$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa File: f934d4a4-fde5-3e78-b53a-cc71da69f923.roa (raw, json) Hash identifier: o1RgWwgPjRVt7IQ7JarOvHkvJ+xic/zDppQ6wecxTS0= Subject key identifier: DE:0E:22:03:FB:FE:2C:F6:CB:BA:79:72:AC:7F:32:77:5D:AD:C7:4F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A4275871165F16156D2E2DA80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 203 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:87:11:65:f1:61:56:d2:e2:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=ceed3a20-0201-4193-a55f-90f9525e950a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d5:3d:af:65:87:de:86:24:14:a3:51:d8:d2: 72:7f:7a:f2:bd:8c:8b:39:7c:30:f1:cc:a3:c2:c0: 2d:3e:67:81:e9:32:f3:ec:74:9c:f1:12:fd:22:7c: 97:e2:18:de:25:39:ef:39:1f:31:08:d6:3b:13:14: 03:c6:91:ee:52:80:d3:28:ad:63:00:72:b8:8a:e9: da:5d:f2:f8:02:f7:58:40:e2:b2:ac:df:5d:da:b2: d8:b3:e0:4e:fb:92:8d:eb:9c:5b:17:91:d5:1e:47: 3b:51:5f:0c:c3:6b:18:86:3e:fd:ec:2e:0d:fb:e5: 5b:ba:c7:2b:bd:0c:ae:e7:9a:39:aa:6e:b3:fa:df: 00:42:29:d9:d2:c5:9f:6e:0d:4e:0f:23:2a:77:43: 2f:92:01:02:59:08:2d:62:bb:d6:ce:7b:05:35:3e: 9c:f0:87:4c:3b:d8:d6:97:ca:a2:e2:cb:ba:bf:25: ee:c1:5d:73:f1:aa:6d:5f:77:22:a8:93:37:bc:62: 4c:7d:48:17:a0:5a:5b:07:bc:29:aa:7f:c5:db:81: f6:bc:da:f6:86:3c:5b:d2:d7:2b:b8:0c:8b:f5:c7: 53:a0:20:f1:ce:d5:d0:d4:20:df:66:e3:d8:c0:b2: 98:63:be:c1:a7:c7:a8:09:44:7a:1b:cf:5f:8e:66: ba:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0E:22:03:FB:FE:2C:F6:CB:BA:79:72:AC:7F:32:77:5D:AD:C7:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:4a:28:58:68:68:a6:cb:ca:0a:1c:5e:a1:b9:2e:e5:49:3a: 3d:7f:06:cc:64:0f:01:e6:87:ea:02:fe:e9:a8:e8:aa:1f:b4: 50:7e:cf:d6:bb:23:e0:fb:1c:fc:93:7f:72:76:8c:40:bf:92: 4c:65:72:7c:40:98:3c:cd:29:79:67:86:e2:15:dd:5e:8d:fd: ef:5c:28:1f:50:5d:58:31:ec:a1:3a:f8:21:fb:e8:5a:6a:b3: 57:e0:33:91:44:c5:72:93:3f:08:ec:c0:c7:6d:b1:ba:fb:50: fb:ae:66:ac:4a:7d:df:a6:6d:a9:fa:19:98:d4:e5:fa:e1:16: 22:18:b2:0f:da:7f:6b:f3:c4:ee:06:53:2c:6d:fe:36:8c:6c: 66:c1:02:e8:af:34:f4:72:4f:c8:c2:e4:54:51:e0:88:5e:d2: 06:c8:f6:af:57:a0:c9:e3:8f:c3:8f:09:f0:42:43:43:83:a7: 7e:5f:d7:7a:36:b9:72:3d:a9:fb:8a:e5:55:1f:0f:42:08:6d: 8a:14:a4:0c:b6:93:ef:69:25:cf:58:e3:40:85:ca:37:48:24: ee:ae:bb:3d:f9:3c:4a:56:b9:70:eb:60:d6:63:13:8a:80:cb: c4:9c:5b:d1:61:42:f9:46:09:0a:13:c6:0e:0c:bb:a4:a9:5d: 67:5c:ae:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYcRZfFhVtLi2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk Y2VlZDNhMjAtMDIwMS00MTkzLWE1NWYtOTBmOTUyNWU5NTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdU9r2WH3oYkFKNR2NJyf3ryvYyLOXww8cyj wsAtPmeB6TLz7HSc8RL9InyX4hjeJTnvOR8xCNY7ExQDxpHuUoDTKK1jAHK4iuna XfL4AvdYQOKyrN9d2rLYs+BO+5KN65xbF5HVHkc7UV8Mw2sYhj797C4N++Vbuscr vQyu55o5qm6z+t8AQinZ0sWfbg1ODyMqd0MvkgECWQgtYrvWznsFNT6c8IdMO9jW l8qi4su6vyXuwV1z8aptX3ciqJM3vGJMfUgXoFpbB7wpqn/F24H2vNr2hjxb0tcr uAyL9cdToCDxztXQ1CDfZuPYwLKYY77Bp8eoCUR6G89fjma6MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4OIgP7/iz2y7p5cqx/MnddrcdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjkzNGQ0YTQtZmRlNS0z ZTc4LWI1M2EtY2M3MWRhNjlmOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtKKFhoaKbLygocXqG5LuVJOj1/BsxkDwHmh+oC/umo6KoftFB+z9a7 I+D7HPyTf3J2jEC/kkxlcnxAmDzNKXlnhuIV3V6N/e9cKB9QXVgx7KE6+CH76Fpq s1fgM5FExXKTPwjswMdtsbr7UPuuZqxKfd+mban6GZjU5frhFiIYsg/af2vzxO4G Uyxt/jaMbGbBAuivNPRyT8jC5FRR4Ihe0gbI9q9XoMnjj8OPCfBCQ0ODp35f13o2 uXI9qfuK5VUfD0IIbYoUpAy2k+9pJc9Y40CFyjdIJO6uuz35PEpWuXDrYNZjE4qA y8ScW9FhQvlGCQoTxg4Mu6SpXWdcrv4= -----END CERTIFICATE-----Generated at Sun Jun 29 20:28:35 2025 by rpki-client