$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa File: 59c44230-ec55-3638-8a91-87a24d084422.roa (raw, json) Hash identifier: 66VfOTLty6qM3kkl0B56J0/8w4kQK1LJiYuEqN57N0Y= Subject key identifier: D6:66:34:3B:BC:6C:A5:27:72:68:15:F5:90:30:D9:C8:25:2D:10:09 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AE46127FE683F286F16DE4734 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.137.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:27:fe:68:3f:28:6f:16:de:47:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=7aa450a7-a8eb-42bf-8e75-3108867fdc9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:63:06:db:74:cb:a2:86:8e:fa:ef:f3:47:85: e6:1b:5a:fc:01:60:b3:68:20:86:f7:99:96:76:0a: 91:8f:71:12:29:3f:a4:90:f5:66:13:d1:11:2d:a3: 01:41:98:5d:e0:7a:86:29:69:79:ca:f5:73:a2:95: 60:58:5d:8b:9d:98:90:0b:32:bd:9e:a0:e6:cb:69: 49:72:c4:0b:38:eb:48:31:95:5a:2a:11:6b:15:90: 5f:18:dc:19:8b:a7:53:18:42:69:3f:91:80:9e:4a: 50:88:4e:38:8a:80:c2:b4:ff:fa:9a:bc:e6:3b:11: 14:1d:a4:ec:e5:4f:aa:d9:ee:bc:3b:0b:81:f2:28: 67:32:0a:6f:cb:ed:a5:83:b2:ee:31:51:cd:55:ea: 09:b0:39:20:df:eb:f0:31:f8:62:12:ff:2f:7d:08: a3:01:b6:13:9d:4e:e8:c7:75:b7:91:9d:f5:a4:c8: c3:11:f4:f7:ab:6a:d0:0f:64:c8:19:43:9f:b0:65: 59:98:b3:d0:41:f1:9a:b1:30:94:fc:d0:6d:8d:1c: c8:75:92:55:40:cb:6b:e2:2d:8c:a0:0d:f2:a8:4f: 19:15:a1:9b:e5:49:c4:ab:6a:d1:71:19:04:ae:56: b1:d1:a5:82:b4:8c:13:9a:93:e7:a1:bd:42:f6:b6: b6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:66:34:3B:BC:6C:A5:27:72:68:15:F5:90:30:D9:C8:25:2D:10:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ea:ef:e4:09:e7:35:fd:6a:a0:ec:29:f8:9c:f6:50:b7:09: a1:27:d5:46:34:95:75:87:49:42:82:59:48:15:aa:a2:4b:5e: 68:0f:fc:b9:f9:7d:fb:2a:57:4e:f7:fd:fd:45:00:0e:cd:a9: e8:66:08:23:7e:a3:64:58:ee:39:ae:70:b1:a4:35:ed:56:b7: 03:2c:d7:0a:26:a7:f7:0b:99:fc:bd:29:9b:29:c3:c3:ec:7f: ba:17:f7:d3:61:94:38:90:85:2c:29:42:0c:10:23:33:3f:ad: b2:1f:0a:98:45:be:fb:ae:69:a0:5c:6c:6b:26:e0:b5:da:d8: 7a:5b:5c:f8:75:37:c8:5c:9a:7f:ac:81:57:0e:07:04:df:7c: d1:3a:b0:61:e3:de:15:14:90:a5:06:9c:fd:5d:eb:26:36:42: 6a:c5:de:57:8c:f2:a9:70:fb:59:1c:c9:6a:0f:16:c4:52:32: 00:95:ba:d8:c6:b0:22:53:d4:b9:c6:6c:a5:e3:66:96:a2:2d: 72:b2:35:fa:e1:32:36:b1:73:a4:cc:dc:ba:f4:f0:73:36:c3: a6:e1:f2:d0:af:da:35:7f:a4:f6:b7:a0:f6:db:b2:90:51:c4: dc:1a:10:8c:fe:3d:52:59:ac:0c:e1:66:7b:6d:63:e5:fb:00: 9d:bd:6b:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSf+aD8obxbeRzQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk N2FhNDUwYTctYThlYi00MmJmLThlNzUtMzEwODg2N2ZkYzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2MG23TLooaO+u/zR4XmG1r8AWCzaCCG95mW dgqRj3ESKT+kkPVmE9ERLaMBQZhd4HqGKWl5yvVzopVgWF2LnZiQCzK9nqDmy2lJ csQLOOtIMZVaKhFrFZBfGNwZi6dTGEJpP5GAnkpQiE44ioDCtP/6mrzmOxEUHaTs 5U+q2e68OwuB8ihnMgpvy+2lg7LuMVHNVeoJsDkg3+vwMfhiEv8vfQijAbYTnU7o x3W3kZ31pMjDEfT3q2rQD2TIGUOfsGVZmLPQQfGasTCU/NBtjRzIdZJVQMtr4i2M oA3yqE8ZFaGb5UnEq2rRcRkErlax0aWCtIwTmpPnob1C9ra2lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZmNDu8bKUncmgV9ZAw2cglLRAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTljNDQyMzAtZWM1NS0z NjM4LThhOTEtODdhMjRkMDg0NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHq7+QJ5zX9aqDsKfic9lC3CaEn1UY0lXWHSUKCWUgVqqJLXmgP/Ln5 ffsqV073/f1FAA7NqehmCCN+o2RY7jmucLGkNe1WtwMs1womp/cLmfy9KZspw8Ps f7oX99NhlDiQhSwpQgwQIzM/rbIfCphFvvuuaaBcbGsm4LXa2HpbXPh1N8hcmn+s gVcOBwTffNE6sGHj3hUUkKUGnP1d6yY2QmrF3leM8qlw+1kcyWoPFsRSMgCVutjG sCJT1LnGbKXjZpaiLXKyNfrhMjaxc6TM3Lr08HM2w6bh8tCv2jV/pPa3oPbbspBR xNwaEIz+PVJZrAzhZnttY+X7AJ29az0= -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:47 2025 by rpki-client