$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa File: b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa (raw, json) Hash identifier: io3IFBcu9niP+PXjOzb95hzw8i3B3EfYR8juYTlGpBs= Subject key identifier: D9:49:9C:A1:87:40:10:07:DC:E7:4E:26:BA:0E:67:98:02:43:49:55 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB4EB7DA765F5ED1D00455CE0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 3360 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:7d:a7:65:f5:ed:1d:00:45:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=3f2ce6bf-a955-47f4-a7e1-608f19c51b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:87:e1:b8:95:a2:51:b0:64:84:d5:69:a0: f7:cf:ab:95:c5:e5:68:27:80:97:93:5c:e8:6b:f5: a7:8a:24:7f:8f:b1:e2:ad:29:8b:6d:2c:c9:d0:58: 4b:95:f5:87:db:a3:27:ca:5e:33:82:a7:87:2c:69: 52:38:32:28:37:4c:a3:90:2d:84:94:28:9c:ab:c3: 75:c2:9a:39:de:9c:67:01:e5:af:65:c0:7f:a1:37: bf:45:91:d4:a7:3e:7b:1b:0d:69:bd:b1:74:b4:61: d5:bf:cd:0e:68:8c:03:48:4d:02:10:6e:81:3e:04: e2:de:f1:d1:41:bb:34:a6:ed:ff:c1:2f:87:eb:c2: a9:94:94:ea:0e:f1:2e:d9:5c:d6:8c:00:b8:25:8e: d0:2b:f9:d9:81:3a:50:e4:2d:55:3c:5d:9e:d5:dc: 90:23:65:71:0f:b3:97:e7:34:eb:ca:cc:16:18:8f: 92:6f:4f:15:3d:eb:40:2c:53:18:58:1c:30:b5:b9: f9:6f:9e:10:38:fc:59:a6:ae:f7:dc:2e:1b:47:9e: 60:0b:2c:71:af:69:a6:09:88:49:cd:70:de:5d:4a: d2:08:50:e0:d4:cb:ec:83:44:74:c1:13:05:51:60: 8f:4d:3f:d2:67:a9:5d:e1:f3:fc:e2:7f:fe:07:7f: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:49:9C:A1:87:40:10:07:DC:E7:4E:26:BA:0E:67:98:02:43:49:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:33:de:5f:db:10:2c:04:67:f0:50:d7:4e:b4:16:97:76:60: 6b:dc:4c:c5:03:45:19:17:40:72:8a:df:a2:e1:b9:08:5e:15: c8:40:be:a1:e5:15:9b:2b:5e:a6:d5:0a:38:f3:8c:ae:55:aa: 88:89:2e:d2:da:ee:c5:9b:66:ef:e8:25:c8:f1:9d:c1:78:7f: 6a:83:e4:ad:da:85:2b:f1:08:d9:36:ce:4e:3a:4c:60:ea:9d: c5:48:f1:53:6f:58:5b:16:f8:e5:32:23:a3:2b:89:4e:6f:04: 1f:b0:8a:48:3d:c6:fd:a3:ff:12:ce:0a:aa:ed:e2:41:44:de: 18:14:a1:c4:0a:13:27:cb:fd:9a:22:2d:8f:81:c4:26:0a:83: 64:c5:a1:12:62:d7:6e:99:eb:e9:9c:e8:c0:60:2f:89:88:19: a6:f3:5c:fb:3a:d2:1f:92:f6:d4:65:3e:8e:46:1a:2b:2c:c5: 6e:5e:56:c1:9a:13:9f:59:96:54:d2:f2:0a:0a:d0:02:57:83: 32:e2:d3:af:ec:ed:b9:16:eb:5f:97:71:42:97:15:74:e6:f7: 8f:7c:53:5c:9b:88:24:bd:2b:d4:e4:a3:62:f6:80:d7:30:1e: d3:c2:2a:0f:b1:0b:dd:02:41:dd:f8:3a:89:42:18:ee:35:9c: ba:4f:64:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0632nZfXtHQBFXOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk M2YyY2U2YmYtYTk1NS00N2Y0LWE3ZTEtNjA4ZjE5YzUxYjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxOH4biVolGwZITVaaD3z6uVxeVoJ4CXk1zo a/WniiR/j7HirSmLbSzJ0FhLlfWH26Mnyl4zgqeHLGlSODIoN0yjkC2ElCicq8N1 wpo53pxnAeWvZcB/oTe/RZHUpz57Gw1pvbF0tGHVv80OaIwDSE0CEG6BPgTi3vHR Qbs0pu3/wS+H68KplJTqDvEu2VzWjAC4JY7QK/nZgTpQ5C1VPF2e1dyQI2VxD7OX 5zTryswWGI+Sb08VPetALFMYWBwwtbn5b54QOPxZpq733C4bR55gCyxxr2mmCYhJ zXDeXUrSCFDg1Mvsg0R0wRMFUWCPTT/SZ6ld4fP84n/+B3+LIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlJnKGHQBAH3OdOJroOZ5gCQ0lVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjlmMjAyNGMtZGE1Yy0z ZTVlLWIyMTUtYTVhZWZiZTJmMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAz3l/bECwEZ/BQ1060Fpd2YGvcTMUDRRkXQHKK36LhuQheFchAvqHl FZsrXqbVCjjzjK5VqoiJLtLa7sWbZu/oJcjxncF4f2qD5K3ahSvxCNk2zk46TGDq ncVI8VNvWFsW+OUyI6MriU5vBB+wikg9xv2j/xLOCqrt4kFE3hgUocQKEyfL/Zoi LY+BxCYKg2TFoRJi126Z6+mc6MBgL4mIGabzXPs60h+S9tRlPo5GGissxW5eVsGa E59ZllTS8goK0AJXgzLi06/s7bkW61+XcUKXFXTm9498U1ybiCS9K9Tko2L2gNcw HtPCKg+xC90CQd34OolCGO41nLpPZKE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:50:15 2025 by rpki-client