$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f22aa72a-611a-3aef-bb6d-19e2e598ca38.roa File: f22aa72a-611a-3aef-bb6d-19e2e598ca38.roa (raw, json) Hash identifier: WCqmU+s+0iNZQCdD+M7uotI99Vq6Mcd4V6qhrL0Y1Qc= Subject key identifier: 29:09:34:27:CE:E7:CC:85:DE:8A:CC:FF:6F:63:A6:4B:57:F5:DE:85 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AECC141D4C63190833B719B80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f22aa72a-611a-3aef-bb6d-19e2e598ca38.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 4237 IP address blocks: 20.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:41:d4:c6:31:90:83:3b:71:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b35ed4f9-f887-4024-b33a-d93f0807229c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:64:e1:fe:c0:c8:29:5f:ad:c7:0f:ad:03:1d: 14:d5:d7:c4:7e:e6:6f:bc:73:d4:f9:33:a8:12:a1: 64:2c:f2:bb:85:0e:1f:82:de:2f:d3:5e:58:74:7f: 95:a3:15:d1:2f:b6:a8:8a:96:c2:3f:2f:13:64:54: b4:68:b1:21:15:06:38:e9:15:c3:59:f5:72:87:1a: 30:24:af:9e:9a:1a:87:e1:f0:e0:2b:db:ae:13:6a: 95:42:8c:9e:08:98:92:8c:12:ac:c9:ed:77:39:0e: af:45:f8:34:ab:33:7e:e1:f1:de:99:2f:95:71:73: 1d:e6:58:64:e3:ac:38:8f:eb:ac:dd:0d:54:95:05: 82:55:59:d2:41:c0:d9:d1:dd:59:98:82:85:7c:45: e9:17:b9:3a:6a:05:20:da:81:9a:53:b4:93:de:eb: 35:a6:7b:a2:9e:39:fc:b3:1e:f5:40:e8:2c:10:39: 3f:df:1f:62:39:88:c7:a9:9c:1f:c7:dd:41:de:8c: 80:32:70:cd:76:42:2a:80:4b:9c:6c:09:38:50:04: 07:29:54:8e:13:58:cb:cf:f4:83:65:9a:42:e2:8c: a1:1e:e5:4f:4d:57:22:c0:78:ae:39:07:59:b3:01: 13:91:42:d3:a1:ed:f8:83:88:ee:a9:59:cd:73:b8: 73:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:09:34:27:CE:E7:CC:85:DE:8A:CC:FF:6F:63:A6:4B:57:F5:DE:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f22aa72a-611a-3aef-bb6d-19e2e598ca38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:cc:89:6a:74:9b:b6:46:2e:78:13:bb:51:ba:70:ee:45:ea: 5b:ed:b0:55:05:e8:1e:be:db:24:dd:ad:2e:c2:2f:be:7c:a6: e2:e9:b0:f5:c3:93:6f:2a:01:c2:f7:13:1b:c0:f6:2c:b1:03: ef:65:52:ef:7f:d8:8e:a7:ec:2c:e9:36:9d:cc:9e:a3:f1:10: b8:53:b6:e1:b5:7f:ee:36:53:40:2e:04:63:62:77:50:b4:49: 92:d4:ee:83:40:c9:52:21:e8:35:aa:2d:0d:4f:66:2f:60:6d: 95:aa:83:e9:8e:92:90:e1:88:92:34:38:a6:34:7a:57:81:72: 98:56:ca:3a:11:79:0c:fc:dc:98:e1:8a:90:92:f2:1a:79:8e: e2:3c:8a:46:e8:11:2a:d7:c0:d6:a8:fd:38:2b:4e:ce:ac:8c: 7d:dd:53:19:bc:3c:a9:67:af:ea:a9:55:0a:af:a2:2b:94:64: dc:a2:5c:3e:32:1c:cf:b4:08:f4:c9:e4:1f:1a:b9:89:03:7f: 87:f6:61:46:f3:36:25:f0:00:13:e4:1e:21:25:3a:cf:01:b9: 07:b2:c3:70:07:ad:5b:65:73:cb:8f:05:b6:38:23:e1:a7:16: 5e:a4:8b:24:e5:68:8e:1e:8b:3e:27:6b:bc:cc:87:42:41:fe: 96:e6:13:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUHUxjGQgztxm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjM1ZWQ0ZjktZjg4Ny00MDI0LWIzM2EtZDkzZjA4MDcyMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWTh/sDIKV+txw+tAx0U1dfEfuZvvHPU+TOo EqFkLPK7hQ4fgt4v015YdH+VoxXRL7aoipbCPy8TZFS0aLEhFQY46RXDWfVyhxow JK+emhqH4fDgK9uuE2qVQoyeCJiSjBKsye13OQ6vRfg0qzN+4fHemS+VcXMd5lhk 46w4j+us3Q1UlQWCVVnSQcDZ0d1ZmIKFfEXpF7k6agUg2oGaU7ST3us1pnuinjn8 sx71QOgsEDk/3x9iOYjHqZwfx91B3oyAMnDNdkIqgEucbAk4UAQHKVSOE1jLz/SD ZZpC4oyhHuVPTVciwHiuOQdZswETkULToe34g4juqVnNc7hzlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkJNCfO58yF3orM/29jpktX9d6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjIyYWE3MmEtNjExYS0z YWVmLWJiNmQtMTllMmU1OThjYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFInYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzMiWp0m7ZGLngTu1G6cO5F6lvtsFUF6B6+2yTdrS7CL758puLpsPXD k28qAcL3ExvA9iyxA+9lUu9/2I6n7CzpNp3MnqPxELhTtuG1f+42U0AuBGNid1C0 SZLU7oNAyVIh6DWqLQ1PZi9gbZWqg+mOkpDhiJI0OKY0eleBcphWyjoReQz83Jjh ipCS8hp5juI8ikboESrXwNao/TgrTs6sjH3dUxm8PKlnr+qpVQqvoiuUZNyiXD4y HM+0CPTJ5B8auYkDf4f2YUbzNiXwABPkHiElOs8BuQeyw3AHrVtlc8uPBbY4I+Gn Fl6kiyTlaI4eiz4na7zMh0JB/pbmE8g= -----END CERTIFICATE-----Generated at Sat Aug 23 20:12:35 2025 by rpki-client