$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa File: 2358e127-b9cd-321b-a2ed-09882df26c20.roa (raw, json) Hash identifier: Sh/68Mr2YMBYwU5fbUpq4OKqAL6sciPqN31UEHw6lwg= Subject key identifier: E3:CC:F2:E9:E2:E4:3A:52:19:E8:1D:6E:AA:59:CC:CA:2A:11:EC:7D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A549B21A139566098F2ED62E0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 202 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:21:a1:39:56:60:98:f2:ed:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=5c6e88f0-af8d-4b98-b9dd-2a392db96d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:35:a7:11:76:a3:81:24:2a:73:8a:27:15: 5c:60:8c:c9:af:63:56:7c:f9:78:57:a6:51:4f:e0: 57:46:dc:ec:ee:db:df:89:1c:3c:d7:2e:50:3a:c7: 41:0b:29:ee:b9:db:f1:ee:71:fa:75:72:70:63:8c: b7:cf:69:39:5e:eb:f2:86:50:9d:60:ed:84:95:26: c8:cb:95:32:16:a3:97:84:e9:fe:a5:87:a0:85:b1: be:79:ac:6c:23:93:11:5f:e0:9c:6b:b6:22:3c:f6: ff:be:92:d7:da:1c:29:f6:60:6c:29:86:8a:b5:94: 36:6f:33:7a:e2:7c:e2:27:0f:5c:5a:48:ec:ed:ae: 04:3d:dc:d8:ec:31:a3:91:57:01:92:91:39:17:25: e3:f7:e6:54:90:75:38:f3:18:96:ae:6f:be:13:24: 73:39:98:6f:57:74:10:f0:1e:e5:0d:39:83:bd:58: 8a:8e:87:b3:74:ad:1d:7e:2b:9b:c1:b2:91:ea:ad: fe:3e:84:fa:61:79:59:e4:9d:33:5a:7c:e0:0c:f4: 6a:b0:af:27:95:07:64:47:e9:0a:08:ed:66:94:fd: b8:8f:3e:fa:47:70:3e:2e:0f:e0:b5:f1:1c:ce:7f: 12:1c:47:05:14:60:65:8a:87:8b:a1:0c:0b:69:24: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CC:F2:E9:E2:E4:3A:52:19:E8:1D:6E:AA:59:CC:CA:2A:11:EC:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:68:78:dd:ab:bd:24:20:ab:84:8f:c4:67:7a:e0:ac:8f:bf: 1e:65:c2:4e:17:2d:73:07:d6:20:d3:8d:80:63:62:ef:79:2f: 3c:39:e9:93:e1:c9:62:bc:50:7b:b9:b2:0e:dd:a1:40:f3:b0: d1:92:da:b3:c9:2b:2d:db:39:08:14:21:13:23:fc:ae:8b:8c: fe:a6:ad:da:d7:66:18:6a:d6:92:90:70:28:5c:7f:53:46:7a: ab:7f:ab:8b:1d:f0:72:b0:70:49:82:ac:7a:8e:6e:1b:cf:4a: fc:ab:2a:3f:5e:77:89:8e:27:c0:cb:ed:68:74:22:cd:8f:9b: 26:14:09:9e:a8:2f:d6:3b:b1:f6:1c:0e:e2:b3:81:21:b4:fa: ec:b2:52:16:8b:6e:0a:07:9b:53:6c:25:91:be:cc:ad:fd:21: 3e:e0:44:a8:69:28:76:7e:9e:56:c2:74:8d:dd:8b:58:e0:e9: 66:8c:28:bb:e0:13:c6:8b:95:23:3d:07:ea:b9:49:ec:69:ce: 51:85:b9:8b:5d:18:4f:67:b0:61:69:1e:f3:e2:66:b8:9a:e1: 44:04:d7:ab:95:74:b7:53:8e:0a:9f:4c:27:69:df:a8:18:7a: e0:ef:2c:24:bd:c8:30:f0:62:3a:8c:2f:80:0e:8a:d1:41:53: 80:5a:c9:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmyGhOVZgmPLtYuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk NWM2ZTg4ZjAtYWY4ZC00Yjk4LWI5ZGQtMmEzOTJkYjk2ZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ys1pxF2o4EkKnOKJxVcYIzJr2NWfPl4V6ZR T+BXRtzs7tvfiRw81y5QOsdBCynuudvx7nH6dXJwY4y3z2k5XuvyhlCdYO2ElSbI y5UyFqOXhOn+pYeghbG+eaxsI5MRX+Cca7YiPPb/vpLX2hwp9mBsKYaKtZQ2bzN6 4nziJw9cWkjs7a4EPdzY7DGjkVcBkpE5FyXj9+ZUkHU48xiWrm++EyRzOZhvV3QQ 8B7lDTmDvViKjoezdK0dfiubwbKR6q3+PoT6YXlZ5J0zWnzgDPRqsK8nlQdkR+kK CO1mlP24jz76R3A+Lg/gtfEczn8SHEcFFGBlioeLoQwLaSReQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPM8uni5DpSGegdbqpZzMoqEex9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjM1OGUxMjctYjljZC0z MjFiLWEyZWQtMDk4ODJkZjI2YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1oeN2rvSQgq4SPxGd64KyPvx5lwk4XLXMH1iDTjYBjYu95Lzw56ZPh yWK8UHu5sg7doUDzsNGS2rPJKy3bOQgUIRMj/K6LjP6mrdrXZhhq1pKQcChcf1NG eqt/q4sd8HKwcEmCrHqObhvPSvyrKj9ed4mOJ8DL7Wh0Is2PmyYUCZ6oL9Y7sfYc DuKzgSG0+uyyUhaLbgoHm1NsJZG+zK39IT7gRKhpKHZ+nlbCdI3di1jg6WaMKLvg E8aLlSM9B+q5SexpzlGFuYtdGE9nsGFpHvPiZria4UQE16uVdLdTjgqfTCdp36gY euDvLCS9yDDwYjqML4AOitFBU4BayQE= -----END CERTIFICATE-----Generated at Mon Jun 30 08:27:24 2025 by rpki-client