$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa File: 57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa (raw, json) Hash identifier: w7XXaJXoO2Nfm6u7YOeXAjjMhj6qxCbBJ2io+vYLljk= Subject key identifier: 5F:47:CB:AE:85:91:F6:EF:6F:73:85:80:3A:82:9F:50:1E:C1:B5:95 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A549B210A8F453C468A39A080 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 3356 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:21:0a:8f:45:3c:46:8a:39:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=2a69de28-4243-4b23-8d15-e94566add26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:d5:81:ab:4f:20:7b:eb:a0:76:30:d7:04: 08:dc:b6:3e:72:f6:75:aa:af:77:63:7b:1f:27:e2: 81:19:da:91:b0:f0:e2:3c:55:df:07:18:67:ad:ca: bb:6e:01:cd:45:23:4f:a3:cb:41:25:23:11:3c:58: 5f:b1:98:89:1e:00:d8:db:16:4e:88:9b:8c:3e:ad: 7d:14:ff:5e:34:4b:ab:d6:ed:47:11:3f:52:2c:1d: 4f:f8:e1:73:8e:2b:db:6e:46:21:33:75:b5:6a:c3: 60:1d:8d:72:c0:4d:25:38:19:11:31:95:11:c3:3e: 4f:b7:ad:09:7c:63:68:d2:f1:28:88:b9:3a:17:85: de:67:81:d2:48:78:dd:a3:fc:a3:b1:22:d5:9b:8a: 03:ac:06:78:ec:bd:90:76:dc:51:d6:e2:8b:40:93: ba:0a:a8:f8:01:dd:26:9f:1a:f3:80:f8:ce:5f:b0: b2:2e:9b:67:79:ea:46:73:ca:b4:d9:cb:fb:16:e0: be:25:7f:01:05:3c:17:5d:89:ef:bb:26:3c:25:a7: 4e:a6:5a:30:f3:7f:19:0d:88:fc:4d:46:b8:85:94: 53:3f:0e:57:70:85:be:bf:31:68:cd:a6:f3:c8:61: bc:8d:fb:ea:b6:70:6f:37:85:a6:fe:a0:44:32:91: 45:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:47:CB:AE:85:91:F6:EF:6F:73:85:80:3A:82:9F:50:1E:C1:B5:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:58:47:93:c1:e2:3a:51:80:3b:4e:b3:23:f2:f5:66:f0:8c: 91:83:65:8a:be:e5:fe:b3:cf:8b:95:fc:53:5f:f7:cd:74:4f: 2f:c8:46:9e:ba:7f:72:46:df:8c:81:0e:a8:48:df:8f:79:70: 98:64:22:76:de:05:f0:18:01:e0:2b:73:6f:db:a7:81:ee:c4: 25:12:ab:10:ff:8b:ca:7d:35:ae:0d:08:8f:27:58:86:2c:9d: da:ef:3b:aa:5d:51:52:c0:c5:60:93:09:f2:01:6b:b6:65:ae: 0b:36:92:e8:97:0f:12:f9:90:be:b2:32:e7:eb:3d:11:e9:99: e4:ee:dc:49:57:8e:25:e4:26:54:4e:e1:ed:0e:dc:64:f8:57: d6:4d:f4:b2:c3:b7:f6:81:d5:5b:6f:ce:3b:e5:42:59:e1:99: b1:3c:63:b2:9e:c4:8b:0e:b3:9b:cd:e3:7e:1b:c0:10:8f:2f: d2:62:21:2e:33:b8:0c:d0:2f:92:45:48:11:bc:c2:db:4e:a7: 47:1c:42:fc:07:c2:5e:3b:49:b4:4b:5f:28:86:12:73:3e:d9: 00:ee:30:19:c4:a8:23:11:2e:e5:bf:02:7c:ee:85:15:d0:1b: e7:9f:3f:ab:13:c7:88:5c:a4:3f:7a:ff:79:29:c5:b3:e9:dd: 32:9e:9a:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmyEKj0U8Roo5oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MmE2OWRlMjgtNDI0My00YjIzLThkMTUtZTk0NTY2YWRkMjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRPVgatPIHvroHYw1wQI3LY+cvZ1qq93Y3sf J+KBGdqRsPDiPFXfBxhnrcq7bgHNRSNPo8tBJSMRPFhfsZiJHgDY2xZOiJuMPq19 FP9eNEur1u1HET9SLB1P+OFzjivbbkYhM3W1asNgHY1ywE0lOBkRMZURwz5Pt60J fGNo0vEoiLk6F4XeZ4HSSHjdo/yjsSLVm4oDrAZ47L2QdtxR1uKLQJO6Cqj4Ad0m nxrzgPjOX7CyLptneepGc8q02cv7FuC+JX8BBTwXXYnvuyY8JadOplow838ZDYj8 TUa4hZRTPw5XcIW+vzFozabzyGG8jfvqtnBvN4Wm/qBEMpFFGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9Hy66Fkfbvb3OFgDqCn1AewbWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTdmZmQxZTYtYjE0YS0z N2IwLTljZmEtZDFmNDhhZWVjOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtYR5PB4jpRgDtOsyPy9WbwjJGDZYq+5f6zz4uV/FNf9810Ty/IRp66 f3JG34yBDqhI3495cJhkInbeBfAYAeArc2/bp4HuxCUSqxD/i8p9Na4NCI8nWIYs ndrvO6pdUVLAxWCTCfIBa7Zlrgs2kuiXDxL5kL6yMufrPRHpmeTu3ElXjiXkJlRO 4e0O3GT4V9ZN9LLDt/aB1VtvzjvlQlnhmbE8Y7KexIsOs5vN434bwBCPL9JiIS4z uAzQL5JFSBG8wttOp0ccQvwHwl47SbRLXyiGEnM+2QDuMBnEqCMRLuW/AnzuhRXQ G+efP6sTx4hcpD96/3kpxbPp3TKemvc= -----END CERTIFICATE-----Generated at Mon Jun 30 18:34:00 2025 by rpki-client