$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa File: a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa (raw, json) Hash identifier: DF1Q8RSyvlq2aKVR+ioTlgNKm5WisHB/dh9ktKDbCBE= Subject key identifier: FD:49:A3:CA:10:79:F2:5D:C4:79:82:11:28:94:48:0E:70:AD:B4:00 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A5B95AF72A4712FE7F50D0B80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 17916 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:af:72:a4:71:2f:e7:f5:0d:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=0fb14121-5e52-4d4a-b3fe-1f579b3379ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fb:b6:c6:00:46:d1:fd:70:1c:22:20:19:17: f1:9e:ef:76:f4:f7:bb:e6:32:7f:c2:5a:be:7b:d8: 4f:fe:93:1e:81:00:64:d7:8d:2c:49:7c:8e:17:38: 98:e4:23:95:9a:25:7d:8c:b7:09:85:c0:95:fb:bf: 3b:b0:0f:5f:01:1a:ab:8b:b0:35:f3:78:2a:ec:0b: e7:2f:18:d5:20:e9:b0:87:6f:d9:86:47:24:5a:28: 87:87:af:eb:5c:fa:1b:fe:b0:8f:36:53:62:ef:f9: 25:4f:3b:c4:60:4a:33:f3:6b:c1:27:4d:c4:62:a9: 5a:a3:ce:c3:42:6b:e8:13:df:3d:87:b8:ea:03:24: 52:d6:7d:a3:c7:7b:95:8e:d1:5a:c9:58:1a:1f:c3: a8:a1:6e:65:40:e1:26:6d:4a:94:3f:8c:12:bc:e6: d1:6a:4e:aa:bd:c7:d4:fd:67:10:d7:86:e4:3a:e0: 75:39:d5:a9:d9:68:ec:76:d6:a7:cc:c6:81:f6:8a: 7e:9e:bb:4e:fd:57:10:8b:76:20:4c:10:14:87:44: e8:8d:9e:8f:6c:d8:88:c7:f5:c0:5e:79:53:ba:17: d1:1a:c7:73:a3:b4:57:32:24:b7:87:49:d9:73:28: ac:03:e9:97:15:1b:c8:c8:b6:5c:a5:03:87:24:6b: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:49:A3:CA:10:79:F2:5D:C4:79:82:11:28:94:48:0E:70:AD:B4:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:7d:dc:b0:ee:24:7b:af:18:ae:ea:20:3d:cb:b2:d0:6a:1f: 62:3b:44:73:a1:bc:9c:b0:dd:d3:b1:a9:de:7f:c2:18:59:68: 5c:0b:13:0d:c5:3c:47:4c:86:49:56:c3:11:1c:45:5a:82:ab: 34:76:05:99:97:6b:bd:57:b2:14:9e:c9:d7:af:f1:3a:72:5c: 5e:51:17:03:58:c1:dc:86:e3:d9:3d:af:ed:f7:ed:77:fb:87: 18:1f:42:78:85:91:60:04:2f:37:7a:dd:0c:29:06:fb:d7:14: 98:a3:02:c8:ed:83:ed:7e:02:98:4b:fb:28:c0:bc:fa:e2:e7: c1:93:ba:03:59:7a:c9:2b:05:6b:fc:21:92:97:7d:8a:2d:e2: c5:80:60:b4:46:55:88:d5:c8:8b:80:e3:a0:19:ff:d4:8d:0a: 99:c3:77:b1:b4:ab:0c:42:d3:a4:84:e0:08:97:80:68:87:f5: 7a:ca:14:be:e2:55:b9:69:2f:c6:44:23:da:5c:1c:59:1c:45: 86:2f:26:ce:75:5f:42:7c:a3:3c:22:37:56:89:99:aa:15:28: bd:7c:e9:f4:ea:86:98:12:88:4d:b2:55:5b:78:a1:59:ad:73: 45:85:97:b4:26:3f:71:88:dc:8e:52:1b:c6:64:91:15:86:44: 0c:49:e2:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpbla9ypHEv5/UNC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk MGZiMTQxMjEtNWU1Mi00ZDRhLWIzZmUtMWY1NzliMzM3OWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/u2xgBG0f1wHCIgGRfxnu929Pe75jJ/wlq+ e9hP/pMegQBk140sSXyOFziY5COVmiV9jLcJhcCV+787sA9fARqri7A183gq7Avn LxjVIOmwh2/ZhkckWiiHh6/rXPob/rCPNlNi7/klTzvEYEoz82vBJ03EYqlao87D QmvoE989h7jqAyRS1n2jx3uVjtFayVgaH8OooW5lQOEmbUqUP4wSvObRak6qvcfU /WcQ14bkOuB1OdWp2WjsdtanzMaB9op+nrtO/VcQi3YgTBAUh0TojZ6PbNiIx/XA XnlTuhfRGsdzo7RXMiS3h0nZcyisA+mXFRvIyLZcpQOHJGvWJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1Jo8oQefJdxHmCESiUSA5wrbQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTJjNDllZTUtZmJlMC0z ZDU5LTlmZDMtOWFhNzg4OTA4YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp93LDuJHuvGK7qID3LstBqH2I7RHOhvJyw3dOxqd5/whhZaFwLEw3F PEdMhklWwxEcRVqCqzR2BZmXa71XshSeydev8TpyXF5RFwNYwdyG49k9r+337Xf7 hxgfQniFkWAELzd63QwpBvvXFJijAsjtg+1+AphL+yjAvPri58GTugNZeskrBWv8 IZKXfYot4sWAYLRGVYjVyIuA46AZ/9SNCpnDd7G0qwxC06SE4AiXgGiH9XrKFL7i VblpL8ZEI9pcHFkcRYYvJs51X0J8ozwiN1aJmaoVKL186fTqhpgSiE2yVVt4oVmt c0WFl7QmP3GI3I5SG8ZkkRWGRAxJ4oY= -----END CERTIFICATE-----Generated at Tue Jul 1 11:58:36 2025 by rpki-client