$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa File: 5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa (raw, json) Hash identifier: XUW/FFnOOGvzth2i5hhApfUvIXvFB2La+wammpQPV4Y= Subject key identifier: E6:5F:5C:DA:43:38:15:14:DA:5F:20:76:DB:6B:1A:15:73:79:D3:D9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A8C70E8C7AE50E97584ECF6C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 203 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e8:c7:ae:50:e9:75:84:ec:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=51be830a-f13b-49c9-8b25-51cfc0d58499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:fd:5e:5f:2d:40:46:fa:b7:93:f0:62:75: ec:03:6e:e9:c7:14:d5:91:b0:35:f0:15:0f:c4:35: 88:63:08:31:c9:85:06:29:40:c7:bf:9a:8e:f9:f0: 36:6c:a8:99:5f:20:e4:09:59:e1:ec:fe:35:d8:24: ad:48:e7:05:9b:ac:8d:3b:c5:cd:92:b2:5f:48:e9: d6:db:50:ec:5a:b0:6c:c3:e8:70:94:aa:8f:a6:a3: 40:22:f6:4a:78:b4:cc:d5:10:01:3e:dc:2a:35:34: 9a:a4:94:a0:e6:4b:17:a3:e4:5d:fb:83:06:a6:31: c3:10:82:d3:8c:eb:a4:2e:59:65:2a:1f:ca:9f:55: 2f:86:cc:2f:6f:c2:94:4b:ad:7d:2f:0e:b9:98:0e: cc:22:00:87:30:6f:13:ed:95:7d:d3:15:23:1c:79: db:8c:ef:61:73:64:a9:eb:13:6f:b3:05:1a:76:5e: 66:89:9b:1c:4b:63:c9:2c:2e:f8:71:4d:6c:9f:eb: 88:c2:64:9d:98:08:fe:34:7c:6d:fe:32:86:e2:41: 00:9a:c4:31:e7:35:cf:a9:73:72:92:9d:92:09:20: 84:11:a2:c1:36:18:a2:d9:6c:8d:ba:17:a9:38:13: 28:60:58:86:b8:e1:e8:a7:87:13:f0:f8:89:7d:fd: 8a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5F:5C:DA:43:38:15:14:DA:5F:20:76:DB:6B:1A:15:73:79:D3:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:37:11:c6:0b:cb:eb:c0:ff:d5:48:0f:aa:55:fe:97:5d:e8: d3:fe:e7:16:29:f5:fb:18:07:75:f4:4b:7b:e4:68:47:57:b6: 06:0a:55:dd:ed:40:ee:e4:8d:a5:3a:07:13:5f:53:e7:30:a1: 60:a0:cb:cc:8a:3c:d9:64:95:73:76:4e:43:d1:3a:f6:26:df: ae:6a:45:98:77:e6:a4:fc:fb:9d:e0:bd:91:e0:64:73:cd:4b: 09:4b:e0:5b:99:a8:3a:43:20:5c:4e:b6:c6:7c:33:c4:1c:b4: e0:9f:e4:39:be:a3:be:54:ab:86:24:69:5d:ab:a6:17:fb:0e: c8:76:89:e7:91:cc:8d:5d:04:13:99:40:5a:a8:3e:7b:16:ce: 32:d2:f8:3a:f8:86:be:fb:30:d6:02:99:0b:b4:36:07:d4:2b: f3:8e:7b:44:28:8c:0f:7c:9c:71:81:26:ca:66:cd:05:80:07: ef:66:82:18:18:11:d2:8a:4e:a1:1e:81:07:a9:fd:14:8b:c4: 82:8d:4a:ad:da:b0:c9:84:83:17:1b:1f:46:4d:84:e7:45:26: 70:a6:dc:13:5a:6a:10:4f:55:f1:9b:12:90:7c:1a:c0:1b:77: 3e:ff:20:83:ff:de:d4:bb:86:d1:39:5b:dc:50:67:d8:3c:f6: ac:bd:ce:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcOjHrlDpdYTs9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NTFiZTgzMGEtZjEzYi00OWM5LThiMjUtNTFjZmMwZDU4NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh/9Xl8tQEb6t5PwYnXsA27pxxTVkbA18BUP xDWIYwgxyYUGKUDHv5qO+fA2bKiZXyDkCVnh7P412CStSOcFm6yNO8XNkrJfSOnW 21DsWrBsw+hwlKqPpqNAIvZKeLTM1RABPtwqNTSapJSg5ksXo+Rd+4MGpjHDEILT jOukLlllKh/Kn1Uvhswvb8KUS619Lw65mA7MIgCHMG8T7ZV90xUjHHnbjO9hc2Sp 6xNvswUadl5miZscS2PJLC74cU1sn+uIwmSdmAj+NHxt/jKG4kEAmsQx5zXPqXNy kp2SCSCEEaLBNhii2WyNuhepOBMoYFiGuOHop4cT8PiJff2KTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZfXNpDOBUU2l8gdttrGhVzedPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWEyYTZkMzEtOGNkMC0z NTIxLWJlYjEtZjY5YzA0NmNiMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU3EcYLy+vA/9VID6pV/pdd6NP+5xYp9fsYB3X0S3vkaEdXtgYKVd3t QO7kjaU6BxNfU+cwoWCgy8yKPNlklXN2TkPROvYm365qRZh35qT8+53gvZHgZHPN SwlL4FuZqDpDIFxOtsZ8M8QctOCf5Dm+o75Uq4YkaV2rphf7Dsh2ieeRzI1dBBOZ QFqoPnsWzjLS+Dr4hr77MNYCmQu0NgfUK/OOe0QojA98nHGBJspmzQWAB+9mghgY EdKKTqEegQep/RSLxIKNSq3asMmEgxcbH0ZNhOdFJnCm3BNaahBPVfGbEpB8GsAb dz7/IIP/3tS7htE5W9xQZ9g89qy9zkw= -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:39 2025 by rpki-client