$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5f031e31-67c0-3135-9681-d0bb711aa7d1.roa File: 5f031e31-67c0-3135-9681-d0bb711aa7d1.roa (raw, json) Hash identifier: ExI6KB441ED0hJuQmZeSVIr3CSmdXxD4b0BrZXSMdkM= Subject key identifier: D2:02:7A:15:8C:4D:08:4B:8A:72:81:7A:4F:E1:42:9D:61:CC:91:04 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900D0518C7C3D9FDBCF4000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5f031e31-67c0-3135-9681-d0bb711aa7d1.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 202 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:d0:51:8c:7c:3d:9f:db:cf:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=fea14329-8c87-4dbc-beac-e04ccce95a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:21:d7:0f:71:27:d0:d4:ff:b3:45:24:e4: 31:24:8b:3e:2a:19:42:4b:ae:05:c3:d9:ab:0e:3a: 81:10:99:45:b3:0e:f3:37:ae:21:71:fa:4c:3a:f7: 8b:01:8b:a5:d8:65:ca:f8:9c:c2:84:89:67:8f:f9: 55:53:0c:78:a3:69:22:ef:03:cc:0e:3f:4b:b8:18: 0a:ce:02:f0:bb:b8:35:52:f7:35:cf:51:8b:b4:87: 53:fd:14:95:17:b6:a3:ba:03:48:5e:0e:4b:b2:6a: 74:68:d2:a0:7f:11:38:d5:00:8a:23:ae:11:51:55: ac:14:e3:54:aa:1a:31:fc:9c:ab:65:c3:95:3a:95: d7:e5:76:20:5e:a9:a0:79:8b:69:c8:30:17:74:c6: 55:04:fd:3c:91:f8:8c:95:4d:61:5b:0a:02:0e:af: bb:90:5b:f1:48:9b:3a:7c:68:65:fa:20:4f:b8:78: 88:7a:62:e8:e0:3c:3e:49:d6:40:28:30:de:e1:0c: f0:1c:93:44:1c:81:ee:4a:02:98:6f:d9:b4:0a:15: 64:f0:ac:1a:ec:cf:e3:89:c3:27:06:e1:69:d4:c2: 09:83:8b:ba:27:55:6d:b3:46:3d:7e:4a:a8:5f:a5: 68:f5:25:fe:2b:01:d9:7b:fd:9d:bc:1d:77:60:a1: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:02:7A:15:8C:4D:08:4B:8A:72:81:7A:4F:E1:42:9D:61:CC:91:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5f031e31-67c0-3135-9681-d0bb711aa7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:73:42:f1:8d:ff:ba:10:d0:30:12:22:f9:af:15:d7:71:26: af:51:85:b5:56:8f:04:b1:e9:2f:e9:68:c8:a9:5b:f2:ec:cf: 49:84:7c:64:0c:76:9d:70:de:e7:de:72:b7:f9:62:cf:de:06: ca:41:f4:81:02:e6:f9:9f:7b:9e:c6:8c:6b:a3:2a:86:52:9e: 7d:db:7b:a3:00:cf:ab:5b:5c:53:78:ae:fa:c2:b6:49:c0:ed: 05:d0:69:5d:2c:54:0f:28:98:2f:df:f3:3d:5b:6e:4b:72:53: 70:17:06:c0:8f:5f:08:6a:48:dd:32:b5:04:fc:e3:fe:f5:3d: 23:f5:04:03:1a:5c:7f:e0:2d:bd:30:1a:d8:b0:90:2d:fb:cb: 8e:fc:ad:1e:6e:ef:c0:b8:e9:0c:5e:13:25:68:d5:66:a4:d1: d3:34:69:39:46:09:6a:1c:cf:cd:45:9c:87:24:51:97:96:0b: 87:2b:e8:3d:01:6f:55:75:9d:09:d3:a7:0c:5e:e1:07:96:3f: 7f:2d:83:fc:b2:16:66:71:9b:6b:08:37:4e:21:de:e1:a9:e8: 44:53:11:66:bf:38:bb:e0:97:aa:35:9d:48:c4:a5:86:9f:b2: 4d:5c:f5:06:66:6f:40:1f:e5:59:d4:87:a5:8b:05:13:fc:46: 5e:22:6a:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZANBRjHw9n9vPQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZmVhMTQzMjktOGM4Ny00ZGJjLWJlYWMtZTA0Y2NjZTk1YThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3oh1w9xJ9DU/7NFJOQxJIs+KhlCS64Fw9mr DjqBEJlFsw7zN64hcfpMOveLAYul2GXK+JzChIlnj/lVUwx4o2ki7wPMDj9LuBgK zgLwu7g1Uvc1z1GLtIdT/RSVF7ajugNIXg5Lsmp0aNKgfxE41QCKI64RUVWsFONU qhox/JyrZcOVOpXX5XYgXqmgeYtpyDAXdMZVBP08kfiMlU1hWwoCDq+7kFvxSJs6 fGhl+iBPuHiIemLo4Dw+SdZAKDDe4QzwHJNEHIHuSgKYb9m0ChVk8Kwa7M/jicMn BuFp1MIJg4u6J1Vts0Y9fkqoX6Vo9SX+KwHZe/2dvB13YKG/cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNICehWMTQhLinKBek/hQp1hzJEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWYwMzFlMzEtNjdjMC0z MTM1LTk2ODEtZDBiYjcxMWFhN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJzQvGN/7oQ0DASIvmvFddxJq9RhbVWjwSx6S/paMipW/Lsz0mEfGQM dp1w3ufecrf5Ys/eBspB9IEC5vmfe57GjGujKoZSnn3be6MAz6tbXFN4rvrCtknA 7QXQaV0sVA8omC/f8z1bbktyU3AXBsCPXwhqSN0ytQT84/71PSP1BAMaXH/gLb0w GtiwkC37y478rR5u78C46QxeEyVo1Wak0dM0aTlGCWocz81FnIckUZeWC4cr6D0B b1V1nQnTpwxe4QeWP38tg/yyFmZxm2sIN04h3uGp6ERTEWa/OLvgl6o1nUjEpYaf sk1c9QZmb0Af5VnUh6WLBRP8Rl4iahU= -----END CERTIFICATE-----Generated at Wed Aug 6 16:12:40 2025 by rpki-client