$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa File: 9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa (raw, json) Hash identifier: fEp4sUb5B7+eYB3pguLxme5W4dZu6OhT9yTpCj1t9FA= Subject key identifier: FE:9E:77:03:EC:DD:AA:B2:10:82:FF:6C:BA:DA:62:68:C3:57:34:DF Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC141E729CA3EFD6C83700B Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:41:e7:29:ca:3e:fd:6c:83:70:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a4154493-2d74-496e-b497-b052835a8763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:cd:91:8c:e9:37:14:d5:dc:e1:79:ee:d8: 71:18:c1:dd:9d:f4:cb:e4:b1:bb:af:45:f8:9e:c6: 95:e1:65:89:49:84:d5:49:a3:2a:8f:fa:42:98:9d: 06:ec:18:c1:31:1d:fe:d8:60:f5:99:41:82:a7:3d: ac:43:31:f8:2b:da:97:5e:2a:e0:24:26:17:f3:4c: 92:32:74:70:c8:ae:02:e1:fd:ba:3d:6d:ab:b3:3b: 8d:c9:5a:fa:05:60:aa:f4:50:57:f5:7c:30:d6:74: 6d:e8:de:db:82:bf:6c:65:80:92:7b:c2:45:9a:37: a0:aa:7c:85:4b:53:76:bf:94:7c:5d:28:b6:be:f7: e0:e8:8f:d8:70:2d:f8:95:05:17:08:c4:7f:be:7f: ec:94:3f:ef:56:92:31:1b:40:ba:8a:31:da:38:35: 97:9b:80:61:72:9b:cb:f2:75:66:ec:bf:b3:d4:d5: ee:8d:b7:5a:bf:2a:1f:3b:65:7b:f5:27:0c:45:f2: 6f:87:83:b0:50:d0:65:4a:5e:31:76:c7:4d:25:9f: ca:07:a6:fd:12:a5:be:d2:62:c9:bc:e0:f6:8d:d9: aa:d2:e1:8f:9e:a0:0f:13:ea:88:e8:6f:d5:63:36: 0b:7d:90:1d:0a:c9:69:14:1f:70:90:87:b5:1b:a7: 08:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9E:77:03:EC:DD:AA:B2:10:82:FF:6C:BA:DA:62:68:C3:57:34:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:76:5f:a9:8f:ba:30:57:9f:8a:56:af:b0:26:41:88:58:49: 00:4a:31:da:c7:db:78:3e:7a:95:c0:85:e1:4a:a8:b3:5d:74: e8:2f:1e:2c:e2:70:db:c8:67:ed:62:a3:3d:78:2d:9c:08:cf: 7e:c1:64:57:19:34:b5:c4:25:b2:d3:99:1a:93:db:db:24:cd: d7:11:69:ee:b1:58:8a:79:7a:09:53:07:33:5e:62:3e:de:22: a5:35:dc:1e:5c:79:1f:79:02:4a:91:50:03:46:06:12:f7:51: 1e:3f:01:e3:19:24:2a:e7:f3:ec:70:a3:1b:21:48:15:52:9a: d7:b4:d5:2d:5c:fb:77:a1:ad:ee:e8:6c:6a:08:43:18:f2:6d: 15:34:91:45:b2:cf:5b:b6:d6:b8:46:15:56:62:54:70:fc:13: b9:38:33:79:db:bd:f6:b1:e6:81:1e:6d:81:98:c6:25:7d:0f: 71:46:b0:15:54:40:a6:c7:e1:c3:c6:88:a1:02:13:0a:41:2f: 59:9f:01:7e:79:8a:ba:d8:27:bb:06:b1:cb:51:bb:13:fd:3d: 2a:ec:32:c6:7b:7c:ef:99:83:34:ae:08:da:ed:f5:58:a4:26: 35:87:59:2d:52:27:20:77:af:6c:ee:6b:08:c3:ea:89:f7:ef: 23:36:1e:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUHnKco+/WyDcAswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTQxNTQ0OTMtMmQ3NC00OTZlLWI0OTctYjA1MjgzNWE4NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2XNkYzpNxTV3OF57thxGMHdnfTL5LG7r0X4 nsaV4WWJSYTVSaMqj/pCmJ0G7BjBMR3+2GD1mUGCpz2sQzH4K9qXXirgJCYX80yS MnRwyK4C4f26PW2rszuNyVr6BWCq9FBX9Xww1nRt6N7bgr9sZYCSe8JFmjegqnyF S1N2v5R8XSi2vvfg6I/YcC34lQUXCMR/vn/slD/vVpIxG0C6ijHaODWXm4BhcpvL 8nVm7L+z1NXujbdavyofO2V79ScMRfJvh4OwUNBlSl4xdsdNJZ/KB6b9EqW+0mLJ vOD2jdmq0uGPnqAPE+qI6G/VYzYLfZAdCslpFB9wkIe1G6cIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6edwPs3aqyEIL/bLraYmjDVzTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWQyNjcxYjEtYjljMy0z OTQ5LThmYTQtOWI3MDQ2MGRmZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFInYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR2X6mPujBXn4pWr7AmQYhYSQBKMdrH23g+epXAheFKqLNddOgvHizi cNvIZ+1ioz14LZwIz37BZFcZNLXEJbLTmRqT29skzdcRae6xWIp5eglTBzNeYj7e IqU13B5ceR95AkqRUANGBhL3UR4/AeMZJCrn8+xwoxshSBVSmte01S1c+3ehre7o bGoIQxjybRU0kUWyz1u21rhGFVZiVHD8E7k4M3nbvfax5oEebYGYxiV9D3FGsBVU QKbH4cPGiKECEwpBL1mfAX55irrYJ7sGsctRuxP9PSrsMsZ7fO+ZgzSuCNrt9Vik JjWHWS1SJyB3r2zuawjD6on37yM2Hr4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:29:04 2025 by rpki-client