b5:3a:fb:e8:1c:04:6e:7d: 1b:91:01:b7:a0:84:3c:3a:2d:b7:60:8c:0f:61:fb: af:28:88:fb:cd:4c:ba:fd:11:6a:30:84:ad:85:c4: fe:16:0a:52:ee:3f:79:d1:f1:01:ac:eb:32:9a:00: f5:d4:a7:b1:10:31:88:56:46:93:16:18:fb:b7:cd: 49:78:c7:49:b9:49:50:78:e9:84:8a:32:0d:76:08: 8a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BB:34:31:58:C9:24:52:9E:A3:55:C7:8B:38:72:EE:F5:1C:3C:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8c:01:9c:71:78:68:ab:6a:f6:17:96:f2:0f:de:04:77:ab: 86:ac:eb:3d:49:93:b0:5f:3a:22:16:6a:6b:30:f9:5e:c3:05: 4b:f2:2b:5a:e7:6e:59:fa:89:98:2c:c7:89:57:12:6c:ee:d7: 76:92:47:2f:96:c4:11:56:11:45:53:40:81:c8:77:58:47:48: 2a:1f:1e:ee:3e:26:b0:87:22:4b:2f:a4:32:33:d5:0b:27:19: 06:d9:48:b6:11:78:8b:0b:1e:c5:5b:83:80:d3:ae:60:04:53: 0c:bb:46:9a:bb:35:a7:f7:3d:73:56:85:a1:67:1d:89:f6:f7: 8a:51:01:85:ba:19:9e:e7:c5:3a:1a:4f:61:2b:83:a1:93:8c: 2f:dc:dd:4e:df:c8:a3:58:a8:cd:a0:f4:7f:98:32:69:a7:c0: fc:04:cb:f3:aa:0d:db:8f:11:4c:5c:4d:da:82:d9:a2:ce:c7: 65:63:02:e5:4e:ad:5a:d6:8e:0c:47:d4:8b:18:29:b0:2f:cb: e5:ac:77:01:a4:10:a9:6d:f9:0c:21:f2:f0:db:87:f4:53:94: a0:e7:f1:42:c3:24:80:44:13:e1:5b:e1:5e:7a:75:25:a7:d4: 33:50:fb:6c:14:74:94:75:94:4c:66:b3:ba:42:d8:ab:74:8e: fd:34:5a:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYchHdGQgbOWoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MDU5ZDBjMTktOWIzNS00MzFjLWEzNmEtZjJiMTkyYWZlY2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nZsGPd2jfxIvp6KtJkQHk35Gv8Kiq9VkFgZ k0Zr5cI+B4gaG8gUM6sdru63gzow9435bIlnLTQspAA34YzmfI2mSE9E7FZ5Di8U +FRTx8Qre22I3g9G7WRzto3m4bNqgBcWPZskreXG+bh/07wlGjMOBmXR1QMoo1ZP w1FBMUZZcedxiODWbHIRrcSKiWX5Vk60RBeHFC0jfrw7/wyjrGgNTsPBpPi5pRCm tTr76BwEbn0bkQG3oIQ8Oi23YIwPYfuvKIj7zUy6/RFqMISthcT+FgpS7j950fEB rOsymgD11KexEDGIVkaTFhj7t81JeMdJuUlQeOmEijINdgiKBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAu7NDFYySRSnqNVx4s4cu71HDwGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTgwNDhiM2QtOTg5MS0z N2ZkLTliM2UtYTk3Y2ZmYzg2YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECMAZxxeGiravYXlvIP3gR3q4as6z1Jk7BfOiIWamsw+V7DBUvyK1rn bln6iZgsx4lXEmzu13aSRy+WxBFWEUVTQIHId1hHSCofHu4+JrCHIksvpDIz1Qsn GQbZSLYReIsLHsVbg4DTrmAEUwy7Rpq7Naf3PXNWhaFnHYn294pRAYW6GZ7nxToa T2Erg6GTjC/c3U7fyKNYqM2g9H+YMmmnwPwEy/OqDduPEUxcTdqC2aLOx2VjAuVO rVrWjgxH1IsYKbAvy+WsdwGkEKlt+Qwh8vDbh/RTlKDn8ULDJIBEE+Fb4V56dSWn 1DNQ+2wUdJR1lExms7pC2Kt0jv00Wr8= -----END CERTIFICATE-----Generated at Tue Jul 1 15:18:23 2025 by rpki-client