$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4126ee82-288b-3022-99fa-acba46d2e16d.roa File: 4126ee82-288b-3022-99fa-acba46d2e16d.roa (raw, json) Hash identifier: oZnDTsbOh819VetZVfH6AUTa6FtVenCpitQRuKV879k= Subject key identifier: F8:94:FA:60:83:CC:ED:83:0F:97:E1:29:2A:59:8F:85:2F:36:B4:22 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB4EB7DBA6A67B87DBD99A780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4126ee82-288b-3022-99fa-acba46d2e16d.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 3360 IP address blocks: 20.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:7d:ba:6a:67:b8:7d:bd:99:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=6374f880-2578-4b3d-8c9e-f4784b1ddbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7c:9c:c1:7f:50:b1:0f:67:8b:1b:9d:47:97: b7:6d:73:4f:45:90:6f:b9:fb:41:5f:75:a8:4d:f1: 20:20:f9:f6:58:5c:bd:c3:dc:ae:7a:81:ca:ab:39: 7f:b9:1d:bb:46:17:86:aa:ed:d0:12:ea:95:26:aa: a0:f0:59:94:6c:fd:88:6b:3d:08:02:51:4b:1d:c7: 24:81:c7:7f:35:b7:e1:7a:69:d3:e3:8f:f4:79:23: 12:9e:7f:4e:2e:51:63:4f:6c:87:69:83:fa:c0:8d: c5:c3:1c:fb:d3:84:25:a0:a2:e9:73:20:5f:c2:8f: 74:3e:eb:3e:96:e6:95:28:06:d3:a4:12:8c:69:01: de:70:25:d9:8f:18:05:20:2d:f5:40:c1:7d:b7:b6: 71:a2:7d:a2:bb:3d:ab:31:e8:90:f4:5f:d7:f9:05: b0:cb:ff:33:56:8f:b6:a7:36:ef:4b:90:24:1e:49: eb:a6:51:d8:dd:b3:09:55:33:7e:21:7b:76:34:0d: 81:be:af:0d:fa:bb:a3:d3:cf:33:6f:9c:4c:79:a8: fb:ba:91:0d:72:a8:fa:a2:bc:72:71:e0:29:65:36: db:4b:cc:79:ee:47:39:e5:e4:5c:bc:28:89:4e:2d: 1c:ed:de:2f:fa:9c:bb:bd:c4:03:1c:ab:e6:b7:38: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:94:FA:60:83:CC:ED:83:0F:97:E1:29:2A:59:8F:85:2F:36:B4:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4126ee82-288b-3022-99fa-acba46d2e16d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:29:4b:cf:70:87:a9:91:d9:bd:b5:29:e0:ff:5a:55:ac:e9: d1:88:51:21:a7:a6:c7:c6:41:ef:2d:ea:cd:58:2d:6a:2c:42: 98:ef:85:a4:6f:5a:bf:7b:ee:81:0f:c4:f1:56:f8:e3:33:bb: 2d:41:5c:22:3f:54:2e:31:18:0c:1a:04:01:cd:1f:d3:08:af: c1:fc:20:8a:5a:f2:ed:29:69:54:b1:46:98:39:8f:15:e0:84: a0:50:2c:53:6e:6e:47:0a:0c:8b:25:d8:9d:db:74:c1:68:c1: 7b:31:1d:9e:2e:b0:29:e5:53:d9:04:23:d2:ac:62:73:27:df: a4:bd:3a:d7:6d:68:ce:74:85:68:9c:af:f4:0f:38:1c:9f:24: 72:40:04:96:57:52:31:f6:9a:f3:7e:32:ac:ac:f9:6d:6b:13: 0b:d7:4e:3e:5e:30:56:33:27:eb:6b:f5:a6:47:91:cd:a0:1d: 05:cf:61:ec:22:af:8c:15:a9:38:09:35:ac:7e:86:44:ff:4b: 08:a5:34:40:cd:de:d7:47:7d:a3:cd:d7:df:8b:83:49:dd:b3: 4a:a2:3d:20:a0:d4:16:76:71:4b:ed:ad:ed:9c:54:fc:18:b9: 33:0e:38:ba:f1:07:73:d9:18:68:5e:97:7d:9d:2f:33:c7:7a: 48:ab:a6:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq06326ame4fb2Zp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NjM3NGY4ODAtMjU3OC00YjNkLThjOWUtZjQ3ODRiMWRkYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHycwX9QsQ9nixudR5e3bXNPRZBvuftBX3Wo TfEgIPn2WFy9w9yueoHKqzl/uR27RheGqu3QEuqVJqqg8FmUbP2Iaz0IAlFLHcck gcd/NbfhemnT44/0eSMSnn9OLlFjT2yHaYP6wI3Fwxz704QloKLpcyBfwo90Pus+ luaVKAbTpBKMaQHecCXZjxgFIC31QMF9t7Zxon2iuz2rMeiQ9F/X+QWwy/8zVo+2 pzbvS5AkHknrplHY3bMJVTN+IXt2NA2Bvq8N+ruj088zb5xMeaj7upENcqj6orxy ceApZTbbS8x57kc55eRcvCiJTi0c7d4v+py7vcQDHKvmtzh1HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiU+mCDzO2DD5fhKSpZj4UvNrQiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDEyNmVlODItMjg4Yi0z MDIyLTk5ZmEtYWNiYTQ2ZDJlMTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHopS89wh6mR2b21KeD/WlWs6dGIUSGnpsfGQe8t6s1YLWosQpjvhaRv Wr977oEPxPFW+OMzuy1BXCI/VC4xGAwaBAHNH9MIr8H8IIpa8u0paVSxRpg5jxXg hKBQLFNubkcKDIsl2J3bdMFowXsxHZ4usCnlU9kEI9KsYnMn36S9OtdtaM50hWic r/QPOByfJHJABJZXUjH2mvN+Mqys+W1rEwvXTj5eMFYzJ+tr9aZHkc2gHQXPYewi r4wVqTgJNax+hkT/SwilNEDN3tdHfaPN19+Lg0nds0qiPSCg1BZ2cUvtre2cVPwY uTMOOLrxB3PZGGhel32dLzPHekirpjE= -----END CERTIFICATE-----Generated at Thu Aug 7 02:01:25 2025 by rpki-client