$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa File: 1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa (raw, json) Hash identifier: wTgYVBpyZYe6bbOeOZ05mwXUqWMqT+llDGsPaj64m2o= Subject key identifier: 81:1D:CD:4A:60:C5:EA:46:20:C0:53:C8:3D:25:AF:8D:11:C5:E3:3C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A42758743CFB2386DBEE16980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 3356 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:87:43:cf:b2:38:6d:be:e1:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=5b7444c4-af67-44c5-9137-7f063862c098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:b0:82:07:16:83:7f:44:58:19:a2:10:d9: 16:12:14:e4:df:34:ea:c4:98:3f:57:7c:83:6b:42: d8:08:f1:f2:b3:94:60:82:9e:53:d6:63:6a:6d:37: 0b:90:6e:1c:6c:91:3c:09:9c:d1:02:0c:c1:4f:b1: 8d:ca:58:3d:85:d0:80:4a:05:a7:7a:d9:d2:cb:6a: 94:a8:72:3c:64:45:bb:c0:bc:2a:0f:68:5f:4c:70: a0:d5:c3:6d:15:19:70:75:9c:e7:18:57:30:51:ee: 2d:f9:c7:3e:04:94:d5:71:65:3d:8d:36:1e:fc:7b: 6d:87:21:46:97:ca:c6:21:9e:3d:1b:d6:be:a3:d7: 01:60:82:82:21:54:c1:00:60:33:72:03:31:7c:29: cc:c4:40:16:f7:c4:ba:e6:7d:6a:c9:bf:52:17:23: 13:31:f6:98:cb:62:53:1b:c0:03:37:ae:1a:f9:85: b7:38:57:1f:55:59:3b:ae:aa:fc:62:6c:4a:fe:9e: 9c:ab:00:1e:fb:ec:0a:64:88:c2:b5:63:29:cf:01: f8:0f:90:d1:6c:36:58:86:6e:b3:0b:a5:e4:06:34: d7:de:45:57:a3:9a:35:24:7c:72:f3:6d:39:43:2b: 69:28:64:fc:e4:3a:d1:a1:0c:1d:ed:31:7e:c1:a0: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1D:CD:4A:60:C5:EA:46:20:C0:53:C8:3D:25:AF:8D:11:C5:E3:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a7:08:e0:b2:e0:81:83:68:36:e8:17:03:39:c8:8d:81:92: 86:31:54:fd:68:fb:aa:e1:b8:ee:d8:9e:1a:79:83:a7:ec:8e: 88:86:4f:dd:bd:00:ef:ab:18:27:ab:ad:ec:b6:a2:54:85:6e: b2:93:e6:b8:34:e4:c6:8f:8a:47:6c:c9:aa:5c:aa:d9:e4:a9: b8:b5:79:2d:83:2b:3c:ec:7f:07:73:57:4b:fc:e0:27:92:20: ff:8c:01:14:7a:8c:13:6f:73:af:ac:df:46:69:57:29:81:ed: 33:70:5c:a8:c5:d8:be:52:28:41:70:33:5d:96:6b:6f:e6:83: 37:0c:8a:17:f2:b5:2e:d7:aa:bd:b0:0c:31:df:b5:ea:c9:0a: 69:1a:1b:75:7a:f8:82:1b:f7:3c:df:f1:1e:c5:72:0c:16:f4: 19:0e:49:a1:71:1f:d9:2a:26:09:b8:74:c7:17:51:52:15:d7: 0a:28:26:ff:f3:56:44:81:9d:f9:3c:ef:43:9f:55:06:e7:1c: cf:57:4b:65:0e:42:a1:47:0a:b3:97:c9:68:5b:5b:02:6e:32: 02:38:cf:49:33:43:f3:22:96:f5:a2:5f:62:f7:03:1a:90:e6: 32:24:b8:29:0d:e1:38:0a:ab:de:78:05:a6:b8:52:1b:60:29: 57:ba:d4:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYdDz7I4bb7haYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk NWI3NDQ0YzQtYWY2Ny00NGM1LTkxMzctN2YwNjM4NjJjMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh+wggcWg39EWBmiENkWEhTk3zTqxJg/V3yD a0LYCPHys5Rggp5T1mNqbTcLkG4cbJE8CZzRAgzBT7GNylg9hdCASgWnetnSy2qU qHI8ZEW7wLwqD2hfTHCg1cNtFRlwdZznGFcwUe4t+cc+BJTVcWU9jTYe/HtthyFG l8rGIZ49G9a+o9cBYIKCIVTBAGAzcgMxfCnMxEAW98S65n1qyb9SFyMTMfaYy2JT G8ADN64a+YW3OFcfVVk7rqr8YmxK/p6cqwAe++wKZIjCtWMpzwH4D5DRbDZYhm6z C6XkBjTX3kVXo5o1JHxy8205QytpKGT85DrRoQwd7TF+waCeiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEdzUpgxepGIMBTyD0lr40RxeM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMWE1NDRhMjEtZjljZC0z MjQ3LWFiMWQtMDI4ZDEzM2MzZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOnCOCy4IGDaDboFwM5yI2BkoYxVP1o+6rhuO7Ynhp5g6fsjoiGT929 AO+rGCerrey2olSFbrKT5rg05MaPikdsyapcqtnkqbi1eS2DKzzsfwdzV0v84CeS IP+MARR6jBNvc6+s30ZpVymB7TNwXKjF2L5SKEFwM12Wa2/mgzcMihfytS7Xqr2w DDHfterJCmkaG3V6+IIb9zzf8R7FcgwW9BkOSaFxH9kqJgm4dMcXUVIV1wooJv/z VkSBnfk870OfVQbnHM9XS2UOQqFHCrOXyWhbWwJuMgI4z0kzQ/MilvWiX2L3AxqQ 5jIkuCkN4TgKq954Baa4UhtgKVe61MU= -----END CERTIFICATE-----Generated at Tue Jul 1 16:54:49 2025 by rpki-client