$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa File: d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa (raw, json) Hash identifier: 8w2CtdLtlELkdJFDi+ESjke/hPqDIFw/SL2ypfn4RDY= Subject key identifier: 27:37:02:A2:A7:63:51:AF:70:77:04:70:FD:27:28:3A:BE:A0:19:10 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A0C056B02A9B9C15D53252240 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 3356 IP address blocks: 20.132.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6b:02:a9:b9:c1:5d:53:25:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=a41a3d8e-06df-4bb8-b8a3-a67013828f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2c:a7:ff:a1:b4:63:bb:5c:9f:20:39:c6:06: 78:93:80:8f:da:a3:33:04:e5:2e:75:60:00:8b:77: 33:45:76:f1:7e:bf:65:b0:13:fb:00:1a:0e:4b:30: ca:26:50:49:25:3a:7a:82:05:2b:dd:1d:10:db:ad: 3e:ea:a2:50:13:d2:8c:73:71:03:39:ea:ca:88:18: 29:c2:58:38:41:32:e7:78:6e:9b:80:dc:04:16:98: 80:81:ec:dc:ee:2d:08:cb:b5:98:5a:5e:30:89:b1: 0b:49:6b:0c:1c:5e:a5:25:01:2e:43:77:ce:69:df: b6:1b:d9:ea:2a:cd:9e:0f:b9:ee:e5:9b:2f:9f:f5: 31:0d:dd:0f:da:41:34:e1:3b:af:d2:f3:b2:b1:53: 90:3b:f6:83:7d:fa:df:37:9f:65:0e:58:d4:c2:6c: f1:e0:5e:38:97:03:48:7c:f2:bf:91:66:f1:c3:1f: b1:45:a1:86:0e:0f:45:b9:a5:5c:72:3c:e9:6b:3c: 30:98:65:56:83:f3:e2:7e:be:f1:36:ac:17:cf:52: dc:ca:22:f6:d4:96:dd:53:6f:3e:8d:43:b7:33:6a: 20:70:9c:97:6a:85:ba:34:d9:4e:33:97:77:fc:f9: d3:87:68:0f:a9:6e:0d:36:71:c2:e1:60:34:88:4c: 85:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:37:02:A2:A7:63:51:AF:70:77:04:70:FD:27:28:3A:BE:A0:19:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e5:bf:cd:95:f7:14:75:92:8e:31:31:c0:0f:c8:da:c9:dc: bb:0f:30:ae:0e:c4:48:47:63:97:77:95:99:7a:5b:bc:bc:b9: 61:24:14:73:a7:2f:5c:8f:71:49:c6:47:62:6c:6a:f7:78:0e: 77:50:11:21:af:f6:d2:54:91:4e:69:0b:c3:91:e8:3e:01:28: a9:4c:3a:56:a5:50:e6:be:45:dc:ed:4f:1c:06:44:f0:21:d7: 21:03:d8:27:17:a9:26:f7:72:16:c2:21:1e:b4:2e:0a:44:1d: b2:28:64:c0:2f:8e:63:de:65:24:d7:30:a5:0f:13:4f:33:ac: c4:51:44:9d:91:1f:09:ee:81:02:b1:80:ac:50:6e:8c:1e:03: 31:f4:aa:52:ed:40:ce:64:c9:c5:23:01:fd:17:57:51:e2:86: 07:2d:3e:d5:b3:46:e2:0b:67:71:7c:6d:bb:6d:82:5f:67:d3: 17:a6:09:5d:a1:16:4c:84:ef:1d:d8:b2:bd:19:ef:3a:a6:6f: ec:9f:d3:ee:ec:0c:ae:35:25:3b:f3:83:ad:05:88:29:49:fb: e5:fa:07:a2:d8:4f:0b:e7:24:06:4a:4e:cc:7c:96:67:ee:69: 29:e6:9b:03:d5:f7:db:34:8f:ab:86:32:04:10:c5:a3:3e:d4: be:2a:ca:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWsCqbnBXVMlIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YTQxYTNkOGUtMDZkZi00YmI4LWI4YTMtYTY3MDEzODI4ZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiyn/6G0Y7tcnyA5xgZ4k4CP2qMzBOUudWAA i3czRXbxfr9lsBP7ABoOSzDKJlBJJTp6ggUr3R0Q260+6qJQE9KMc3EDOerKiBgp wlg4QTLneG6bgNwEFpiAgezc7i0Iy7WYWl4wibELSWsMHF6lJQEuQ3fOad+2G9nq Ks2eD7nu5Zsvn/UxDd0P2kE04Tuv0vOysVOQO/aDffrfN59lDljUwmzx4F44lwNI fPK/kWbxwx+xRaGGDg9FuaVccjzpazwwmGVWg/Pifr7xNqwXz1LcyiL21JbdU28+ jUO3M2ogcJyXaoW6NNlOM5d3/PnTh2gPqW4NNnHC4WA0iEyF/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCc3AqKnY1GvcHcEcP0nKDq+oBkQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDU1ZTljZDEtNWU5OC0z MmQ5LTlkY2QtMzhhNGUxYTljMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFITmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETlv82V9xR1ko4xMcAPyNrJ3LsPMK4OxEhHY5d3lZl6W7y8uWEkFHOn L1yPcUnGR2Jsavd4DndQESGv9tJUkU5pC8OR6D4BKKlMOlalUOa+RdztTxwGRPAh 1yED2CcXqSb3chbCIR60LgpEHbIoZMAvjmPeZSTXMKUPE08zrMRRRJ2RHwnugQKx gKxQboweAzH0qlLtQM5kycUjAf0XV1HihgctPtWzRuILZ3F8bbttgl9n0xemCV2h FkyE7x3Ysr0Z7zqmb+yf0+7sDK41JTvzg60FiClJ++X6B6LYTwvnJAZKTsx8lmfu aSnmmwPV99s0j6uGMgQQxaM+1L4qyrI= -----END CERTIFICATE-----Generated at Mon Jun 30 23:59:20 2025 by rpki-client