$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa File: da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa (raw, json) Hash identifier: ge5yA1DelmQfdlT3dwane4016gEdh9OHPpuw9RaJrOc= Subject key identifier: 2A:7A:C3:31:9B:DD:F3:73:81:83:62:91:4D:2B:35:06:84:EE:C0:FA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A3A159148DF1742CF55679A60 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 202 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:91:48:df:17:42:cf:55:67:9a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=f381837d-4f07-416e-85a8-405b6c0a3ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d0:bc:35:49:05:fa:0a:cc:cb:eb:7d:e8:a1: 39:20:55:2e:f8:cb:d3:37:ca:33:57:8f:51:ac:58: 74:e8:06:f6:6b:f6:4f:67:de:62:32:ef:2f:e3:48: f4:22:67:e5:b1:d0:ae:5d:67:9d:78:be:ac:d7:73: dc:cb:a3:a5:90:a2:3a:5e:8a:33:87:81:47:09:b7: b6:77:e3:64:31:0e:db:31:58:75:be:51:d7:d2:fd: 9c:60:f3:0b:18:17:eb:ce:f2:43:21:1b:20:f3:c1: 21:c6:9b:75:72:84:c7:ce:23:24:c0:7c:5c:0b:7e: f1:21:8e:89:e5:16:19:6d:6f:13:85:ba:ff:97:9a: 20:ac:c3:02:48:36:75:4e:ce:0e:24:7b:14:45:a1: 11:ee:d2:0a:a1:04:a3:7c:5c:ae:82:c2:13:ed:aa: 8b:49:37:bd:23:d0:99:1e:a8:13:c8:2d:ad:74:8f: 68:4c:3e:65:b6:ce:9f:21:77:1a:29:09:2c:37:99: cc:a5:a4:7e:7d:2c:63:bb:a8:7a:a1:21:fc:87:07: 7b:39:ad:3e:65:73:4c:67:ba:05:fe:ce:99:8b:e8: 13:a6:79:41:42:e5:0f:67:6d:ae:aa:1e:45:d4:c7: 72:1e:39:ab:c4:9b:79:eb:7a:0b:75:19:b6:c1:72: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7A:C3:31:9B:DD:F3:73:81:83:62:91:4D:2B:35:06:84:EE:C0:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da024b9b-bb62-3d3f-84c7-f35b52779cf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a9:86:fa:07:1b:e0:53:37:89:ab:e7:af:fb:ad:bc:4b:fc: a5:5f:66:3c:de:a6:f3:0e:87:62:97:cd:ce:d0:c7:6b:6f:13: 2a:02:f4:8c:4b:26:00:8a:a2:21:42:99:6b:ea:9e:ff:c9:50: 30:38:ca:4d:a8:c4:fd:0f:d8:7e:39:c4:c9:2a:39:96:da:fb: 51:cb:f8:3b:a6:d0:c2:1e:cb:0a:b6:92:d1:ab:4d:6b:5b:4f: df:2e:40:17:19:8d:d8:a9:7a:c8:32:4e:93:cc:b7:0f:b6:eb: b1:c9:fa:15:96:dc:3d:f4:58:89:3f:34:9b:91:4f:34:39:89: 01:62:03:1a:af:f2:22:82:0f:9a:e7:61:df:8d:5e:1f:a3:40: c9:5b:5d:66:bf:84:61:3b:26:e6:43:b3:a8:db:d2:bf:90:b6: d9:0f:4a:e5:8b:35:79:df:25:67:33:c4:c0:3c:49:be:f6:5f: 12:ac:01:48:59:11:82:51:d2:4f:8e:af:ad:a5:0a:9c:d1:b1: 5f:7b:60:2c:55:ca:99:bb:a2:c4:b2:22:74:01:22:2e:b8:18: a0:6e:e8:6e:58:c2:dc:45:5a:4b:e5:86:61:0b:a5:ac:da:f2: 32:0f:c0:83:bd:b3:5b:f0:e1:84:f9:e6:5a:ac:4f:9c:5f:c7: 3c:f2:8d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZFI3xdCz1VnmmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZjM4MTgzN2QtNGYwNy00MTZlLTg1YTgtNDA1YjZjMGEzY2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9C8NUkF+grMy+t96KE5IFUu+MvTN8ozV49R rFh06Ab2a/ZPZ95iMu8v40j0ImflsdCuXWedeL6s13Pcy6OlkKI6Xoozh4FHCbe2 d+NkMQ7bMVh1vlHX0v2cYPMLGBfrzvJDIRsg88Ehxpt1coTHziMkwHxcC37xIY6J 5RYZbW8Thbr/l5ogrMMCSDZ1Ts4OJHsURaER7tIKoQSjfFyugsIT7aqLSTe9I9CZ HqgTyC2tdI9oTD5lts6fIXcaKQksN5nMpaR+fSxju6h6oSH8hwd7Oa0+ZXNMZ7oF /s6Zi+gTpnlBQuUPZ22uqh5F1MdyHjmrxJt563oLdRm2wXIlmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCp6wzGb3fNzgYNikU0rNQaE7sD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwMjRiOWItYmI2Mi0z ZDNmLTg0YzctZjM1YjUyNzc5Y2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuphvoHG+BTN4mr56/7rbxL/KVfZjzepvMOh2KXzc7Qx2tvEyoC9IxL JgCKoiFCmWvqnv/JUDA4yk2oxP0P2H45xMkqOZba+1HL+Dum0MIeywq2ktGrTWtb T98uQBcZjdipesgyTpPMtw+267HJ+hWW3D30WIk/NJuRTzQ5iQFiAxqv8iKCD5rn Yd+NXh+jQMlbXWa/hGE7JuZDs6jb0r+QttkPSuWLNXnfJWczxMA8Sb72XxKsAUhZ EYJR0k+Or62lCpzRsV97YCxVypm7osSyInQBIi64GKBu6G5YwtxFWkvlhmELpaza 8jIPwIO9s1vw4YT55lqsT5xfxzzyjTc= -----END CERTIFICATE-----Generated at Tue Jul 1 08:56:18 2025 by rpki-client