$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e9da1586-80d4-3326-a325-4193795a0352.roa File: e9da1586-80d4-3326-a325-4193795a0352.roa (raw, json) Hash identifier: QDoWAn6Wp+m5pFy/1Pk2ZTzWjCp/VJzWqGZ+eIixrrA= Subject key identifier: 70:E4:BA:D1:EA:53:88:65:23:CE:ED:4B:2C:CF:D2:52:AF:98:34:B1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A549B21D31C8571ED40A40C00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e9da1586-80d4-3326-a325-4193795a0352.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 3356 IP address blocks: 20.137.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:21:d3:1c:85:71:ed:40:a4:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=9c82c07a-0eb9-456f-a5c7-b79a8bfb5a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f8:d0:dd:03:29:fa:38:2f:79:ff:4c:77:77: 6e:7e:9f:61:9c:47:04:40:f8:cd:c2:92:21:42:47: 40:18:be:10:ce:c2:50:75:66:6d:43:ed:49:a2:4e: 38:62:e2:da:d5:5b:33:54:b8:16:0f:98:d2:ba:64: 82:6b:40:f3:e6:44:8c:41:4c:28:d9:34:fa:93:86: 89:91:29:48:2a:12:13:97:da:69:c1:f7:31:73:59: be:40:e9:72:6b:be:a8:95:79:01:43:f7:e7:5b:4b: 22:94:a0:c8:da:a9:3c:96:ca:69:a0:54:9a:bf:6e: f1:be:bd:d5:8e:40:58:6c:5e:c9:e5:6e:70:fe:e7: 78:ba:6f:29:2b:c1:1d:22:33:a1:e9:4f:36:d3:8f: b8:d7:b9:6e:7a:bf:d4:4c:92:c9:be:f3:78:f3:67: 7d:bd:db:6d:3c:26:fd:56:77:4c:a0:51:9b:71:9f: 5e:9a:1c:54:61:38:1e:7b:24:5b:8b:2c:4a:ef:e3: 09:93:c8:79:87:fe:4b:92:3b:ca:06:09:d7:97:0e: 1c:c6:e3:4b:d3:2c:62:6c:01:ca:6e:77:3a:10:12: 0a:da:8a:36:89:16:b4:29:40:26:e5:a7:6c:d9:c5: 9e:86:f5:fe:7e:f6:bb:8a:e6:a8:4c:b4:7c:b4:08: d3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:BA:D1:EA:53:88:65:23:CE:ED:4B:2C:CF:D2:52:AF:98:34:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e9da1586-80d4-3326-a325-4193795a0352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:73:3b:21:67:b8:31:f9:20:e0:95:d9:f0:02:1d:74:a3:18: a0:94:b4:49:f7:f5:1e:5b:31:6d:83:6f:05:0a:f2:15:89:87: bb:d1:01:bc:c6:4e:c9:d6:21:38:b5:cf:6a:70:64:24:25:31: 3b:3f:0c:31:cb:51:47:a8:03:5e:f3:cd:34:fe:27:18:38:f3: 39:2c:b6:f2:b1:c6:98:4c:1d:3e:22:0b:64:61:69:f2:8b:c8: a8:43:d5:ce:d7:d8:d1:a1:51:1c:ee:45:64:1a:b8:99:ca:18: 4a:ab:e4:0a:75:39:bd:53:12:31:77:55:3e:55:53:b3:a6:1e: 8c:02:09:42:bd:ba:b7:dc:54:1d:c2:4d:38:6f:51:86:86:c0: eb:34:9b:ea:c9:c8:82:4b:3e:86:e6:7a:12:a0:d1:2b:a9:bf: a7:80:55:2f:54:25:f9:6b:1e:fb:f4:0b:34:ab:22:26:c2:a4: dd:fa:dc:38:77:76:17:b2:77:ee:66:41:fc:a7:29:c3:e2:c6: 8a:91:30:77:01:9e:ea:c9:ea:be:23:12:fd:00:74:1d:3a:5f: bf:52:c6:bf:a8:8b:80:91:b6:8c:be:7c:05:93:6e:2d:ed:52: 05:37:e4:a8:bc:1b:8f:91:7a:52:2a:d5:38:7c:9f:0a:07:f0: b6:46:84:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmyHTHIVx7UCkDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk OWM4MmMwN2EtMGViOS00NTZmLWE1YzctYjc5YThiZmI1YTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/jQ3QMp+jgvef9Md3dufp9hnEcEQPjNwpIh QkdAGL4QzsJQdWZtQ+1Jok44YuLa1VszVLgWD5jSumSCa0Dz5kSMQUwo2TT6k4aJ kSlIKhITl9ppwfcxc1m+QOlya76olXkBQ/fnW0silKDI2qk8lsppoFSav27xvr3V jkBYbF7J5W5w/ud4um8pK8EdIjOh6U8204+417luer/UTJLJvvN482d9vdttPCb9 VndMoFGbcZ9emhxUYTgeeyRbiyxK7+MJk8h5h/5LkjvKBgnXlw4cxuNL0yxibAHK bnc6EBIK2oo2iRa0KUAm5ads2cWehvX+fva7iuaoTLR8tAjTMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDkutHqU4hlI87tSyzP0lKvmDSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTlkYTE1ODYtODBkNC0z MzI2LWEzMjUtNDE5Mzc5NWEwMzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlzOyFnuDH5IOCV2fACHXSjGKCUtEn39R5bMW2DbwUK8hWJh7vRAbzG TsnWITi1z2pwZCQlMTs/DDHLUUeoA17zzTT+Jxg48zkstvKxxphMHT4iC2RhafKL yKhD1c7X2NGhURzuRWQauJnKGEqr5Ap1Ob1TEjF3VT5VU7OmHowCCUK9urfcVB3C TThvUYaGwOs0m+rJyIJLPobmehKg0Supv6eAVS9UJflrHvv0CzSrIibCpN363Dh3 dheyd+5mQfynKcPixoqRMHcBnurJ6r4jEv0AdB06X79Sxr+oi4CRtoy+fAWTbi3t UgU35Ki8G4+RelIq1Th8nwoH8LZGhP8= -----END CERTIFICATE-----Generated at Tue Jul 1 18:33:39 2025 by rpki-client