$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa File: 9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa (raw, json) Hash identifier: LuvB+DFlhBBpfy1EXXabZsjHzPU6Rd4OmMWMGm8LYVE= Subject key identifier: FD:41:13:11:50:CD:9B:0D:E9:36:2B:EB:C0:BA:CB:A5:3E:57:CA:B2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A0C056B8ABBD1A9E6ACA2FF00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 3356 IP address blocks: 20.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6b:8a:bb:d1:a9:e6:ac:a2:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=8f0a864e-c6da-4848-b2ec-f005f0f89e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c0:20:da:b7:56:fe:a4:44:f6:11:ff:1f:d5: fa:36:82:80:6e:cb:cb:b1:cf:e9:3e:5a:1f:6b:cc: 6f:f2:35:45:49:20:87:b3:5d:6c:bc:f9:54:f2:be: f8:0b:ea:cc:a8:9c:4b:6e:c2:82:cd:5a:a1:e3:96: 44:e3:17:2b:1a:e7:cb:39:bd:b9:16:5b:4f:d4:0b: c6:ef:17:4a:d2:92:e2:1b:60:e4:0a:91:1a:d2:9b: 3d:ef:9a:e1:c4:39:0f:cd:b1:ff:bf:6c:1d:8b:7d: 47:eb:48:b1:54:7c:c0:3c:14:9d:18:15:c3:5a:9a: ea:99:30:8a:ca:b0:3e:73:cf:c9:4c:e9:86:7a:22: 9b:30:87:89:46:46:a8:4b:61:75:cf:8e:70:f1:29: a8:f2:2d:b4:6e:df:c1:3d:11:03:7b:d1:08:57:85: 72:dc:85:58:ac:d4:72:d1:fa:dc:70:8a:0e:04:11: 3d:79:33:e4:c9:e9:34:fc:35:b1:dc:60:91:b6:b4: 58:98:52:4e:6c:15:bd:0f:5c:20:3e:f0:ca:7b:41: 97:bc:05:c4:e7:a4:14:f7:a4:5c:3b:e9:af:da:50: 75:e3:a2:6d:3c:62:c8:aa:a3:12:30:52:1a:a8:52: 8c:34:fe:56:cf:8b:0d:a0:0b:28:8d:2a:43:15:ad: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:41:13:11:50:CD:9B:0D:E9:36:2B:EB:C0:BA:CB:A5:3E:57:CA:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:09:44:1e:92:32:91:b8:ff:7c:b3:06:d4:bc:c3:0f:59:df: 10:3e:af:65:6f:69:2a:b0:46:f0:99:99:4b:f4:3d:d8:fd:db: 51:8e:f3:af:3e:ff:07:7f:cd:4b:28:f8:3a:b2:03:13:c7:25: e9:20:0f:71:26:a7:93:0f:3d:a5:0f:ab:98:b7:fa:8d:bb:f1: a6:16:46:08:7d:dc:5a:b4:1f:d3:ce:9e:7b:90:36:94:1e:58: b2:b3:13:e7:ea:81:75:9b:a9:6c:df:de:5d:dc:c3:84:2c:41: 22:06:0b:93:c5:ef:0e:7e:fb:55:92:d7:40:06:8c:2a:0e:18: 3b:e1:96:19:26:24:a5:de:5d:61:df:69:04:43:cc:f0:d5:02: 8d:ed:c2:95:38:2d:99:2b:84:be:a5:9a:f0:28:d1:b3:19:f0: 35:50:83:4b:de:28:9a:63:f7:af:7c:12:ba:9f:57:ba:85:45: bf:4e:d0:ae:39:33:d3:ab:8b:a2:99:1f:86:28:e8:78:b6:e0: 0f:0d:cd:92:d7:83:ea:f0:ee:a0:fd:ac:a0:8a:a2:7c:ab:58: cb:3a:b6:5d:d5:d5:47:59:1f:be:7f:04:cd:61:72:da:dc:58: f4:fc:3e:fa:cd:b0:6e:b1:a7:5c:d3:88:d1:52:6c:93:84:35: 53:92:80:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWuKu9Gp5qyi/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OGYwYTg2NGUtYzZkYS00ODQ4LWIyZWMtZjAwNWYwZjg5ZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcAg2rdW/qRE9hH/H9X6NoKAbsvLsc/pPlof a8xv8jVFSSCHs11svPlU8r74C+rMqJxLbsKCzVqh45ZE4xcrGufLOb25FltP1AvG 7xdK0pLiG2DkCpEa0ps975rhxDkPzbH/v2wdi31H60ixVHzAPBSdGBXDWprqmTCK yrA+c8/JTOmGeiKbMIeJRkaoS2F1z45w8Smo8i20bt/BPREDe9EIV4Vy3IVYrNRy 0frccIoOBBE9eTPkyek0/DWx3GCRtrRYmFJObBW9D1wgPvDKe0GXvAXE56QU96Rc O+mv2lB146JtPGLIqqMSMFIaqFKMNP5Wz4sNoAsojSpDFa2jHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1BExFQzZsN6TYr68C6y6U+V8qyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWQyNjcxYjEtYjljMy0z OTQ5LThmYTQtOWI3MDQ2MGRmZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFInYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwJRB6SMpG4/3yzBtS8ww9Z3xA+r2VvaSqwRvCZmUv0Pdj921GO868+ /wd/zUso+DqyAxPHJekgD3Emp5MPPaUPq5i3+o278aYWRgh93Fq0H9POnnuQNpQe WLKzE+fqgXWbqWzf3l3cw4QsQSIGC5PF7w5++1WS10AGjCoOGDvhlhkmJKXeXWHf aQRDzPDVAo3twpU4LZkrhL6lmvAo0bMZ8DVQg0veKJpj9698ErqfV7qFRb9O0K45 M9Ori6KZH4Yo6Hi24A8NzZLXg+rw7qD9rKCKonyrWMs6tl3V1UdZH75/BM1hctrc WPT8PvrNsG6xp1zTiNFSbJOENVOSgHQ= -----END CERTIFICATE-----Generated at Tue Jul 1 16:54:24 2025 by rpki-client