$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5598c62-5c7b-34dd-9120-6357004878bf.roa File: e5598c62-5c7b-34dd-9120-6357004878bf.roa (raw, json) Hash identifier: 1NJ2Y14RyuYbtiUZ1aT3TGY0mYJmPRrrtw8RigeINe8= Subject key identifier: C2:A9:2C:BA:57:69:6E:47:51:43:B5:B0:3F:FB:A7:C4:60:AC:A3:51 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AE46127B425A8A85EE0523080 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5598c62-5c7b-34dd-9120-6357004878bf.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 20.137.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:27:b4:25:a8:a8:5e:e0:52:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=0d4bb1fb-79f2-4d84-831a-1e31c0d7b9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:0a:9e:76:38:50:76:eb:1d:dc:6f:30:ef: 33:36:c3:aa:3f:93:78:c3:93:34:52:c2:6d:9e:da: 96:de:db:c8:71:57:ae:b7:e5:22:43:35:0a:92:5b: 3e:3e:c0:38:90:e0:d2:94:88:0c:32:7c:b2:13:fc: 51:46:8d:a1:28:4f:4a:e3:a0:42:fa:d4:4e:c7:ac: 56:0f:89:2c:3d:07:1d:b2:07:48:22:af:32:12:07: ed:b0:ab:f1:a2:68:c7:6f:34:57:80:5c:14:6e:d9: f9:9e:c9:0f:94:7b:90:4d:c6:fe:9b:f4:03:fe:89: 09:42:82:73:de:19:be:97:8a:9e:b2:24:cb:75:91: d1:23:1c:38:b8:4b:dd:28:5b:16:f0:48:d8:08:ee: b3:84:3f:5e:87:f5:a5:44:fb:b7:0f:ef:33:9d:ef: 00:3b:d7:b6:ad:f0:31:78:23:8f:b5:2b:59:73:d6: d1:b5:a0:c4:6a:c0:21:97:e1:5a:97:64:51:a1:8c: 97:18:33:63:fd:b9:d5:9b:af:22:8e:28:e8:c8:23: 83:a1:b5:83:02:02:17:db:6d:22:f3:72:ef:a2:d5: d0:c8:04:bc:4b:6f:0b:5f:86:42:48:04:91:91:8c: b3:30:46:31:de:b6:47:3f:35:b3:a3:8a:5c:59:36: d5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A9:2C:BA:57:69:6E:47:51:43:B5:B0:3F:FB:A7:C4:60:AC:A3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5598c62-5c7b-34dd-9120-6357004878bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:71:fd:c3:04:90:00:18:c7:fb:bd:fa:d9:25:fd:c4:dc:c4: 23:74:27:3e:d0:3d:24:a9:c6:64:62:67:22:8c:59:71:ee:98: 47:f4:8e:1c:6a:cb:ba:71:b3:c9:f8:f3:c5:d1:93:f9:65:1a: 94:8b:85:51:cc:cc:cf:e4:7f:c9:8f:5a:7c:1f:ff:f3:58:7d: d8:a0:29:9c:fd:4e:cc:b2:de:39:2e:76:d1:f7:d3:30:95:d2: ad:e6:bc:0e:65:1a:df:2d:0a:da:0a:4a:b9:8a:31:28:99:31: 25:ab:81:f7:6e:47:cf:0d:fd:52:88:b0:73:1b:56:4d:3a:92: fd:0d:5a:87:7d:62:0d:3f:ca:bd:af:db:7a:a6:b0:e6:87:8b: a4:9c:09:f5:a6:ca:dc:2a:77:49:fd:a8:0e:f6:21:7e:f3:74: de:eb:0c:66:6b:9a:9b:58:86:cc:4d:51:c1:4e:be:2c:32:65: 74:62:7c:cf:c9:32:d4:5c:7f:0c:89:8e:b2:5b:a1:59:93:9a: 50:e3:2e:0e:37:19:55:ae:8c:bd:29:75:ee:ff:21:57:98:05: 63:e4:6f:0f:f6:75:e4:20:d8:42:25:89:02:36:20:94:ff:22: 10:57:15:ff:7e:c3:52:dd:92:76:1f:b1:a8:86:e6:3e:9a:5f: 9c:f8:72:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSe0JaioXuBSMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MGQ0YmIxZmItNzlmMi00ZDg0LTgzMWEtMWUzMWMwZDdiOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthkKnnY4UHbrHdxvMO8zNsOqP5N4w5M0UsJt ntqW3tvIcVeut+UiQzUKkls+PsA4kODSlIgMMnyyE/xRRo2hKE9K46BC+tROx6xW D4ksPQcdsgdIIq8yEgftsKvxomjHbzRXgFwUbtn5nskPlHuQTcb+m/QD/okJQoJz 3hm+l4qesiTLdZHRIxw4uEvdKFsW8EjYCO6zhD9eh/WlRPu3D+8zne8AO9e2rfAx eCOPtStZc9bRtaDEasAhl+Fal2RRoYyXGDNj/bnVm68ijijoyCODobWDAgIX220i 83LvotXQyAS8S28LX4ZCSASRkYyzMEYx3rZHPzWzo4pcWTbVJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKpLLpXaW5HUUO1sD/7p8RgrKNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTU1OThjNjItNWM3Yi0z NGRkLTkxMjAtNjM1NzAwNDg3OGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1x/cMEkAAYx/u9+tkl/cTcxCN0Jz7QPSSpxmRiZyKMWXHumEf0jhxq y7pxs8n488XRk/llGpSLhVHMzM/kf8mPWnwf//NYfdigKZz9Tsyy3jkudtH30zCV 0q3mvA5lGt8tCtoKSrmKMSiZMSWrgfduR88N/VKIsHMbVk06kv0NWod9Yg0/yr2v 23qmsOaHi6ScCfWmytwqd0n9qA72IX7zdN7rDGZrmptYhsxNUcFOviwyZXRifM/J MtRcfwyJjrJboVmTmlDjLg43GVWujL0pde7/IVeYBWPkbw/2deQg2EIliQI2IJT/ IhBXFf9+w1LdknYfsaiG5j6aX5z4cpE= -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:57 2025 by rpki-client