$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa File: 25c05be1-22a2-319c-ab38-889cdebd39e8.roa (raw, json) Hash identifier: U0fJlgoSy3VtULM9jpqkkA2Xyy0rAy1xCzNBIcPJ7vU= Subject key identifier: F8:FB:45:F1:43:AE:84:8E:E2:C4:5C:9A:AC:21:11:28:48:25:56:5F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A03A5570C25C66AD730881280 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 203 IP address blocks: 20.137.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:57:0c:25:c6:6a:d7:30:88:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=7b4cd581-0947-44fb-ac0c-0b248884e0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:80:8e:6c:8d:74:a7:6d:7d:fa:c0:fb:d5:25: d7:0b:33:81:37:5d:3d:00:26:1a:8b:4d:14:5e:d4: be:c6:b2:30:a8:a8:4b:e3:7c:cc:56:f1:d0:b9:11: 1a:86:38:e9:cf:7d:26:bf:de:48:f7:5a:1e:64:99: 91:1f:3d:95:63:9e:3e:53:d7:69:c2:88:e9:38:fd: d1:a0:0d:69:fe:53:dc:e9:30:e2:b9:f2:dd:b4:39: 46:2c:5c:5c:04:25:66:d7:04:cb:2e:0f:5f:e0:ad: 3a:24:35:4c:03:fd:50:aa:10:24:27:d4:12:a2:f0: 17:2c:15:25:e6:c4:5b:59:73:89:01:8e:b3:48:35: ba:ce:1f:26:63:89:45:e4:d2:da:6b:95:fe:d7:f5: 84:c1:cf:f8:00:74:a6:5d:1d:ff:37:a6:b1:3f:f8: 08:5c:da:a4:cf:16:c7:1c:6c:37:00:ed:27:d3:25: 83:11:ad:9f:ac:ad:10:3e:c4:b6:90:e1:d3:27:5a: 4a:fb:d8:ea:58:27:72:a8:65:af:2f:42:96:28:1d: de:86:5d:a9:58:90:64:c0:29:94:8c:4a:aa:e5:2e: 56:46:96:75:b8:dd:16:46:45:2e:35:b9:e8:c9:36: ab:b0:f2:c3:7c:9e:2e:31:17:a5:fb:cf:b2:44:d2: 4e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FB:45:F1:43:AE:84:8E:E2:C4:5C:9A:AC:21:11:28:48:25:56:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ca:93:e4:e5:7e:74:7f:08:ee:5f:ee:74:2e:fc:cd:4e:4b: ed:4a:53:c2:d7:e0:74:da:98:97:84:28:55:05:49:6c:23:25: d4:97:94:2a:ee:27:80:4f:97:b3:f0:53:2d:36:8b:69:6c:cd: 10:00:e8:00:b7:94:96:cc:16:52:46:eb:11:5e:e6:b7:76:1c: 55:d8:67:81:b2:f7:46:95:71:60:37:dc:bb:ef:04:03:d7:54: 3b:35:f9:ad:3a:04:39:14:d8:9c:cd:26:14:5b:d0:3e:a9:89: 82:36:b6:28:c9:17:90:d7:5e:8a:d2:77:1f:87:24:69:7c:5c: d2:fe:35:e1:48:33:5f:ec:6e:32:2d:7e:90:53:25:02:7d:a1: 0e:3a:19:5c:0e:69:63:75:18:65:3a:e9:46:19:af:91:0b:3d: e7:8b:08:48:eb:6b:51:db:ea:1d:db:d8:43:c3:e4:20:00:62: 13:6e:41:89:d0:e0:3b:23:61:ad:3b:92:39:56:97:48:6e:8b: 6d:d8:c0:44:be:fe:3a:db:4c:a5:1f:04:3c:7c:f0:e9:b5:3b: d4:e1:ca:a9:1f:86:fe:4c:97:6f:01:c8:be:2b:63:1f:03:61: 8f:1b:2d:7f:ba:2e:82:63:e2:d8:de:8d:60:e7:fb:f9:3b:a1: b0:9d:42:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVcMJcZq1zCIEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk N2I0Y2Q1ODEtMDk0Ny00NGZiLWFjMGMtMGIyNDg4ODRlMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oCObI10p219+sD71SXXCzOBN109ACYai00U XtS+xrIwqKhL43zMVvHQuREahjjpz30mv95I91oeZJmRHz2VY54+U9dpwojpOP3R oA1p/lPc6TDiufLdtDlGLFxcBCVm1wTLLg9f4K06JDVMA/1QqhAkJ9QSovAXLBUl 5sRbWXOJAY6zSDW6zh8mY4lF5NLaa5X+1/WEwc/4AHSmXR3/N6axP/gIXNqkzxbH HGw3AO0n0yWDEa2frK0QPsS2kOHTJ1pK+9jqWCdyqGWvL0KWKB3ehl2pWJBkwCmU jEqq5S5WRpZ1uN0WRkUuNbnoyTarsPLDfJ4uMRel+8+yRNJOUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj7RfFDroSO4sRcmqwhEShIJVZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjVjMDViZTEtMjJhMi0z MTljLWFiMzgtODg5Y2RlYmQzOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHKk+TlfnR/CO5f7nQu/M1OS+1KU8LX4HTamJeEKFUFSWwjJdSXlCru J4BPl7PwUy02i2lszRAA6AC3lJbMFlJG6xFe5rd2HFXYZ4Gy90aVcWA33LvvBAPX VDs1+a06BDkU2JzNJhRb0D6piYI2tijJF5DXXorSdx+HJGl8XNL+NeFIM1/sbjIt fpBTJQJ9oQ46GVwOaWN1GGU66UYZr5ELPeeLCEjra1Hb6h3b2EPD5CAAYhNuQYnQ 4DsjYa07kjlWl0hui23YwES+/jrbTKUfBDx88Om1O9Thyqkfhv5Ml28ByL4rYx8D YY8bLX+6LoJj4tjejWDn+/k7obCdQv8= -----END CERTIFICATE-----Generated at Sun Jun 15 12:25:18 2025 by rpki-client