$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa File: 3844cb66-4923-3faf-8c4d-519000648600.roa (raw, json) Hash identifier: zipcQ9HIRo9CchomMKEhSK13t5ZQlXwTOcA+43TSW2g= Subject key identifier: 71:4A:4E:69:CF:90:B1:FE:39:54:FD:AB:A0:23:AF:00:0F:4F:F3:62 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A4275870121E02BDD5BC5EC80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 202 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:87:01:21:e0:2b:dd:5b:c5:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=0af28c68-e231-4779-9400-b3ecb4ad55da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c3:f4:d8:db:1e:e8:33:de:73:21:18:d1:40: ec:10:e1:9b:5f:d6:d3:d5:4c:12:40:98:2a:8d:88: fd:44:2b:4c:c2:59:11:4b:ed:59:e9:7b:0a:e7:80: b1:95:15:2f:19:fd:6d:26:64:c3:51:be:83:76:48: 2c:8a:b5:41:f5:78:8a:15:25:48:2b:27:c5:36:14: de:28:fb:a0:98:3b:e6:43:92:8f:2f:67:f4:14:bb: 59:45:9e:0c:fe:a7:33:88:98:48:2d:91:a7:7d:35: 31:f5:ed:ee:ee:b1:8b:48:ec:8c:52:c3:e9:54:67: 75:8c:f6:2d:af:7e:fc:a5:f9:8c:ad:10:2e:6a:5a: 87:b0:16:43:d9:07:64:a8:b5:3d:e2:68:bd:a2:a2: 02:d2:7c:5f:e1:5f:38:85:b1:3f:6f:b2:f9:98:cb: b6:34:9b:fc:c1:bb:a6:c8:ee:f3:31:2d:24:06:47: f2:7c:08:4b:3b:e2:2b:94:a7:31:85:8e:95:c6:83: 41:89:64:10:de:f7:fe:97:64:e3:3a:bc:15:1b:79: 1b:db:b2:de:c1:3b:b3:30:7b:89:ed:6f:d7:04:ea: 13:a0:0c:d6:00:91:06:9c:7d:89:08:09:fd:05:6d: d2:66:a0:4c:0e:5c:69:f7:0d:51:24:b1:df:00:76: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4A:4E:69:CF:90:B1:FE:39:54:FD:AB:A0:23:AF:00:0F:4F:F3:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:3b:43:34:ab:49:68:27:6c:e6:34:53:5b:11:97:4a:75:18: 1c:c1:91:ff:09:92:6e:25:2a:6e:b1:e5:89:0a:dd:0b:49:31: f3:2a:b2:92:dd:4b:58:94:f0:cc:b9:b4:d7:82:24:b4:69:88: 8f:c4:00:72:df:f4:c8:2f:ad:aa:84:7d:39:35:72:81:fa:40: 74:63:fa:2f:ca:19:e6:86:a8:04:47:a5:0f:c9:f3:54:98:15: 96:c8:86:45:69:e5:74:56:ca:ef:0b:8d:17:a5:94:de:24:0e: 02:6e:01:dd:36:36:10:03:21:b9:61:0f:be:4f:e7:54:65:54: e3:44:be:46:3e:36:87:dd:54:5f:9d:3d:d0:f9:18:41:f9:99: 97:23:1b:85:92:d9:38:57:83:b9:16:6b:2e:14:f5:be:76:9d: 65:e9:83:b5:f2:b6:4b:44:ad:26:56:89:bf:ee:eb:08:05:f6: 6e:b0:2c:d2:54:fc:54:60:5d:2f:49:86:db:66:23:aa:3b:6e: 3f:6c:fc:13:09:f9:a2:9c:bb:e3:83:c9:85:ff:a4:76:70:37: a9:ce:11:77:a7:78:df:71:66:39:6c:01:a7:82:06:a5:67:6c: c6:68:b5:2c:44:84:b1:b0:d4:bf:c3:f6:4d:5e:38:1a:d2:dc: 5e:2b:7c:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYcBIeAr3VvF7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MGFmMjhjNjgtZTIzMS00Nzc5LTk0MDAtYjNlY2I0YWQ1NWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cP02Nse6DPecyEY0UDsEOGbX9bT1UwSQJgq jYj9RCtMwlkRS+1Z6XsK54CxlRUvGf1tJmTDUb6DdkgsirVB9XiKFSVIKyfFNhTe KPugmDvmQ5KPL2f0FLtZRZ4M/qcziJhILZGnfTUx9e3u7rGLSOyMUsPpVGd1jPYt r378pfmMrRAualqHsBZD2QdkqLU94mi9oqIC0nxf4V84hbE/b7L5mMu2NJv8wbum yO7zMS0kBkfyfAhLO+IrlKcxhY6VxoNBiWQQ3vf+l2TjOrwVG3kb27LewTuzMHuJ 7W/XBOoToAzWAJEGnH2JCAn9BW3SZqBMDlxp9w1RJLHfAHbe9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFKTmnPkLH+OVT9q6AjrwAPT/NiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzg0NGNiNjYtNDkyMy0z ZmFmLThjNGQtNTE5MDAwNjQ4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg7QzSrSWgnbOY0U1sRl0p1GBzBkf8Jkm4lKm6x5YkK3QtJMfMqspLd S1iU8My5tNeCJLRpiI/EAHLf9MgvraqEfTk1coH6QHRj+i/KGeaGqARHpQ/J81SY FZbIhkVp5XRWyu8LjRellN4kDgJuAd02NhADIblhD75P51RlVONEvkY+NofdVF+d PdD5GEH5mZcjG4WS2ThXg7kWay4U9b52nWXpg7XytktErSZWib/u6wgF9m6wLNJU /FRgXS9JhttmI6o7bj9s/BMJ+aKcu+ODyYX/pHZwN6nOEXeneN9xZjlsAaeCBqVn bMZotSxEhLGw1L/D9k1eOBrS3F4rfM8= -----END CERTIFICATE-----Generated at Thu Jul 3 04:30:03 2025 by rpki-client