$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa File: 333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa (raw, json) Hash identifier: DiGwwME/3MIajcXOeOrRYOSGJ/3KgECmaChWvEE4FIo= Subject key identifier: CC:B3:75:0E:C5:2E:F2:84:7C:36:5C:B6:E5:4A:B5:42:D4:5C:0F:16 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A42758731E7F34C1FEC038370 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 202 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:87:31:e7:f3:4c:1f:ec:03:83:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=92f2fc95-d983-4d7e-9c42-dae0fbe26d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:a8:62:a1:5c:ed:04:93:fc:51:e5:76:87: 09:18:97:5f:dd:51:16:3c:a8:f9:3e:90:42:47:d6: 52:19:48:f3:11:05:a4:5c:25:92:ea:a0:bc:23:72: 0f:86:89:43:ba:95:9b:d1:6a:86:37:09:0a:84:3f: 98:fb:c4:41:a2:27:29:08:b2:90:87:c6:7c:21:e8: f6:f2:be:66:55:e4:a5:43:5d:b4:ad:22:46:02:99: 65:e1:56:6c:52:a5:59:56:be:2d:db:4f:32:fe:42: 9d:74:8a:e6:39:63:bb:29:b2:23:bd:ff:ea:4f:b7: 2d:e7:d8:cf:e3:eb:c8:18:19:b5:02:27:aa:e0:1b: 8c:66:1a:a0:39:21:68:e9:f8:b9:9f:b3:db:b0:bd: 76:04:53:87:a9:8d:4d:8c:3c:1a:88:91:4c:b7:f4: e1:de:e7:8d:79:09:9b:4a:cb:9f:a7:1d:4c:39:d7: 45:2d:f8:e0:be:5d:07:31:13:f1:d4:6c:e3:55:bd: 6e:60:f9:27:c8:02:62:8c:66:1c:d3:20:84:f6:b7: ee:a3:81:56:f2:c4:f1:19:f9:22:95:25:31:dd:37: 61:e8:9c:53:71:29:52:cb:e4:8b:5e:c4:0b:12:45: 08:44:fe:39:56:41:3e:90:90:cc:ec:76:4c:fa:04: fb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B3:75:0E:C5:2E:F2:84:7C:36:5C:B6:E5:4A:B5:42:D4:5C:0F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:43:85:c9:9b:46:5f:e5:eb:32:ff:97:ff:e3:b8:8d:f6:97: ea:82:de:1e:1f:f3:b1:c4:c8:41:73:46:f8:36:72:9a:30:8f: e8:76:43:a7:c9:53:e1:90:20:e8:87:eb:5a:42:65:c1:f9:c3: 67:a8:ce:fb:39:06:61:62:33:75:9e:05:40:25:72:d0:1c:b1: 4b:43:34:8c:52:03:1c:48:3b:e4:50:93:08:73:1e:c6:a4:cb: b2:ec:9a:b7:14:ba:9c:73:45:52:97:9e:ef:95:27:1a:fb:af: e9:0a:6b:6b:c5:82:2f:78:fa:89:3e:ba:3e:66:53:fd:24:e4: c5:6e:de:8b:20:91:28:1b:f1:f5:4e:99:8a:75:30:14:21:8a: b9:3c:d7:d1:27:ba:4a:62:21:d9:f8:de:1d:c9:ce:af:d8:1e: 9f:de:9e:a1:3b:2c:67:49:48:04:ee:a9:6e:71:c2:47:50:ce: a8:97:1a:0a:c0:b6:3f:ec:3f:9b:62:9b:f5:a1:b9:fe:9d:da: 84:55:86:8d:10:59:1a:45:15:f6:e8:6b:1e:0a:25:bb:52:c1: a9:88:03:a1:3e:93:39:8d:19:04:b8:36:97:66:a4:21:53:5b: 7f:4f:33:c8:ce:81:e0:d6:cd:34:2d:a1:34:c5:ca:19:ad:ea: a4:a5:89:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYcx5/NMH+wDg3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk OTJmMmZjOTUtZDk4My00ZDdlLTljNDItZGFlMGZiZTI2ZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufqoYqFc7QST/FHldocJGJdf3VEWPKj5PpBC R9ZSGUjzEQWkXCWS6qC8I3IPholDupWb0WqGNwkKhD+Y+8RBoicpCLKQh8Z8Iej2 8r5mVeSlQ120rSJGApll4VZsUqVZVr4t208y/kKddIrmOWO7KbIjvf/qT7ct59jP 4+vIGBm1Aieq4BuMZhqgOSFo6fi5n7PbsL12BFOHqY1NjDwaiJFMt/Th3ueNeQmb Ssufpx1MOddFLfjgvl0HMRPx1GzjVb1uYPknyAJijGYc0yCE9rfuo4FW8sTxGfki lSUx3Tdh6JxTcSlSy+SLXsQLEkUIRP45VkE+kJDM7HZM+gT7kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyzdQ7FLvKEfDZctuVKtULUXA8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzMzMTc0YTUtOWQ0ZS0z ZWRlLWE2NDAtMGFlNzFmNTNlN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlDhcmbRl/l6zL/l//juI32l+qC3h4f87HEyEFzRvg2cpowj+h2Q6fJ U+GQIOiH61pCZcH5w2eozvs5BmFiM3WeBUAlctAcsUtDNIxSAxxIO+RQkwhzHsak y7LsmrcUupxzRVKXnu+VJxr7r+kKa2vFgi94+ok+uj5mU/0k5MVu3osgkSgb8fVO mYp1MBQhirk819EnukpiIdn43h3Jzq/YHp/enqE7LGdJSATuqW5xwkdQzqiXGgrA tj/sP5tim/Whuf6d2oRVho0QWRpFFfboax4KJbtSwamIA6E+kzmNGQS4NpdmpCFT W39PM8jOgeDWzTQtoTTFyhmt6qSliZk= -----END CERTIFICATE-----Generated at Tue Jul 1 16:57:10 2025 by rpki-client