$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9f80a8b3-33a4-38ba-b464-0d1152d1e289.roa File: 9f80a8b3-33a4-38ba-b464-0d1152d1e289.roa (raw, json) Hash identifier: g1VBaUKAeBSErzqNTxpx1lFA5VMbRuEIgS0EmaX72BM= Subject key identifier: 2E:BA:B3:94:EE:A6:D4:91:F9:A4:B0:6B:1A:11:4D:AC:26:B4:B9:25 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A549B21C50C1E411397260380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9f80a8b3-33a4-38ba-b464-0d1152d1e289.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 4237 IP address blocks: 20.137.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:21:c5:0c:1e:41:13:97:26:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=ef2301fd-fe57-4824-b16f-18b2313a9ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:13:bb:af:a8:74:76:f9:7d:85:35:c8:60: 91:ac:7e:1d:67:d2:b9:ea:ca:01:a8:28:c4:ae:3a: 86:43:0f:76:e6:9c:59:7e:3e:4f:9f:4c:89:1b:8a: fa:2a:64:79:ac:1f:8d:9e:09:b9:02:92:94:9b:ad: 20:69:d2:5b:34:b8:8d:1e:30:68:92:2c:8d:0d:d3: 4d:53:db:03:7c:96:51:b4:61:91:c1:6c:a5:02:ba: 17:bc:f4:61:df:7d:63:72:16:92:7d:5d:b7:82:2e: 65:1c:d8:c8:70:d3:b3:e3:c9:ea:4f:ff:5a:1d:7f: 2a:38:47:a8:37:90:4d:e5:bd:37:84:6c:ae:ba:bf: bf:65:72:71:af:56:dd:88:1b:fd:23:7a:a7:a7:10: ef:88:5b:af:75:38:e2:cc:47:51:82:1a:51:67:56: 2c:ba:e8:86:3e:01:f5:64:3b:7c:bb:62:cc:f9:58: 0d:fb:6f:67:15:83:5f:7e:0b:04:28:af:66:19:8b: e6:20:f1:7b:c7:b8:35:74:14:de:bc:64:15:3e:bd: 19:14:ec:52:56:9c:a7:36:fb:28:1b:91:8e:de:c0: 9f:81:6c:2c:76:77:0e:5d:8a:ae:9f:27:1a:c7:39: 51:2d:6f:b5:8e:c0:2f:bc:04:bc:fe:c0:e8:31:bc: b3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BA:B3:94:EE:A6:D4:91:F9:A4:B0:6B:1A:11:4D:AC:26:B4:B9:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9f80a8b3-33a4-38ba-b464-0d1152d1e289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f4:89:8b:20:a9:b1:e6:e9:6c:ac:da:c5:5d:55:85:d9:44: aa:03:56:cc:5c:1f:4d:00:17:84:f2:5e:31:51:4d:4e:52:78: 74:71:ba:47:d2:ab:bc:cd:f7:0c:bf:14:83:6f:d8:18:3a:c1: cf:9d:e9:d8:8a:d7:1e:e2:3b:29:58:0b:94:68:ee:49:b1:a6: 3e:ff:e0:5d:c2:52:da:d2:42:3e:0b:18:a4:03:5d:58:d8:b2: dd:5b:cb:b3:08:28:2e:47:79:cf:85:65:89:e3:58:9d:8c:f3: d5:34:2b:c7:24:71:45:a1:e0:a7:de:94:cd:5e:f7:52:c8:02: 49:2d:20:b3:e2:93:b2:36:d8:ec:29:59:94:c2:6d:3d:9f:f7: 6e:ad:85:a3:43:e3:a9:88:9d:7c:05:8c:80:bd:06:89:fc:30: 3f:51:4b:b1:2e:8e:17:cb:1c:af:3a:a6:6a:ab:00:a4:b0:15: ea:22:5a:da:1b:96:4a:57:9f:d9:da:d7:35:cb:ab:80:64:10: 14:8b:02:fc:16:e3:a6:fe:f6:b9:d4:27:79:16:f4:32:ea:07: f6:95:57:d4:6d:64:30:b1:cc:e8:48:70:0e:ca:b4:93:5c:66: 14:26:7f:92:58:c7:d0:f9:6b:f6:bb:10:ff:8f:1e:ee:24:1e: e0:29:15:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmyHFDB5BE5cmA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZWYyMzAxZmQtZmU1Ny00ODI0LWIxNmYtMThiMjMxM2E5YWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjITu6+odHb5fYU1yGCRrH4dZ9K56soBqCjE rjqGQw925pxZfj5Pn0yJG4r6KmR5rB+Nngm5ApKUm60gadJbNLiNHjBokiyNDdNN U9sDfJZRtGGRwWylAroXvPRh331jchaSfV23gi5lHNjIcNOz48nqT/9aHX8qOEeo N5BN5b03hGyuur+/ZXJxr1bdiBv9I3qnpxDviFuvdTjizEdRghpRZ1YsuuiGPgH1 ZDt8u2LM+VgN+29nFYNffgsEKK9mGYvmIPF7x7g1dBTevGQVPr0ZFOxSVpynNvso G5GO3sCfgWwsdncOXYqunycaxzlRLW+1jsAvvAS8/sDoMbyzkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC66s5TuptSR+aSwaxoRTawmtLklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWY4MGE4YjMtMzNhNC0z OGJhLWI0NjQtMGQxMTUyZDFlMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv0iYsgqbHm6Wys2sVdVYXZRKoDVsxcH00AF4TyXjFRTU5SeHRxukfS q7zN9wy/FINv2Bg6wc+d6diK1x7iOylYC5Ro7kmxpj7/4F3CUtrSQj4LGKQDXVjY st1by7MIKC5Hec+FZYnjWJ2M89U0K8ckcUWh4KfelM1e91LIAkktILPik7I22Owp WZTCbT2f926thaND46mInXwFjIC9Bon8MD9RS7EujhfLHK86pmqrAKSwFeoiWtob lkpXn9na1zXLq4BkEBSLAvwW46b+9rnUJ3kW9DLqB/aVV9RtZDCxzOhIcA7KtJNc ZhQmf5JYx9D5a/a7EP+PHu4kHuApFZ8= -----END CERTIFICATE-----Generated at Tue Jul 1 15:15:41 2025 by rpki-client