$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa File: 38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa (raw, json) Hash identifier: zC+l+sg35MnrZI6gtawezI4TA+iQI+KnyFr6R+Z6LQU= Subject key identifier: C5:0B:DE:78:FA:25:45:D6:27:C0:04:0F:46:C7:08:DD:A7:5E:CD:F7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A0C056AD7DF8D2C3FCC547F00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 3360 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6a:d7:df:8d:2c:3f:cc:54:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=7c44cd69-8f49-48d6-91b7-17117bf1fb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:98:d5:57:9a:cf:64:d8:58:f9:38:e4:13: b6:7f:f5:83:49:ba:5d:33:67:d3:04:20:fe:8b:40: 69:11:d1:dc:b7:91:3e:59:44:1b:e9:df:bb:7d:19: 0f:15:18:68:48:6f:c8:35:a9:e0:b6:29:59:6a:c3: c9:19:f0:31:6c:a6:24:be:ed:89:ac:a4:69:7d:42: 9b:3b:ac:f9:d5:d9:b9:a7:fa:f8:30:da:0b:e7:5b: d1:c7:ed:eb:d2:39:24:c9:22:5d:da:34:79:0e:f5: 1a:b8:9d:76:23:5a:41:ed:43:4e:84:1c:d7:34:55: b7:ca:3a:b3:7c:77:63:f5:e8:26:3c:f8:49:23:04: 0f:4c:ca:65:9c:8e:13:46:90:87:c4:b9:f0:ae:f2: f6:5e:7c:40:7c:5a:16:de:59:63:da:fb:5d:65:30: ab:4b:2c:ec:5a:5a:59:0a:bb:0f:90:a3:91:f5:59: a2:65:c7:8a:29:cd:b7:8e:98:5e:67:ef:20:ed:13: 00:e9:95:11:24:d3:b0:fd:aa:fd:16:c0:72:45:4c: d9:be:f9:d2:67:15:c6:35:04:2d:7f:bd:a6:62:21: 0b:f5:1d:85:30:db:3d:1a:bc:dd:c0:33:82:63:66: 05:86:8c:a4:be:da:71:99:6b:82:49:9f:af:22:53: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0B:DE:78:FA:25:45:D6:27:C0:04:0F:46:C7:08:DD:A7:5E:CD:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e5:8a:4b:dd:00:f6:70:4a:40:44:37:68:29:3d:94:93:6e: fa:52:66:0c:0b:d8:d6:1d:5d:8c:16:eb:96:ca:c2:ec:a0:b8: 4d:a5:17:f3:ce:0b:68:b4:52:f9:3a:3d:91:b5:99:36:84:bf: 1b:af:23:8a:1c:68:f5:ae:c1:4f:66:d3:dd:b7:19:d4:ae:0d: 00:db:b7:4a:0e:6e:d4:d0:7d:e6:de:93:42:72:83:19:fb:73: fe:93:1e:9d:29:3d:cb:de:bc:b6:73:86:c3:ca:da:3c:03:65: 9e:0e:ac:ae:d4:a0:a1:30:d5:4f:1d:74:42:c5:68:86:f0:92: f8:ee:f5:32:be:c9:18:e2:c6:cd:ee:01:6f:33:ae:8e:a9:29: c7:43:44:6f:ec:91:0d:ac:0c:9a:b7:cf:ed:80:31:92:61:47: c2:54:de:d9:ae:d9:84:74:1b:59:6c:18:80:44:b4:02:84:84: 1f:64:50:bb:4d:9f:41:5d:ed:7c:7c:5d:66:84:db:45:e9:4f: e0:f4:99:1b:09:c7:c0:d1:cb:9e:92:e3:f1:c8:2b:02:28:ef: 7e:ef:5f:fd:02:71:67:a9:b0:2c:3c:56:9d:bb:32:e2:ec:1e: 28:dc:34:5f:90:d2:8e:47:25:85:9a:7d:a2:f0:49:fb:a8:e9: 9a:30:40:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWrX340sP8xUfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk N2M0NGNkNjktOGY0OS00OGQ2LTkxYjctMTcxMTdiZjFmYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOSY1Veaz2TYWPk45BO2f/WDSbpdM2fTBCD+ i0BpEdHct5E+WUQb6d+7fRkPFRhoSG/INangtilZasPJGfAxbKYkvu2JrKRpfUKb O6z51dm5p/r4MNoL51vRx+3r0jkkySJd2jR5DvUauJ12I1pB7UNOhBzXNFW3yjqz fHdj9egmPPhJIwQPTMplnI4TRpCHxLnwrvL2XnxAfFoW3llj2vtdZTCrSyzsWlpZ CrsPkKOR9VmiZceKKc23jpheZ+8g7RMA6ZURJNOw/ar9FsByRUzZvvnSZxXGNQQt f72mYiEL9R2FMNs9GrzdwDOCY2YFhoykvtpxmWuCSZ+vIlPL6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUL3nj6JUXWJ8AED0bHCN2nXs33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhmNWYyYzQtYzFiMS0z YmU4LWFhNmYtMmVkNzg3MTNiMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLlikvdAPZwSkBEN2gpPZSTbvpSZgwL2NYdXYwW65bKwuyguE2lF/PO C2i0Uvk6PZG1mTaEvxuvI4ocaPWuwU9m0923GdSuDQDbt0oObtTQfebek0Jygxn7 c/6THp0pPcvevLZzhsPK2jwDZZ4OrK7UoKEw1U8ddELFaIbwkvju9TK+yRjixs3u AW8zro6pKcdDRG/skQ2sDJq3z+2AMZJhR8JU3tmu2YR0G1lsGIBEtAKEhB9kULtN n0Fd7Xx8XWaE20XpT+D0mRsJx8DRy56S4/HIKwIo737vX/0CcWepsCw8Vp27MuLs HijcNF+Q0o5HJYWafaLwSfuo6ZowQDI= -----END CERTIFICATE-----Generated at Sun Jun 15 12:27:32 2025 by rpki-client