$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa File: 33db6407-ff15-3683-8991-2de945a25738.roa (raw, json) Hash identifier: Bmx+GHLOZpxsx0XlFaWfC4H6lcafMSUTIHD9bVcAEY4= Subject key identifier: 89:B2:CA:60:5B:D5:C3:5C:E8:AD:15:70:B9:BC:2F:70:68:4E:B5:29 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900BA0A2180512772159000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 203 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:ba:0a:21:80:51:27:72:15:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=a2893141-6c49-4e40-ba8a-ae9c27dfa00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:04:30:3b:93:4d:24:1b:6a:4d:8d:4f:b2: 23:1a:b1:04:92:a8:1a:6a:dd:1c:e7:55:3d:60:c6: 8d:51:71:7e:6d:4b:ef:f0:a1:0f:a6:d3:cc:2a:63: 89:b8:ea:15:0b:38:90:8b:43:93:7d:a2:75:b6:a7: e1:64:ad:d3:a7:67:5b:98:72:81:18:73:c6:43:6a: 24:95:dd:b5:5e:4f:8c:ed:20:99:69:f8:e0:de:8b: 36:65:31:22:b1:1c:d4:f0:68:08:31:02:cf:7f:29: f2:70:53:c9:22:71:13:d4:49:2f:b6:dd:17:d6:93: a3:44:65:02:13:92:1a:64:19:d1:c6:a1:76:3b:4a: bc:0c:16:63:45:8c:e5:12:49:26:56:71:37:53:39: da:e9:2f:31:3e:5d:5a:98:ba:f3:f1:e6:53:f4:90: 33:8f:d7:a8:e0:78:0c:d5:2d:ed:fb:24:1f:b6:0f: b1:f4:a0:87:80:95:c7:19:c2:d8:c6:9d:22:83:d1: 0e:3c:44:5d:d2:a2:03:a0:b5:17:2c:2d:52:ce:e1: 1a:02:e5:c8:75:fb:eb:f2:34:d2:f6:b0:6f:35:e3: 02:ab:0b:87:a6:4f:47:36:90:fd:72:b2:23:68:d5: 76:7c:10:b9:f5:4e:70:4c:b3:06:35:4a:fc:44:0d: 65:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B2:CA:60:5B:D5:C3:5C:E8:AD:15:70:B9:BC:2F:70:68:4E:B5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:37:27:44:ca:04:e6:17:75:e5:bb:02:56:2a:cc:14:0e:6f: ae:b9:e7:fc:9c:66:fd:b1:8e:93:99:97:ae:b7:9e:0c:72:6a: 47:79:2d:ec:a3:db:f4:30:1b:ce:73:3c:aa:98:34:c8:aa:66: e3:2e:01:e0:ae:bc:1d:e3:7c:5f:e6:10:8c:8e:a1:df:d2:a1: f0:2a:78:b0:a8:a4:6b:31:20:13:16:07:88:a0:7b:98:dc:1e: e6:09:8a:2e:dd:ac:76:9e:2b:2a:12:45:76:7e:01:70:ef:e8: ad:7a:a7:ee:7c:46:b6:24:e6:c4:6c:42:9e:81:e2:f9:e8:c7: c9:4a:86:9e:e1:44:e8:ec:76:ed:96:d3:c2:0d:38:ea:b9:1e: a3:bd:a3:96:4c:99:0a:26:41:f2:bc:62:9a:32:66:da:c5:8e: 33:35:2a:68:ee:1d:b6:a9:63:a8:f1:d8:07:39:f0:f9:4f:d5: f0:b4:5d:48:cc:1d:4f:eb:56:d8:54:f7:1d:cd:3e:6b:7e:5a: a8:86:a2:35:d5:d4:34:23:07:18:93:62:1a:fc:72:1e:f0:38: 76:16:2e:05:bf:43:1c:02:b9:7d:46:7e:93:8e:86:f5:54:3a: d5:09:31:08:71:6c:ad:0e:cf:ba:b7:45:be:9e:13:e6:02:74: 0f:c5:0f:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALoKIYBRJ3IVkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YTI4OTMxNDEtNmM0OS00ZTQwLWJhOGEtYWU5YzI3ZGZhMDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIcEMDuTTSQbak2NT7IjGrEEkqgaat0c51U9 YMaNUXF+bUvv8KEPptPMKmOJuOoVCziQi0OTfaJ1tqfhZK3Tp2dbmHKBGHPGQ2ok ld21Xk+M7SCZafjg3os2ZTEisRzU8GgIMQLPfynycFPJInET1Ekvtt0X1pOjRGUC E5IaZBnRxqF2O0q8DBZjRYzlEkkmVnE3Uzna6S8xPl1amLrz8eZT9JAzj9eo4HgM 1S3t+yQftg+x9KCHgJXHGcLYxp0ig9EOPERd0qIDoLUXLC1SzuEaAuXIdfvr8jTS 9rBvNeMCqwuHpk9HNpD9crIjaNV2fBC59U5wTLMGNUr8RA1lFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImyymBb1cNc6K0VcLm8L3BoTrUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzNkYjY0MDctZmYxNS0z NjgzLTg5OTEtMmRlOTQ1YTI1NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD83J0TKBOYXdeW7AlYqzBQOb6655/ycZv2xjpOZl663ngxyakd5Leyj 2/QwG85zPKqYNMiqZuMuAeCuvB3jfF/mEIyOod/SofAqeLCopGsxIBMWB4ige5jc HuYJii7drHaeKyoSRXZ+AXDv6K16p+58RrYk5sRsQp6B4vnox8lKhp7hROjsdu2W 08INOOq5HqO9o5ZMmQomQfK8YpoyZtrFjjM1KmjuHbapY6jx2Ac58PlP1fC0XUjM HU/rVthU9x3NPmt+WqiGojXV1DQjBxiTYhr8ch7wOHYWLgW/QxwCuX1GfpOOhvVU OtUJMQhxbK0Oz7q3Rb6eE+YCdA/FD4A= -----END CERTIFICATE-----Generated at Thu Aug 7 04:33:41 2025 by rpki-client