$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/01a58354-6718-38cb-adc5-f6f4e562db01.roa File: 01a58354-6718-38cb-adc5-f6f4e562db01.roa (raw, json) Hash identifier: zRmG0OCbLVUD5KlHd0VZSAWyW8X8FymKKRRlBaBzaT0= Subject key identifier: F2:5E:41:9F:89:8F:6A:43:A9:B7:68:37:38:AB:C1:76:20:9E:FB:3E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61E952F92C3EBF6BD1CC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/01a58354-6718-38cb-adc5-f6f4e562db01.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 202 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1e:95:2f:92:c3:eb:f6:bd:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=5c006053-0b96-4cbd-b8ce-704b7d9107b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:33:cd:39:0c:4f:6e:31:9f:81:4d:b8:a9: e2:dd:6e:b8:88:4d:4a:4b:11:41:45:a5:3b:3f:81: 9f:00:65:55:c4:13:f9:18:78:35:91:1f:2c:f7:1e: f7:75:b1:a2:d5:8c:20:a5:87:10:5e:c0:34:be:81: ea:7e:58:9f:40:de:2f:f1:bf:08:d6:f8:01:95:83: ce:15:f1:04:e0:76:35:1a:ae:12:fc:c0:78:8d:d0: 6a:4b:45:84:55:8c:e4:d7:ad:01:3e:72:13:68:ce: d4:a2:71:18:8c:e8:b2:6a:df:6f:a3:8a:06:e7:0c: b2:2c:ca:f6:71:6b:3c:e2:0a:aa:11:88:19:72:5d: bd:aa:ff:26:1e:b6:b3:c5:dd:a0:53:f2:7c:09:68: 41:6c:ca:a1:f7:23:54:dc:f8:cc:d1:7f:12:00:43: dc:00:3c:a6:c1:2b:55:83:7c:bf:90:2c:da:d9:21: 80:29:fe:ba:1d:af:90:41:a1:b7:b4:a0:6a:1e:d8: 31:60:5a:0f:30:98:e3:1b:16:06:79:a7:e4:ef:39: d5:fe:61:0d:08:b9:26:64:95:fe:b5:e8:43:04:d2: 70:b9:c8:7b:b0:36:08:13:d4:66:89:2e:f6:c4:77: 80:5d:ea:d3:19:1a:4d:59:83:72:58:65:5b:7e:e1: 4e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5E:41:9F:89:8F:6A:43:A9:B7:68:37:38:AB:C1:76:20:9E:FB:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/01a58354-6718-38cb-adc5-f6f4e562db01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c5:ec:2a:9d:94:0e:e2:47:05:47:cc:ed:a7:ea:3e:58:e0: b3:77:25:cb:f0:4a:2d:e4:35:3f:96:fd:b8:59:f8:7e:cd:0b: d9:5c:1e:65:af:86:8b:39:39:7b:e2:0e:12:e2:b7:ca:02:4b: 1e:8c:22:81:2b:9d:f2:3c:fe:ef:fe:2a:c6:4e:d8:61:08:b4: 4e:e6:d5:aa:3c:75:56:6a:d4:69:65:c1:12:2a:1a:45:4a:7c: ca:58:33:c8:76:9f:ef:0b:76:5f:b2:cb:33:70:4a:4d:a2:f3: 61:d2:eb:5f:b9:e8:64:28:cf:f9:00:58:2e:2d:7f:8d:eb:c6: 76:64:e6:e1:23:ba:10:76:fb:d5:14:1e:ee:36:bf:21:97:03: 88:fb:55:79:5e:44:62:67:5b:57:79:1b:f1:31:e5:6c:e2:93: 99:a1:29:00:14:60:d9:94:61:50:51:8c:11:78:08:5a:58:5f: c6:58:6a:10:30:b1:df:47:98:e2:0c:18:de:f9:19:af:06:31: b1:2c:5c:25:b3:92:ce:8d:3b:ca:e3:9b:7f:56:84:fa:ff:0d: 99:c4:7a:66:ed:57:85:6c:17:ad:e4:7d:0a:36:25:59:23:bd: f9:61:d5:5d:66:77:de:a7:3d:24:a6:79:0a:a9:cc:3b:be:2a: 5c:64:86:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3th6VL5LD6/a9HMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk NWMwMDYwNTMtMGI5Ni00Y2JkLWI4Y2UtNzA0YjdkOTEwN2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqMzzTkMT24xn4FNuKni3W64iE1KSxFBRaU7 P4GfAGVVxBP5GHg1kR8s9x73dbGi1YwgpYcQXsA0voHqflifQN4v8b8I1vgBlYPO FfEE4HY1Gq4S/MB4jdBqS0WEVYzk160BPnITaM7UonEYjOiyat9vo4oG5wyyLMr2 cWs84gqqEYgZcl29qv8mHrazxd2gU/J8CWhBbMqh9yNU3PjM0X8SAEPcADymwStV g3y/kCza2SGAKf66Ha+QQaG3tKBqHtgxYFoPMJjjGxYGeafk7znV/mENCLkmZJX+ tehDBNJwuch7sDYIE9RmiS72xHeAXerTGRpNWYNyWGVbfuFOlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJeQZ+Jj2pDqbdoNzirwXYgnvs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDFhNTgzNTQtNjcxOC0z OGNiLWFkYzUtZjZmNGU1NjJkYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDF7CqdlA7iRwVHzO2n6j5Y4LN3JcvwSi3kNT+W/bhZ+H7NC9lcHmWv hos5OXviDhLit8oCSx6MIoErnfI8/u/+KsZO2GEItE7m1ao8dVZq1GllwRIqGkVK fMpYM8h2n+8Ldl+yyzNwSk2i82HS61+56GQoz/kAWC4tf43rxnZk5uEjuhB2+9UU Hu42vyGXA4j7VXleRGJnW1d5G/Ex5Wzik5mhKQAUYNmUYVBRjBF4CFpYX8ZYahAw sd9HmOIMGN75Ga8GMbEsXCWzks6NO8rjm39WhPr/DZnEembtV4VsF63kfQo2JVkj vflh1V1md96nPSSmeQqpzDu+Klxkhr8= -----END CERTIFICATE-----Generated at Thu Aug 7 05:11:48 2025 by rpki-client