$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f22aa72a-611a-3aef-bb6d-19e2e598ca38.roa File: f22aa72a-611a-3aef-bb6d-19e2e598ca38.roa (raw, json) Hash identifier: 7vYFRL6/bntU1sWfVIxpWIBEJjZOWOSZnsHhzSxMZ44= Subject key identifier: F0:34:D6:96:6F:49:02:9A:29:C3:1E:60:9E:3C:ED:41:EB:B9:1A:A8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A0C056B79EABB4F2D588245E0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f22aa72a-611a-3aef-bb6d-19e2e598ca38.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 4237 IP address blocks: 20.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6b:79:ea:bb:4f:2d:58:82:45:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=021fbfbc-f7e6-4a93-a6d1-552872d6acad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:96:62:7c:3f:18:b2:2a:a6:4a:c6:b3:99:12: 8c:b9:96:64:64:ad:49:e6:97:a6:c8:a7:cd:46:31: 2b:a4:4e:a2:b2:7f:75:59:b5:95:26:ae:0e:5c:ed: ee:d1:cf:30:52:60:4f:8f:54:37:d4:1c:46:d5:25: 46:4e:ab:82:48:f1:41:41:b5:8f:19:8b:81:14:87: 06:0b:be:e3:15:81:45:8c:24:a2:7b:62:76:68:9a: ca:bb:ae:78:fd:ce:9c:5e:c7:23:a3:ed:32:0b:3a: 66:7f:e7:4f:0e:47:39:aa:51:62:d4:6b:72:d1:61: 06:53:21:36:00:b3:af:c7:1e:3e:81:7c:a7:03:01: 3a:47:f8:77:40:61:67:9e:ce:ad:e5:d5:11:61:66: f4:ce:38:57:5b:c8:2c:7d:4b:69:38:27:15:c8:5d: c5:0f:0c:e0:47:78:d4:35:9c:ec:f7:61:f8:10:42: 76:f3:bf:d8:6e:7f:68:a4:d8:62:df:94:9e:fb:11: 34:4d:2e:4c:33:b4:6a:03:50:ab:b9:ff:17:40:d6: c6:94:05:bc:db:78:41:fa:3e:80:8e:f1:7a:79:d9: cc:36:72:55:46:c8:da:84:cf:d4:d4:4d:df:5f:0b: f1:4e:97:e7:1f:98:f6:7d:70:4c:05:35:8f:cb:3a: c2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:34:D6:96:6F:49:02:9A:29:C3:1E:60:9E:3C:ED:41:EB:B9:1A:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f22aa72a-611a-3aef-bb6d-19e2e598ca38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ca:3a:97:f5:2f:24:2f:f5:d0:7e:c0:90:a8:a9:32:b2:f0: bb:d6:c1:9c:e8:9d:b3:30:42:9c:13:5c:df:03:14:e5:53:e1: c7:52:c9:74:9c:eb:e1:9e:96:3e:61:76:2d:38:37:c7:c9:d1: 42:ae:19:9e:2d:6b:3e:66:3c:bd:3f:9f:25:f0:ae:ea:ac:a7: 2f:0f:5e:91:84:81:84:2a:ea:d8:42:66:11:ef:c9:32:fd:36: ec:21:1b:05:a0:84:a9:c8:a6:87:32:78:2d:f1:65:b4:09:89: 86:3f:14:94:27:5b:99:ca:e7:f0:86:fd:90:1b:4b:97:ee:38: 54:6e:ee:d2:ec:f7:aa:75:70:ad:4a:a2:6b:44:90:a3:97:bd: 8f:05:2c:9c:c3:b4:f3:89:ba:23:02:00:bc:9b:68:2d:dd:a3: 77:9b:a0:bd:3d:65:51:1b:b3:65:6f:74:4a:52:69:25:62:7e: 69:79:f4:40:8f:3d:3f:97:59:84:a3:ad:99:3d:69:fa:d3:e8: a1:34:c2:13:93:f3:87:58:db:c6:0b:7a:df:46:2a:25:9e:5d: 36:de:84:28:91:d8:19:3f:70:47:19:48:71:3e:9f:f1:de:5d: 86:37:19:d1:2b:47:d2:c2:14:d8:b4:83:29:19:f7:8e:57:11: 27:40:05:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWt56rtPLViCReAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MDIxZmJmYmMtZjdlNi00YTkzLWE2ZDEtNTUyODcyZDZhY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZZifD8YsiqmSsazmRKMuZZkZK1J5pemyKfN RjErpE6isn91WbWVJq4OXO3u0c8wUmBPj1Q31BxG1SVGTquCSPFBQbWPGYuBFIcG C77jFYFFjCSie2J2aJrKu654/c6cXscjo+0yCzpmf+dPDkc5qlFi1Gty0WEGUyE2 ALOvxx4+gXynAwE6R/h3QGFnns6t5dURYWb0zjhXW8gsfUtpOCcVyF3FDwzgR3jU NZzs92H4EEJ287/Ybn9opNhi35Se+xE0TS5MM7RqA1Cruf8XQNbGlAW823hB+j6A jvF6ednMNnJVRsjahM/U1E3fXwvxTpfnH5j2fXBMBTWPyzrCxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA01pZvSQKaKcMeYJ487UHruRqoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjIyYWE3MmEtNjExYS0z YWVmLWJiNmQtMTllMmU1OThjYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFInYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnKOpf1LyQv9dB+wJCoqTKy8LvWwZzonbMwQpwTXN8DFOVT4cdSyXSc 6+Gelj5hdi04N8fJ0UKuGZ4taz5mPL0/nyXwruqspy8PXpGEgYQq6thCZhHvyTL9 NuwhGwWghKnIpocyeC3xZbQJiYY/FJQnW5nK5/CG/ZAbS5fuOFRu7tLs96p1cK1K omtEkKOXvY8FLJzDtPOJuiMCALybaC3do3eboL09ZVEbs2VvdEpSaSVifml59ECP PT+XWYSjrZk9afrT6KE0whOT84dY28YLet9GKiWeXTbehCiR2Bk/cEcZSHE+n/He XYY3GdErR9LCFNi0gykZ945XESdABWU= -----END CERTIFICATE-----Generated at Tue Jul 1 12:34:20 2025 by rpki-client