$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2a223d8a-8020-37ab-ada4-266cfb37ac8a.roa File: 2a223d8a-8020-37ab-ada4-266cfb37ac8a.roa (raw, json) Hash identifier: OeH1GBIRrwpWmIaV8yuj//MyzIXjCO7Rn7PloyOElmA= Subject key identifier: 3E:4C:AC:5D:9E:F2:6B:86:79:70:C5:E6:DF:75:95:11:E2:2F:5A:D3 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A03A5565EA584443F2ECBE570 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2a223d8a-8020-37ab-ada4-266cfb37ac8a.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 4237 IP address blocks: 20.148.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:56:5e:a5:84:44:3f:2e:cb:e5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=7ac99004-0633-4ed1-8979-985e08e01986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:64:be:4e:b1:bb:6f:2e:3d:c1:35:38:b4:84: 7d:4c:16:b3:67:c4:bb:b2:80:5a:30:92:78:15:83: cd:91:0c:21:88:5a:22:b9:3c:f8:da:2a:24:3f:d3: 04:ee:53:96:19:73:6a:c0:e1:d7:27:9f:85:ef:2f: 05:66:36:6f:85:63:11:4e:4a:3f:07:b8:af:26:56: b1:af:64:98:62:1a:09:ba:2f:d5:cb:2b:3a:5c:42: 4f:29:ea:04:2b:0d:89:9e:be:3c:5e:73:fa:48:e6: 84:5d:2d:ad:6e:95:fb:38:c5:4d:85:76:59:7a:ee: f4:05:68:21:4b:19:01:4c:55:4e:ea:93:d7:66:40: 56:01:d7:5f:e9:55:99:8f:de:26:db:e9:6f:de:f7: e9:45:41:6b:53:af:82:eb:31:a3:ee:a4:17:b9:96: 1a:11:42:1a:f9:86:ef:b5:27:92:d0:65:a3:a3:27: 29:59:cc:1c:a2:dd:b9:b4:84:7b:6a:31:63:f2:33: dc:0f:8a:4e:5e:ee:37:49:e5:59:8b:5d:02:72:98: 11:49:df:c1:2e:b5:52:1d:1d:10:6a:65:43:e4:80: 19:ce:e9:92:a1:3b:cb:c1:bc:8a:6d:d0:16:41:8a: 39:62:0a:f6:82:8d:77:21:31:d7:a7:0a:01:c2:33: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4C:AC:5D:9E:F2:6B:86:79:70:C5:E6:DF:75:95:11:E2:2F:5A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2a223d8a-8020-37ab-ada4-266cfb37ac8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:5e:ea:f0:68:ab:93:d4:ff:15:76:2d:6c:09:a0:78:49:fc: a7:47:cc:43:5a:e3:1a:57:8c:93:79:5a:bf:92:1d:90:fb:9b: f7:9f:dc:b7:b7:dd:f1:39:d3:68:83:27:6e:26:9b:b4:92:21: 4e:83:aa:d2:0d:85:82:ba:8e:52:f0:12:20:89:2a:ca:50:5b: 5f:68:29:ba:a9:00:b2:e9:57:3f:0e:55:5e:46:93:9c:f8:89: 1b:7d:62:59:28:b7:3e:e3:c7:b1:af:2a:d9:0d:b5:aa:dc:d9: f4:fd:46:93:28:9b:f0:11:8f:4e:f3:a7:c3:e5:99:59:21:94: c2:bf:5b:35:20:ff:9b:91:dc:a8:1e:b7:51:3a:ce:da:48:d2: d0:c0:13:44:4d:2a:46:f6:53:ab:03:bd:2c:af:5b:59:8c:38: 98:4e:9c:cb:ed:e7:5c:c1:23:e9:2b:0e:09:4a:c7:33:c2:82: e7:c0:0b:01:ab:fd:25:aa:f6:ee:06:8d:0a:bf:44:6b:65:97: 4e:4a:e0:fc:ed:cf:21:b6:3c:0c:c9:8c:cd:03:80:2c:0b:08: 38:6d:dd:1e:4b:bd:3e:92:54:93:b8:90:13:60:0e:13:39:82: d5:16:26:df:78:4f:e3:a0:5f:1e:e3:a0:9f:d4:c7:97:f6:68: 39:eb:ee:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVZepYREPy7L5XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk N2FjOTkwMDQtMDYzMy00ZWQxLTg5NzktOTg1ZTA4ZTAxOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomS+TrG7by49wTU4tIR9TBazZ8S7soBaMJJ4 FYPNkQwhiFoiuTz42iokP9ME7lOWGXNqwOHXJ5+F7y8FZjZvhWMRTko/B7ivJlax r2SYYhoJui/Vyys6XEJPKeoEKw2Jnr48XnP6SOaEXS2tbpX7OMVNhXZZeu70BWgh SxkBTFVO6pPXZkBWAddf6VWZj94m2+lv3vfpRUFrU6+C6zGj7qQXuZYaEUIa+Ybv tSeS0GWjoycpWcwcot25tIR7ajFj8jPcD4pOXu43SeVZi10CcpgRSd/BLrVSHR0Q amVD5IAZzumSoTvLwbyKbdAWQYo5Ygr2go13ITHXpwoBwjPOjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5MrF2e8muGeXDF5t91lRHiL1rTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMmEyMjNkOGEtODAyMC0z N2FiLWFkYTQtMjY2Y2ZiMzdhYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIde6vBoq5PU/xV2LWwJoHhJ/KdHzENa4xpXjJN5Wr+SHZD7m/ef3Le3 3fE502iDJ24mm7SSIU6DqtINhYK6jlLwEiCJKspQW19oKbqpALLpVz8OVV5Gk5z4 iRt9Ylkotz7jx7GvKtkNtarc2fT9RpMom/ARj07zp8PlmVkhlMK/WzUg/5uR3Kge t1E6ztpI0tDAE0RNKkb2U6sDvSyvW1mMOJhOnMvt51zBI+krDglKxzPCgufACwGr /SWq9u4GjQq/RGtll05K4PztzyG2PAzJjM0DgCwLCDht3R5LvT6SVJO4kBNgDhM5 gtUWJt94T+OgXx7joJ/Ux5f2aDnr7rc= -----END CERTIFICATE-----Generated at Tue Jul 1 16:09:16 2025 by rpki-client