$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0dd11bd1-0dfd-345b-9d68-4dd026605e40.roa File: 0dd11bd1-0dfd-345b-9d68-4dd026605e40.roa (raw, json) Hash identifier: /scNcLhPzkCq2SLGHJp79GrhJ4pp7XmGxcvASF/hyY0= Subject key identifier: D5:94:30:92:A6:F4:2C:06:5C:9F:01:33:9C:5C:59:AA:2F:01:77:78 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A03A556BC716A3C58AEB3F4C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0dd11bd1-0dfd-345b-9d68-4dd026605e40.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 202 IP address blocks: 20.137.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:56:bc:71:6a:3c:58:ae:b3:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=9b690868-7989-46db-9526-659be99439b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:92:53:21:c7:7f:3a:dd:cd:2d:fa:2f:c8:06: 1d:54:3d:2d:7a:12:92:13:71:da:e1:8c:43:af:dc: 5b:c3:e8:c1:ae:cb:54:a3:91:82:94:4f:47:c6:83: 96:a8:87:6f:6d:f9:eb:f2:c8:31:f1:29:3c:80:2b: 7f:21:73:76:f4:3c:e9:16:53:18:da:57:78:d8:8b: 7d:88:b0:fb:77:ed:1a:14:c4:16:9f:81:bb:53:8e: b8:0f:82:4b:df:1c:97:a0:3b:fc:fd:a6:78:73:80: d4:99:d8:3b:5c:5a:57:18:3b:7a:99:9e:f3:05:40: b6:e7:34:4f:af:df:69:ba:a2:e8:68:72:61:27:15: a7:5d:f9:78:32:92:05:e8:ba:11:2e:62:04:62:44: af:1b:ed:a8:a7:14:e8:76:62:b1:ec:d3:77:50:a2: d8:1f:80:9f:06:bb:2e:5b:a8:b4:35:d2:20:a9:32: ac:56:fc:d9:b7:61:a3:46:c2:1d:8d:f9:f8:9b:db: 21:ac:7b:13:87:a3:b9:f0:44:48:04:2f:9e:a2:6f: 5a:27:34:6c:75:fe:88:c8:fa:4d:85:d7:42:66:d6: 28:7a:ff:75:64:df:3c:ff:a5:6e:40:f0:dc:ff:ee: a7:ad:2b:b7:66:95:dd:13:88:77:99:73:77:2b:5d: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:94:30:92:A6:F4:2C:06:5C:9F:01:33:9C:5C:59:AA:2F:01:77:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0dd11bd1-0dfd-345b-9d68-4dd026605e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fc:7c:78:e5:f9:51:88:92:8d:18:89:53:d1:72:91:7e:82: 40:78:6f:3b:61:b6:b0:4a:11:4c:d5:52:af:91:82:e2:1d:be: 41:76:e3:a5:32:26:e9:0b:e9:9f:41:ea:9c:8e:61:83:44:86: 79:64:2a:26:4c:c2:ae:f3:50:17:4c:a6:fa:03:b9:f3:59:ad: 86:f3:dc:34:4f:ce:61:04:10:11:c9:80:88:93:55:55:02:dc: fb:ee:1e:82:0d:00:86:06:e6:a5:cf:36:a1:21:c9:50:95:70: fc:7a:78:ac:c3:57:ae:96:29:e7:2e:ba:38:10:5d:06:e8:99: 80:e7:60:a2:22:cb:98:48:41:f7:11:27:e8:f7:86:56:5a:a4: dc:83:8a:e4:f7:31:22:22:47:bf:5d:b7:5e:38:1f:74:7f:fc: f2:7d:a8:bb:62:d7:c3:df:02:06:dc:0c:e0:46:89:99:19:4c: 7e:19:f1:6d:e6:38:1f:14:df:15:2f:e4:05:f7:92:d9:ba:20: 5b:a4:39:65:88:ae:9c:02:f3:7b:e4:3f:0e:af:37:7d:c3:24: fa:c3:fd:50:1e:d6:54:cc:1f:f6:c9:d0:bf:ba:58:ac:4f:f1: 94:22:d5:e6:b7:e2:6b:b5:99:33:20:e0:d9:83:c0:0c:54:70: b2:97:11:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVa8cWo8WK6z9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk OWI2OTA4NjgtNzk4OS00NmRiLTk1MjYtNjU5YmU5OTQzOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZJTIcd/Ot3NLfovyAYdVD0tehKSE3Ha4YxD r9xbw+jBrstUo5GClE9HxoOWqIdvbfnr8sgx8Sk8gCt/IXN29DzpFlMY2ld42It9 iLD7d+0aFMQWn4G7U464D4JL3xyXoDv8/aZ4c4DUmdg7XFpXGDt6mZ7zBUC25zRP r99puqLoaHJhJxWnXfl4MpIF6LoRLmIEYkSvG+2opxTodmKx7NN3UKLYH4CfBrsu W6i0NdIgqTKsVvzZt2GjRsIdjfn4m9shrHsTh6O58ERIBC+eom9aJzRsdf6IyPpN hddCZtYoev91ZN88/6VuQPDc/+6nrSu3ZpXdE4h3mXN3K10KRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWUMJKm9CwGXJ8BM5xcWaovAXd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGRkMTFiZDEtMGRmZC0z NDViLTlkNjgtNGRkMDI2NjA1ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz8fHjl+VGIko0YiVPRcpF+gkB4bzthtrBKEUzVUq+RguIdvkF246Uy JukL6Z9B6pyOYYNEhnlkKiZMwq7zUBdMpvoDufNZrYbz3DRPzmEEEBHJgIiTVVUC 3PvuHoINAIYG5qXPNqEhyVCVcPx6eKzDV66WKecuujgQXQbomYDnYKIiy5hIQfcR J+j3hlZapNyDiuT3MSIiR79dt144H3R//PJ9qLti18PfAgbcDOBGiZkZTH4Z8W3m OB8U3xUv5AX3ktm6IFukOWWIrpwC83vkPw6vN33DJPrD/VAe1lTMH/bJ0L+6WKxP 8ZQi1ea34mu1mTMg4NmDwAxUcLKXEWo= -----END CERTIFICATE-----Generated at Mon Jun 16 09:58:46 2025 by rpki-client