$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa File: 895b35f2-676a-36ad-9bd6-7860fc097fbf.roa (raw, json) Hash identifier: gBCsK4gmefx0Q5ZZsFyq57ofuYePHyQIcEEu2JarKpI= Subject key identifier: 4A:15:A4:08:3A:20:86:7B:4B:81:5C:28:A0:06:03:89:F5:42:9C:FA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A3A159159AF90EFAD2C744200 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 203 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:91:59:af:90:ef:ad:2c:74:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=97e81531-dbfe-4d04-a7f3-84b00fb8998f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:24:e0:eb:b5:db:b7:28:d5:c1:50:e2:2f:70: a4:46:3e:9e:87:e0:6b:30:98:f6:9b:2f:83:d2:be: 3f:a3:2c:4d:cb:39:ad:d5:42:e4:79:cd:2b:fe:98: fe:da:ce:16:35:4a:70:3c:a2:0b:4c:cd:bb:2a:bb: 72:89:dd:39:93:b5:8e:57:05:89:c6:04:35:b4:1d: 6d:00:a4:82:fa:40:da:26:bd:66:f8:02:7c:97:15: ea:a2:3d:eb:f0:f2:5e:65:57:ba:f4:85:e5:94:ea: 38:bb:86:40:7d:8c:a2:8d:2f:18:31:c7:5f:de:ff: 8b:31:de:a4:4f:d9:78:b9:4a:c5:b2:be:42:68:ae: a3:64:94:07:51:e5:1f:d3:67:53:f6:79:ea:c1:f2: 88:fc:65:13:6a:60:3c:3e:da:34:95:ca:c0:20:5e: 06:c9:db:e3:01:52:98:ab:e0:fc:91:14:b7:7c:eb: d7:f6:7c:a3:0a:81:21:ed:c5:a3:1e:de:2e:cb:c0: b6:d5:fb:aa:22:a3:fc:e3:75:50:30:f6:b8:76:0d: 39:07:d9:eb:3d:9b:7a:70:82:cb:0c:14:84:8c:96: b8:77:35:13:f5:31:20:88:ac:5b:52:ca:6c:1f:a4: 76:2e:5f:3a:94:7d:8b:5e:23:6b:ce:9d:cd:dd:36: c8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:15:A4:08:3A:20:86:7B:4B:81:5C:28:A0:06:03:89:F5:42:9C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:28:95:ea:19:5d:3c:41:2d:40:22:1c:2d:f6:15:8b:46:55: 40:90:d8:92:c1:9a:f2:a8:f8:92:c8:8b:cd:e7:c5:e0:7a:3d: fb:d0:ad:db:a9:c1:8c:46:18:32:b8:4d:d3:c5:67:e3:8e:c2: e5:52:96:14:b4:52:f9:6c:20:3b:8d:c3:96:a3:21:72:40:70: 02:25:6a:b9:4e:6a:12:79:88:41:08:aa:40:3e:c4:55:8f:66: 43:f9:9e:e9:94:f9:51:1e:d7:6d:58:06:41:09:08:3a:e6:8b: 0e:7c:ee:a7:63:67:7a:69:fb:24:00:70:a3:ae:85:4e:90:68: 31:bb:5a:cb:48:ac:f0:21:d7:bd:8d:38:31:b5:3b:73:b0:7a: 19:68:5c:03:67:28:fe:5c:e6:4b:a0:97:2b:a0:b7:de:fd:66: b8:48:5d:5a:0c:d4:01:60:41:40:bf:eb:13:45:e6:be:d0:97: 89:ec:81:32:9a:bd:d0:b1:62:d1:15:81:d0:04:cf:de:20:a8: 75:c2:9f:84:b0:f4:90:61:0a:5b:c2:61:21:62:8b:20:2d:11: e7:a9:93:98:b0:56:01:55:48:f6:a8:3f:f0:b3:47:aa:c9:bf: 4b:bc:25:64:3f:bc:25:07:bc:fa:dc:b0:55:c5:a9:ba:e9:f8: ab:9a:04:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZFZr5DvrSx0QgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OTdlODE1MzEtZGJmZS00ZDA0LWE3ZjMtODRiMDBmYjg5OThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyTg67XbtyjVwVDiL3CkRj6eh+BrMJj2my+D 0r4/oyxNyzmt1ULkec0r/pj+2s4WNUpwPKILTM27Krtyid05k7WOVwWJxgQ1tB1t AKSC+kDaJr1m+AJ8lxXqoj3r8PJeZVe69IXllOo4u4ZAfYyijS8YMcdf3v+LMd6k T9l4uUrFsr5CaK6jZJQHUeUf02dT9nnqwfKI/GUTamA8Pto0lcrAIF4GydvjAVKY q+D8kRS3fOvX9nyjCoEh7cWjHt4uy8C21fuqIqP843VQMPa4dg05B9nrPZt6cILL DBSEjJa4dzUT9TEgiKxbUspsH6R2Ll86lH2LXiNrzp3N3TbIBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoVpAg6IIZ7S4FcKKAGA4n1Qpz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODk1YjM1ZjItNjc2YS0z NmFkLTliZDYtNzg2MGZjMDk3ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcoleoZXTxBLUAiHC32FYtGVUCQ2JLBmvKo+JLIi83nxeB6PfvQrdup wYxGGDK4TdPFZ+OOwuVSlhS0UvlsIDuNw5ajIXJAcAIlarlOahJ5iEEIqkA+xFWP ZkP5numU+VEe121YBkEJCDrmiw587qdjZ3pp+yQAcKOuhU6QaDG7WstIrPAh172N ODG1O3OwehloXANnKP5c5kuglyugt979ZrhIXVoM1AFgQUC/6xNF5r7Ql4nsgTKa vdCxYtEVgdAEz94gqHXCn4Sw9JBhClvCYSFiiyAtEeepk5iwVgFVSPaoP/CzR6rJ v0u8JWQ/vCUHvPrcsFXFqbrp+KuaBEA= -----END CERTIFICATE-----Generated at Wed Jul 2 15:15:43 2025 by rpki-client