$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa File: 219ed1da-c95c-3af6-9248-3707f5300999.roa (raw, json) Hash identifier: nGFVZAziKdZ+2Z/D2obCO+MAPdShx6qBdZpTufvGdIU= Subject key identifier: B1:90:20:05:FD:A4:BA:58:E5:97:06:E7:06:2B:82:26:37:51:D4:E0 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A549B2129767E27D429671800 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 203 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:21:29:76:7e:27:d4:29:67:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=09475ea0-c15a-4328-9adc-331469f0e0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:49:cc:a8:97:98:28:f0:e2:5c:26:f8:38: 4d:59:6e:2f:0f:4d:a2:7d:f8:dc:b7:a9:0c:b9:af: 5b:d4:b0:41:5d:7d:2f:44:29:1a:c4:b3:7b:33:8f: 2d:91:a0:0b:11:f9:e3:63:37:ff:e9:5b:e5:8b:8f: 1d:2f:16:5a:42:43:8e:59:83:98:e9:b2:d2:05:67: 25:de:ec:9c:8d:96:2b:d1:16:08:a3:b9:0b:2b:55: 60:e6:48:85:e2:d8:bd:40:89:b3:ec:0b:62:46:51: 93:d1:00:c2:c5:0b:57:90:b1:43:39:94:4e:35:e8: 46:50:05:51:5e:3a:3c:4f:45:52:b5:4a:84:6e:25: 5a:96:84:94:f6:c6:f1:46:48:98:de:b0:e0:6e:b5: c6:66:b6:b6:c8:75:ef:32:a9:fa:a6:b8:42:a4:68: bd:06:1f:5e:61:81:c5:4d:a4:6c:9e:f0:f5:20:2d: 3d:a2:74:61:e8:8d:ff:8a:e5:10:d7:30:c9:f1:91: d2:8e:29:c2:9e:d8:85:70:63:92:b6:94:5e:91:1f: 1d:20:bf:39:74:07:12:bf:f0:9d:e1:40:99:5f:e3: dc:7c:78:97:09:66:41:6e:7a:31:31:1a:20:bb:ba: 4e:aa:4c:af:53:62:b4:a7:70:ef:8e:7b:da:e1:38: 02:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:90:20:05:FD:A4:BA:58:E5:97:06:E7:06:2B:82:26:37:51:D4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:64:6d:2c:1f:71:8e:fb:5e:63:c6:76:7a:48:6f:04:a4:90: f5:c4:f3:83:37:fe:77:d6:85:e5:4e:bc:1d:6d:b5:9f:ca:31: aa:2e:45:7f:9c:54:70:dc:02:13:30:ec:2d:32:bb:34:27:52: 05:ad:5c:2a:d7:96:0a:f6:80:ec:5c:cd:0f:52:c7:dd:0b:67: cc:96:79:75:03:3d:fa:28:8a:0b:d8:e1:57:82:7f:82:21:11: 13:73:d5:4b:6d:27:bd:ff:e8:ad:96:81:ed:0f:09:1d:54:31: a4:11:89:4b:9c:e2:ba:e3:29:90:22:de:0f:12:a6:93:58:ba: a2:57:2d:30:18:2c:47:8c:67:be:b2:44:63:b2:74:a8:38:58: 84:62:c2:01:bc:db:64:d3:c6:6f:47:36:09:ef:5b:f0:6a:3c: a3:45:b5:36:12:84:43:a7:07:d1:7e:d9:89:8e:88:af:be:95: 0b:80:76:ef:83:96:fc:19:8e:cc:56:2a:32:65:15:8e:53:9b: 82:5c:e8:4e:af:7b:20:02:3f:ec:30:d6:3c:7a:3c:0c:ae:0e: 82:1c:ff:c2:04:59:05:69:9f:1d:62:6e:7e:35:e0:29:61:40: 50:b8:75:a0:9a:e5:5f:62:75:a3:2a:45:49:2c:20:cb:cf:18: 82:c3:ef:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmyEpdn4n1ClnGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MDk0NzVlYTAtYzE1YS00MzI4LTlhZGMtMzMxNDY5ZjBlMGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO9JzKiXmCjw4lwm+DhNWW4vD02iffjct6kM ua9b1LBBXX0vRCkaxLN7M48tkaALEfnjYzf/6Vvli48dLxZaQkOOWYOY6bLSBWcl 3uycjZYr0RYIo7kLK1Vg5kiF4ti9QImz7AtiRlGT0QDCxQtXkLFDOZRONehGUAVR Xjo8T0VStUqEbiValoSU9sbxRkiY3rDgbrXGZra2yHXvMqn6prhCpGi9Bh9eYYHF TaRsnvD1IC09onRh6I3/iuUQ1zDJ8ZHSjinCntiFcGOStpRekR8dIL85dAcSv/Cd 4UCZX+PcfHiXCWZBbnoxMRogu7pOqkyvU2K0p3Dvjnva4TgC6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGQIAX9pLpY5ZcG5wYrgiY3UdTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjE5ZWQxZGEtYzk1Yy0z YWY2LTkyNDgtMzcwN2Y1MzAwOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxkbSwfcY77XmPGdnpIbwSkkPXE84M3/nfWheVOvB1ttZ/KMaouRX+c VHDcAhMw7C0yuzQnUgWtXCrXlgr2gOxczQ9Sx90LZ8yWeXUDPfooigvY4VeCf4Ih ERNz1UttJ73/6K2Wge0PCR1UMaQRiUuc4rrjKZAi3g8SppNYuqJXLTAYLEeMZ76y RGOydKg4WIRiwgG822TTxm9HNgnvW/BqPKNFtTYShEOnB9F+2YmOiK++lQuAdu+D lvwZjsxWKjJlFY5Tm4Jc6E6veyACP+ww1jx6PAyuDoIc/8IEWQVpnx1ibn414Clh QFC4daCa5V9idaMqRUksIMvPGILD730= -----END CERTIFICATE-----Generated at Mon Jun 30 18:24:12 2025 by rpki-client