$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa File: 5d2179de-2db2-31e0-91ae-22d99860f145.roa (raw, json) Hash identifier: 3MsOOsdhHpr/YKhw2XxTAypUYmsVA+ZAjyeOmArVKYY= Subject key identifier: 16:E8:7F:40:5F:35:45:89:56:37:DD:4D:F0:0A:94:DA:53:9C:62:7C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900B98AB66A586A0FD85A00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 3360 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:b9:8a:b6:6a:58:6a:0f:d8:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=51ec6884-fb7a-4dba-9588-da993983de90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:74:b3:72:eb:a3:79:c4:91:81:63:fe:25: 6b:6f:96:c1:e6:67:e5:e9:5e:95:39:87:27:7a:7e: d3:29:e6:86:71:93:d0:be:75:9d:5c:80:f4:c6:ad: 68:8d:d3:12:14:ba:e7:6b:fb:f4:41:de:b0:fc:85: 1f:68:fb:57:01:32:61:ab:34:1d:4d:de:77:c2:bc: 0d:2e:ee:2a:8b:28:cb:85:db:3c:09:a6:89:1a:84: 3c:50:5a:ac:ee:f6:62:23:3e:32:51:32:dc:ea:fb: ed:6e:2e:aa:38:fe:c4:ad:88:3a:c9:e7:5e:52:2b: 44:6f:9d:05:54:a2:30:58:a8:f7:c9:8b:6e:0e:47: af:f0:cd:75:fe:c7:83:cf:ad:8a:f9:55:b3:7f:c1: 7c:fd:1c:b6:d2:59:fa:82:7e:b6:76:0d:df:3f:cb: 3c:1d:70:12:03:ff:fb:bd:90:0d:0b:52:b3:10:5d: 6f:d9:41:10:26:35:c3:80:0d:42:df:48:8b:26:78: 26:57:2d:c2:d6:58:81:98:ca:9f:62:2e:81:2c:ff: 43:43:69:53:68:61:22:33:9b:44:5c:1d:16:5e:0f: 09:1e:7b:f0:c6:b2:79:30:e6:0c:6c:1c:9d:47:80: 1d:f2:db:2d:16:73:bb:57:c6:b4:c7:5c:06:82:3f: ab:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E8:7F:40:5F:35:45:89:56:37:DD:4D:F0:0A:94:DA:53:9C:62:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b5:e7:42:4e:77:d8:32:63:1c:4b:7e:f2:4e:1c:b7:a1:1b: f1:f9:3f:3b:ff:01:4b:89:bc:77:af:f2:eb:1a:d8:f6:1b:ba: 26:cc:0d:53:1f:d6:c9:61:fc:94:01:f8:e4:10:54:f5:fb:87: 52:b6:81:5f:f2:5a:3c:b8:4d:63:c4:24:28:1c:4d:89:a9:ea: 42:4e:e9:09:aa:bd:fe:36:84:7c:8d:2d:8f:96:dd:38:33:b2: 40:82:d9:ae:f1:00:95:cf:b0:be:2f:57:3b:4f:0b:13:90:e0: 3e:e1:ae:ca:ab:b0:6d:af:59:2e:61:4e:4b:eb:62:96:13:07: 60:e8:a9:48:0c:d8:82:b1:89:01:f7:c8:2f:26:28:92:a4:50: cf:9a:85:8b:af:f0:b3:3d:3b:74:9f:96:1f:87:05:a2:c2:77: f7:f0:f5:84:49:bb:82:21:7b:10:34:84:4a:cc:5c:90:bb:b8: 53:d0:f2:9e:24:8d:ca:de:39:75:97:cc:4b:37:fa:60:10:58: 0a:ea:c0:5f:97:63:ee:6a:83:5a:9a:63:0f:98:8c:bf:0a:a5: ff:ab:5b:36:7a:da:e8:25:df:b0:b1:c7:b0:41:ab:43:cd:c1: af:c8:18:13:cb:55:38:2d:ea:f5:63:07:d8:87:eb:fc:81:7b: 78:ef:bc:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALmKtmpYag/YWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NTFlYzY4ODQtZmI3YS00ZGJhLTk1ODgtZGE5OTM5ODNkZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0N0s3Lro3nEkYFj/iVrb5bB5mfl6V6VOYcn en7TKeaGcZPQvnWdXID0xq1ojdMSFLrna/v0Qd6w/IUfaPtXATJhqzQdTd53wrwN Lu4qiyjLhds8CaaJGoQ8UFqs7vZiIz4yUTLc6vvtbi6qOP7ErYg6yedeUitEb50F VKIwWKj3yYtuDkev8M11/seDz62K+VWzf8F8/Ry20ln6gn62dg3fP8s8HXASA//7 vZANC1KzEF1v2UEQJjXDgA1C30iLJngmVy3C1liBmMqfYi6BLP9DQ2lTaGEiM5tE XB0WXg8JHnvwxrJ5MOYMbBydR4Ad8tstFnO7V8a0x1wGgj+rLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbof0BfNUWJVjfdTfAKlNpTnGJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWQyMTc5ZGUtMmRiMi0z MWUwLTkxYWUtMjJkOTk4NjBmMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6150JOd9gyYxxLfvJOHLehG/H5Pzv/AUuJvHev8usa2PYbuibMDVMf 1slh/JQB+OQQVPX7h1K2gV/yWjy4TWPEJCgcTYmp6kJO6Qmqvf42hHyNLY+W3Tgz skCC2a7xAJXPsL4vVztPCxOQ4D7hrsqrsG2vWS5hTkvrYpYTB2DoqUgM2IKxiQH3 yC8mKJKkUM+ahYuv8LM9O3Sflh+HBaLCd/fw9YRJu4IhexA0hErMXJC7uFPQ8p4k jcreOXWXzEs3+mAQWArqwF+XY+5qg1qaYw+YjL8Kpf+rWzZ62ugl37Cxx7BBq0PN wa/IGBPLVTgt6vVjB9iH6/yBe3jvvPo= -----END CERTIFICATE-----Generated at Thu Aug 7 04:43:16 2025 by rpki-client