$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa File: 9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa (raw, json) Hash identifier: ttpeZi688Gsv7ktAIPJAi1JGvDz0c9BvrPZ5+MRktNk= Subject key identifier: 58:FF:59:2B:DC:7B:86:5F:71:66:85:20:75:93:2B:1B:F6:1A:D5:32 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A71EB51AE0F485CF9520F7E00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 203 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:51:ae:0f:48:5c:f9:52:0f:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=2d093beb-667b-4784-934f-efb56fedfe31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:66:df:9b:b6:10:2f:08:48:55:90:81:45:89: f0:70:85:ba:e0:34:31:45:d9:b2:cc:7f:eb:a7:a7: 70:1a:b8:cd:20:f6:17:b1:ae:0f:56:32:ea:a2:7a: a7:ca:4c:da:9a:9b:1a:b9:bc:f1:e1:71:91:5e:4e: 38:b0:5a:fc:6a:8a:bf:e2:04:13:85:52:a1:d0:09: 44:db:ce:34:cb:89:05:b3:84:6c:60:00:58:3d:51: 64:ef:df:fa:9d:01:56:21:bf:39:01:ad:a7:bd:8d: 96:fe:4d:e0:3f:6e:27:f7:9d:87:ee:f3:8b:cf:8e: 49:b6:ab:bc:74:32:d7:29:69:70:e2:8c:e6:1b:7c: 97:a9:a1:7a:6f:24:06:4b:11:fe:af:87:b3:42:97: 42:3d:96:e2:ae:c8:ec:bf:91:63:30:45:a2:77:6e: 02:cb:f8:c5:5b:71:5f:ac:9a:12:de:88:87:03:93: c1:24:5d:88:16:a0:ff:c0:ed:8b:95:52:7b:ae:4b: 96:3c:2a:06:dc:2b:65:8c:da:98:dc:14:85:23:a5: 63:59:ca:e3:aa:95:91:15:f8:de:e3:44:98:8b:f0: 1f:51:e3:61:2f:8a:f1:88:a8:0d:94:c4:c2:05:ab: a2:a2:6b:d7:22:b4:f5:f2:7f:28:a0:0c:41:11:71: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FF:59:2B:DC:7B:86:5F:71:66:85:20:75:93:2B:1B:F6:1A:D5:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:9a:5a:af:fc:22:58:9e:03:b7:dc:b1:02:9e:1c:42:c7:ba: 2c:4d:24:2a:22:30:8e:df:57:b6:68:8e:03:74:9b:b7:1a:7b: d3:4b:dd:0e:17:f5:fa:d2:00:2f:ea:3a:0d:6d:7d:73:a9:0a: bb:79:c3:8b:c0:7e:bd:88:3a:f2:1d:bd:ff:39:57:1e:8c:5d: 35:e8:60:f7:74:63:01:48:ce:13:07:82:07:9f:97:04:01:93: c2:75:84:4b:08:0d:bc:c3:93:ec:0f:b2:0a:4f:3a:99:e6:58: 9a:58:55:31:bd:76:16:c6:3e:5c:e7:45:fc:38:65:fe:72:a2: 80:aa:a0:f7:4d:66:98:4c:fe:7c:bf:01:27:a0:bd:53:5a:47: c7:3a:f6:12:7c:d5:a9:e8:53:12:d7:cb:0b:74:cf:ec:e9:a9: dc:85:72:c8:b9:ad:6d:f3:8c:db:94:9d:7b:35:bd:91:45:ac: 96:ef:4d:ee:de:f0:2a:7d:9f:f9:9d:9e:2e:82:7b:0d:7b:5a: 61:db:0f:f1:c3:c9:88:9c:e0:f6:05:60:28:c3:47:c7:f0:b3: cd:60:b8:b9:80:6a:56:20:8c:5c:26:23:4c:a7:24:f3:79:7e: 18:1b:38:57:5b:b3:21:77:7f:39:a8:c3:fb:4a:91:a1:13:3f: cf:d3:f0:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61GuD0hc+VIPfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MmQwOTNiZWItNjY3Yi00Nzg0LTkzNGYtZWZiNTZmZWRmZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGbfm7YQLwhIVZCBRYnwcIW64DQxRdmyzH/r p6dwGrjNIPYXsa4PVjLqonqnykzampsaubzx4XGRXk44sFr8aoq/4gQThVKh0AlE 2840y4kFs4RsYABYPVFk79/6nQFWIb85Aa2nvY2W/k3gP24n952H7vOLz45Jtqu8 dDLXKWlw4ozmG3yXqaF6byQGSxH+r4ezQpdCPZbirsjsv5FjMEWid24Cy/jFW3Ff rJoS3oiHA5PBJF2IFqD/wO2LlVJ7rkuWPCoG3CtljNqY3BSFI6VjWcrjqpWRFfje 40SYi/AfUeNhL4rxiKgNlMTCBauiomvXIrT18n8ooAxBEXEDBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj/WSvce4ZfcWaFIHWTKxv2GtUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWE2N2IwYmUtOWI4NS0z ODFmLThmOGItODBmM2E0YjkzYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuaWq/8IlieA7fcsQKeHELHuixNJCoiMI7fV7ZojgN0m7cae9NL3Q4X 9frSAC/qOg1tfXOpCrt5w4vAfr2IOvIdvf85Vx6MXTXoYPd0YwFIzhMHggeflwQB k8J1hEsIDbzDk+wPsgpPOpnmWJpYVTG9dhbGPlznRfw4Zf5yooCqoPdNZphM/ny/ ASegvVNaR8c69hJ81anoUxLXywt0z+zpqdyFcsi5rW3zjNuUnXs1vZFFrJbvTe7e 8Cp9n/mdni6Cew17WmHbD/HDyYic4PYFYCjDR8fws81guLmAalYgjFwmI0ynJPN5 fhgbOFdbsyF3fzmow/tKkaETP8/T8Bg= -----END CERTIFICATE-----Generated at Wed Aug 6 11:07:27 2025 by rpki-client