$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2248c73f-4700-3cdb-b56a-82645c44ae6d.roa File: 2248c73f-4700-3cdb-b56a-82645c44ae6d.roa (raw, json) Hash identifier: WyPUJ3oPBV61T/AJ1KQg3rHd1M7pHoKvhWwmviO4x+0= Subject key identifier: 24:4C:CC:40:82:AB:0C:F0:E2:D2:DF:3E:AE:DB:26:71:46:63:5F:7C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584ADA9BCB79C7DB87848EBA2A00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2248c73f-4700-3cdb-b56a-82645c44ae6d.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 3356 IP address blocks: 20.139.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:cb:79:c7:db:87:84:8e:ba:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=1bd04d3b-4910-46c7-a135-77ccea268ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d1:3f:07:2c:b9:9c:c7:ad:f5:5b:7f:5f:4b: 3f:55:d3:3d:3c:f2:7c:97:56:87:41:fd:41:73:9e: 79:35:e8:64:a0:03:31:ff:5e:d9:55:60:c8:e6:60: e6:0f:35:1d:5e:15:00:21:05:64:42:b5:f9:64:33: f4:7f:24:b8:4c:52:2c:07:9b:e2:c1:f5:55:e5:52: c2:e3:9b:f2:96:69:5e:9e:0f:da:8d:0f:94:06:5e: b1:20:15:7a:f3:7e:aa:c2:18:28:95:e8:4d:9e:6f: 7d:71:b2:bd:26:de:4e:46:21:62:1e:a1:70:2f:db: ad:00:29:4f:a9:6a:ce:5a:09:d6:ba:7f:1e:31:f1: 16:0c:4b:96:73:d3:14:1a:ab:40:23:ea:0b:94:b2: f2:70:0c:50:bc:91:61:a9:24:16:e0:37:f4:12:a2: 42:cf:10:ee:6d:7d:9c:98:da:6e:e1:7f:41:fe:ef: c1:97:6a:35:77:fa:26:64:d7:74:fe:d0:76:20:6b: d0:d0:60:3c:02:25:93:a2:69:99:7a:5f:7b:77:ca: 7f:90:f1:d2:d2:20:51:3d:c4:5c:a4:60:a9:ac:4f: 9d:1a:c9:59:19:4e:51:a0:68:e6:17:59:a9:cc:fa: ce:4b:82:81:25:b6:19:38:e2:ce:95:13:50:18:48: 5d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4C:CC:40:82:AB:0C:F0:E2:D2:DF:3E:AE:DB:26:71:46:63:5F:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2248c73f-4700-3cdb-b56a-82645c44ae6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:72:98:c2:38:7a:02:1b:ae:f3:03:87:6e:cc:25:71:21:b8: 95:e8:67:89:55:b0:ea:81:45:dc:92:29:5c:73:6d:23:93:0b: df:c4:42:eb:97:fa:47:b4:68:b0:18:2c:2f:9e:0a:58:3e:ad: 2c:e3:8c:a0:c0:12:33:01:b3:cb:88:95:45:f2:4e:b0:8d:d1: fb:16:92:e2:cc:a4:31:ae:4f:ca:71:63:73:f7:18:df:d3:dc: dc:4f:1c:51:dc:26:bb:9a:1f:0c:15:d6:14:be:05:c1:e6:ec: 91:ef:fa:f9:21:df:a0:d0:cd:08:c4:6e:a8:d0:61:2a:82:f7: 45:db:8a:3a:d6:91:8f:b8:8e:7c:c3:36:7c:53:0c:b8:19:36: 9d:5e:96:f9:d4:1f:0c:b6:40:05:37:67:b2:11:79:c6:2b:7f: ca:0c:85:ee:3a:69:b7:12:59:a0:2a:ff:34:a7:07:18:97:c8: 6d:95:3b:e4:c7:bc:43:d4:8e:a9:52:7a:a9:8b:40:33:57:be: a3:09:bf:e4:03:77:ca:f0:9f:21:40:48:0b:4b:fe:55:75:66: c6:6f:97:7a:04:bb:a4:87:d2:8e:b9:db:27:65:a2:de:a3:2d: 03:70:7b:3a:bd:c8:19:1f:c3:d9:f2:32:39:8b:89:cc:a3:38: 04:f8:9f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8t5x9uHhI66KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MWJkMDRkM2ItNDkxMC00NmM3LWExMzUtNzdjY2VhMjY4YWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitE/Byy5nMet9Vt/X0s/VdM9PPJ8l1aHQf1B c555NehkoAMx/17ZVWDI5mDmDzUdXhUAIQVkQrX5ZDP0fyS4TFIsB5viwfVV5VLC 45vylmleng/ajQ+UBl6xIBV6836qwhgolehNnm99cbK9Jt5ORiFiHqFwL9utAClP qWrOWgnWun8eMfEWDEuWc9MUGqtAI+oLlLLycAxQvJFhqSQW4Df0EqJCzxDubX2c mNpu4X9B/u/Bl2o1d/omZNd0/tB2IGvQ0GA8AiWTommZel97d8p/kPHS0iBRPcRc pGCprE+dGslZGU5RoGjmF1mpzPrOS4KBJbYZOOLOlRNQGEhdmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRMzECCqwzw4tLfPq7bJnFGY198MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjI0OGM3M2YtNDcwMC0z Y2RiLWI1NmEtODI2NDVjNDRhZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpymMI4egIbrvMDh27MJXEhuJXoZ4lVsOqBRdySKVxzbSOTC9/EQuuX +ke0aLAYLC+eClg+rSzjjKDAEjMBs8uIlUXyTrCN0fsWkuLMpDGuT8pxY3P3GN/T 3NxPHFHcJruaHwwV1hS+BcHm7JHv+vkh36DQzQjEbqjQYSqC90XbijrWkY+4jnzD NnxTDLgZNp1elvnUHwy2QAU3Z7IRecYrf8oMhe46abcSWaAq/zSnBxiXyG2VO+TH vEPUjqlSeqmLQDNXvqMJv+QDd8rwnyFASAtL/lV1ZsZvl3oEu6SH0o652ydlot6j LQNwezq9yBkfw9nyMjmLicyjOAT4n/k= -----END CERTIFICATE-----Generated at Sat Aug 23 15:50:26 2025 by rpki-client