$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b52783db-6e4d-373b-ae95-1528b234da8f.roa File: b52783db-6e4d-373b-ae95-1528b234da8f.roa (raw, json) Hash identifier: iHcrLPM4GsaI8eYpvxfKUR0N9XXPWIczKg/2pggoSkU= Subject key identifier: 40:2E:0B:3C:6D:12:DE:5B:7A:39:59:A3:FA:D9:00:7D:93:9C:11:96 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A0C056AF1E4DBB45AFA24AD80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b52783db-6e4d-373b-ae95-1528b234da8f.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 203 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6a:f1:e4:db:b4:5a:fa:24:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=bd60c252-49b5-498b-9da1-8407c461c422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:98:c3:d6:6b:0e:01:5a:c6:27:28:48:98:f9: 77:78:52:17:44:99:f2:31:55:43:cb:f0:f3:0f:78: a5:5c:db:fa:c4:ea:e9:8c:81:da:28:a7:3f:5e:23: 89:d1:94:87:49:cd:f8:23:3a:af:78:20:df:df:08: c3:2f:b2:e6:62:8b:90:b4:7f:8c:3f:1f:c5:ec:5f: d1:47:59:c7:ca:cf:46:47:97:8b:14:34:0c:8a:ca: 6f:b4:34:24:9f:1a:ff:4a:45:e7:e9:94:c1:f4:fc: f4:d2:d5:a6:46:9b:96:aa:95:02:a0:5c:6b:dd:d7: 10:93:e4:8d:5f:90:d4:b5:a5:d4:2a:19:10:cb:46: ea:35:67:a8:2c:46:32:72:93:25:fe:c9:22:ba:4d: 39:68:a8:3f:af:4a:dc:61:c3:fc:65:64:72:c8:63: b5:14:51:a7:ae:61:ed:42:c8:f4:76:78:f2:3f:b1: 3e:fe:41:ea:95:39:9d:45:a2:ad:15:e3:77:7a:bf: 43:05:f5:0b:21:ed:89:ad:3d:36:33:9f:86:54:80: 11:35:f5:0c:f0:44:19:df:eb:34:51:e1:bd:40:b9: 5b:8f:c2:48:6f:20:7f:1b:03:98:83:60:30:62:c2: 39:ee:6e:5f:19:b8:85:8b:28:e0:96:db:ae:f0:97: e0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2E:0B:3C:6D:12:DE:5B:7A:39:59:A3:FA:D9:00:7D:93:9C:11:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b52783db-6e4d-373b-ae95-1528b234da8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:39:14:c5:63:d3:4f:00:88:2d:83:40:6e:41:5d:77:d5:eb: 87:c9:87:5c:ca:7f:3f:c1:72:80:36:43:70:64:f5:76:2e:c4: 74:57:33:ba:d9:f0:87:5f:81:0e:4e:9e:57:e6:89:0a:63:8a: 73:42:91:c4:38:f9:e3:c2:89:84:4c:9c:77:ec:af:12:5d:b0: 5c:7b:5d:3b:9f:e4:3a:b1:88:3d:ae:8e:82:e0:53:5c:5d:4e: cc:9c:f8:66:e4:21:1b:5b:a4:6e:d2:df:be:d1:0e:c2:33:48: 03:62:01:48:7f:c4:9d:9e:d3:8c:2b:34:00:6e:39:52:1c:de: cd:b9:65:cd:3c:8a:62:a7:1c:fe:8f:92:c0:70:6b:99:36:f5: 57:32:89:c8:a9:bf:c4:7b:46:5f:4c:e9:c5:c3:9b:19:6a:b4: 97:25:20:e2:3b:c7:18:3f:c8:61:49:ba:c7:bd:29:7f:b3:49: 26:81:93:d9:e6:77:0f:ab:5a:c9:67:5d:8d:a8:7b:bf:4b:99: 52:a9:d2:b3:bb:32:96:66:9a:b0:af:95:dd:e2:7a:f0:6f:fc: c1:00:c5:73:8f:b8:61:53:69:f5:a5:80:1d:64:08:f1:c9:3f: 4e:e9:c2:6a:37:00:fa:cd:81:38:cf:b5:d3:79:5f:00:09:b2: d6:c7:8f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWrx5Nu0WvokrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YmQ2MGMyNTItNDliNS00OThiLTlkYTEtODQwN2M0NjFjNDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZjD1msOAVrGJyhImPl3eFIXRJnyMVVDy/Dz D3ilXNv6xOrpjIHaKKc/XiOJ0ZSHSc34IzqveCDf3wjDL7LmYouQtH+MPx/F7F/R R1nHys9GR5eLFDQMispvtDQknxr/SkXn6ZTB9Pz00tWmRpuWqpUCoFxr3dcQk+SN X5DUtaXUKhkQy0bqNWeoLEYycpMl/skiuk05aKg/r0rcYcP8ZWRyyGO1FFGnrmHt Qsj0dnjyP7E+/kHqlTmdRaKtFeN3er9DBfULIe2JrT02M5+GVIARNfUM8EQZ3+s0 UeG9QLlbj8JIbyB/GwOYg2AwYsI57m5fGbiFiyjgltuu8JfgLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAuCzxtEt5bejlZo/rZAH2TnBGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjUyNzgzZGItNmU0ZC0z NzNiLWFlOTUtMTUyOGIyMzRkYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk5FMVj008AiC2DQG5BXXfV64fJh1zKfz/BcoA2Q3Bk9XYuxHRXM7rZ 8IdfgQ5OnlfmiQpjinNCkcQ4+ePCiYRMnHfsrxJdsFx7XTuf5DqxiD2ujoLgU1xd Tsyc+GbkIRtbpG7S377RDsIzSANiAUh/xJ2e04wrNABuOVIc3s25Zc08imKnHP6P ksBwa5k29Vcyicipv8R7Rl9M6cXDmxlqtJclIOI7xxg/yGFJuse9KX+zSSaBk9nm dw+rWslnXY2oe79LmVKp0rO7MpZmmrCvld3ievBv/MEAxXOPuGFTafWlgB1kCPHJ P07pwmo3APrNgTjPtdN5XwAJstbHj5I= -----END CERTIFICATE-----Generated at Mon Jun 30 00:14:27 2025 by rpki-client