$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa File: 0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa (raw, json) Hash identifier: GW9lP0rN7j2/PLHpGrpJuyryzS+mMHIKYPYaZT+Hu7Y= Subject key identifier: 79:8A:27:EE:18:02:7C:B1:F8:EC:1B:B4:93:B3:87:F4:BC:CC:92:60 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D6FA47E657AC3AD93CD07C80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa Signing time: Tue 13 May 2025 13:01:02 +0000 ROA not before: Tue 13 May 2025 13:01:02 +0000 ROA not after: Mon 11 Aug 2025 13:01:02 +0000 asID: 3356 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:fa:47:e6:57:ac:3a:d9:3c:d0:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 13 13:01:02 2025 GMT Not After : Aug 11 13:01:02 2025 GMT Subject: CN=ce97e0d6-4c7f-47d5-9ee9-17f4254a858e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d3:2e:6f:e0:64:ea:6d:e2:a2:93:1a:50:51: a5:e9:fd:c0:3b:a1:2c:32:96:14:71:fd:2d:af:37: d8:ce:3c:3c:ab:16:79:56:d1:68:c6:a1:08:8a:f2: 63:4f:2d:5f:4f:80:fc:9c:f1:17:f2:79:e1:c5:37: a6:b0:9b:db:37:2d:a1:b9:50:f7:e1:8e:8f:71:d4: 86:a1:cd:59:0f:94:f8:b7:b7:d7:68:94:a0:32:72: 33:d4:42:a2:ed:40:d4:b2:d7:54:53:68:54:44:df: 62:57:40:ed:e3:28:dd:31:b1:bb:dc:53:a8:92:81: f1:3f:79:b0:65:60:72:5f:94:f2:11:4c:f0:18:60: 7d:1d:4b:28:27:5a:dc:33:8b:53:d5:ba:27:87:71: 20:d4:17:4e:55:66:19:37:d4:4d:85:57:e9:3c:3a: 1f:05:c3:7f:77:8c:5a:b6:e1:68:88:e2:24:b7:dd: ca:49:af:da:54:2b:b8:6f:eb:52:b3:df:b2:d8:5b: 81:29:cd:29:2a:d3:b6:b6:cd:fb:99:4f:1b:d2:5b: 74:38:d8:e8:38:4b:73:4c:1a:02:98:5f:b6:08:a3: 47:89:0e:d9:4f:10:17:eb:1e:ac:58:90:3c:af:3c: 71:a1:c4:04:fd:99:a0:4d:bc:27:09:69:e1:7a:d2: 27:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8A:27:EE:18:02:7C:B1:F8:EC:1B:B4:93:B3:87:F4:BC:CC:92:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d2:fd:48:9d:f6:3d:bb:ee:87:c3:a7:3b:cb:28:e3:03:3e: d5:85:d0:89:7f:d5:07:97:31:e4:d3:9b:82:dd:20:52:db:c3: 46:49:93:58:45:81:74:15:fc:a7:20:c7:54:49:87:0b:ec:48: 1e:a1:5f:9e:7b:c2:82:f7:6b:38:8c:0b:2c:8e:b1:41:ec:ad: 8a:aa:25:1f:36:53:62:7f:61:ff:0e:79:d2:bd:f2:c6:4f:e2: d6:97:8e:aa:c0:52:46:8d:8c:8b:4f:63:29:c8:3d:55:9f:28: 56:56:d8:6b:1c:69:64:67:e9:b6:ae:c2:2e:8c:71:1a:de:21: 18:14:71:16:6d:4c:b4:f3:7c:d2:3f:73:2d:72:45:dc:7f:d7: 7b:e5:76:be:c1:0d:18:39:b7:53:b9:8e:73:ba:cd:f0:16:2a: 9e:f9:66:a7:8d:b8:54:da:47:2c:08:9c:3b:e1:aa:0c:ad:96: 2e:8f:e7:26:b3:f2:11:0c:3a:dd:50:9a:73:60:ea:f3:c8:e7: 2a:5d:6e:81:68:46:02:b5:da:11:93:35:ff:ea:3e:22:d5:47: a7:a5:76:5f:85:f5:0e:cf:3c:13:20:38:be:a0:93:8b:fb:7a: 9a:73:35:4d:04:f4:d6:0b:37:e3:1b:47:85:3d:ef:61:0e:54: 7c:af:3f:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW+kfmV6w62TzQfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk Y2U5N2UwZDYtNGM3Zi00N2Q1LTllZTktMTdmNDI1NGE4NThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdMub+Bk6m3iopMaUFGl6f3AO6EsMpYUcf0t rzfYzjw8qxZ5VtFoxqEIivJjTy1fT4D8nPEX8nnhxTemsJvbNy2huVD34Y6PcdSG oc1ZD5T4t7fXaJSgMnIz1EKi7UDUstdUU2hURN9iV0Dt4yjdMbG73FOokoHxP3mw ZWByX5TyEUzwGGB9HUsoJ1rcM4tT1bonh3Eg1BdOVWYZN9RNhVfpPDofBcN/d4xa tuFoiOIkt93KSa/aVCu4b+tSs9+y2FuBKc0pKtO2ts37mU8b0lt0ONjoOEtzTBoC mF+2CKNHiQ7ZTxAX6x6sWJA8rzxxocQE/ZmgTbwnCWnhetInywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmKJ+4YAnyx+OwbtJOzh/S8zJJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGFjMGE5ZWYtNjY1ZS0z MjRjLWI3MGQtZTU2ZjViZDNhOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjS/Uid9j277ofDpzvLKOMDPtWF0Il/1QeXMeTTm4LdIFLbw0ZJk1hF gXQV/Kcgx1RJhwvsSB6hX557woL3aziMCyyOsUHsrYqqJR82U2J/Yf8OedK98sZP 4taXjqrAUkaNjItPYynIPVWfKFZW2GscaWRn6bauwi6McRreIRgUcRZtTLTzfNI/ cy1yRdx/13vldr7BDRg5t1O5jnO6zfAWKp75ZqeNuFTaRywInDvhqgytli6P5yaz 8hEMOt1QmnNg6vPI5ypdboFoRgK12hGTNf/qPiLVR6eldl+F9Q7PPBMgOL6gk4v7 eppzNU0E9NYLN+MbR4U972EOVHyvP14= -----END CERTIFICATE-----Generated at Sun Jun 15 19:08:53 2025 by rpki-client