$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa File: a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa (raw, json) Hash identifier: cfaLmQsyo3nQs/ReAdwLZFdltNU1eDZGUvuJfYy9mIU= Subject key identifier: 31:71:ED:72:75:5F:7D:D7:F7:E3:B1:2E:63:BD:4C:A6:13:EF:F4:C0 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A0C056AC9BBED380E090EB520 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 3356 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6a:c9:bb:ed:38:0e:09:0e:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=b0be2ae7-c733-4921-bfe0-194aa12aa90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:f7:c8:e0:b5:df:f6:7c:e7:a7:3f:df:36: 11:1e:c4:80:91:1a:17:a0:ca:90:bf:3e:fc:23:4a: 87:fe:81:86:86:4c:2b:4a:b3:c4:4d:ef:4f:a0:20: 4c:ad:4c:ab:06:90:51:40:63:96:7f:59:1d:b5:61: cb:f2:3c:6e:ee:17:a5:db:39:1f:63:c3:c0:43:e6: 26:5b:87:f9:3f:d1:d8:d9:38:36:3e:dc:ec:de:d8: 01:65:64:21:ee:a2:ac:6c:7d:2c:e4:1e:ca:6f:f4: eb:18:97:0d:41:65:8d:2c:86:a5:75:10:5c:b2:4a: 56:c9:7a:af:4b:33:df:d4:ef:9f:60:6e:99:ba:7e: 23:da:30:5b:57:0c:22:fb:54:c4:44:03:fd:33:7d: 12:8c:b4:c7:0a:c6:fa:5d:ab:7f:4a:69:1c:ee:59: c0:c8:6f:5c:2a:ca:56:4a:f0:87:81:fe:9f:02:8a: 5d:54:6c:ad:df:12:af:f9:b6:55:4f:95:1e:97:99: 36:b4:49:01:81:6a:63:a9:40:ea:e4:21:5c:5c:ef: f9:14:f1:e7:06:35:1d:f2:32:8c:1b:bb:02:d8:04: 81:9e:a6:13:af:85:ff:b4:d5:c8:ee:21:a3:47:97: ad:57:f9:77:df:a0:0b:d9:91:92:4f:3b:46:6d:3a: 4f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:71:ED:72:75:5F:7D:D7:F7:E3:B1:2E:63:BD:4C:A6:13:EF:F4:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5b:b6:42:f7:7f:e5:10:b7:48:0c:f0:4e:04:67:fd:37:16: 8f:ad:cb:8a:e1:a0:77:d4:0e:38:fc:e4:12:d0:68:99:82:d1: b3:9f:ba:e1:e3:53:ab:cf:b2:e2:a4:0c:e8:9c:a6:cd:0e:d3: ba:a9:16:b7:20:6b:3c:c6:94:5b:2e:33:15:0d:84:c7:29:68: c7:3f:c0:fa:8c:ff:f0:aa:de:20:ad:2b:f7:5b:6f:1d:8f:fc: d4:c7:13:e1:92:24:9b:9b:9f:b2:4d:14:4c:fa:cc:71:d5:44: fd:b8:e6:16:86:75:37:70:f1:29:c3:3f:ef:c8:6e:e4:d4:ce: 3d:ae:61:e5:d0:4a:f2:d4:ac:a3:b1:4b:db:11:08:0d:28:77: c2:ca:87:6f:90:79:a1:db:60:2e:2c:6b:61:25:bf:d4:1c:7b: 5d:71:5f:ac:df:63:98:e8:bd:0c:8c:9e:cd:c3:1e:31:47:aa: ab:13:80:6b:56:c9:e5:0d:c1:d1:de:c9:c7:33:ae:66:69:ad: 1d:60:70:5c:c4:b1:7c:e9:dd:0a:74:d0:5c:2d:06:98:68:37: c8:79:0d:a6:e4:db:36:19:c2:46:9b:58:57:b2:3e:50:c1:0d: 3e:fa:f6:59:8c:42:72:ed:61:9b:d9:79:22:b3:ce:58:3f:c7: f4:63:b8:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWrJu+04DgkOtSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YjBiZTJhZTctYzczMy00OTIxLWJmZTAtMTk0YWExMmFhOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVD3yOC13/Z856c/3zYRHsSAkRoXoMqQvz78 I0qH/oGGhkwrSrPETe9PoCBMrUyrBpBRQGOWf1kdtWHL8jxu7hel2zkfY8PAQ+Ym W4f5P9HY2Tg2Ptzs3tgBZWQh7qKsbH0s5B7Kb/TrGJcNQWWNLIaldRBcskpWyXqv SzPf1O+fYG6Zun4j2jBbVwwi+1TERAP9M30SjLTHCsb6Xat/Smkc7lnAyG9cKspW SvCHgf6fAopdVGyt3xKv+bZVT5Uel5k2tEkBgWpjqUDq5CFcXO/5FPHnBjUd8jKM G7sC2ASBnqYTr4X/tNXI7iGjR5etV/l336AL2ZGSTztGbTpPZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFx7XJ1X33X9+OxLmO9TKYT7/TAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTEwYTA2NDYtZDBkYy0z MGRjLWI5YjQtMzMyMzVmNmM4MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFbtkL3f+UQt0gM8E4EZ/03Fo+ty4rhoHfUDjj85BLQaJmC0bOfuuHj U6vPsuKkDOicps0O07qpFrcgazzGlFsuMxUNhMcpaMc/wPqM//Cq3iCtK/dbbx2P /NTHE+GSJJubn7JNFEz6zHHVRP245haGdTdw8SnDP+/IbuTUzj2uYeXQSvLUrKOx S9sRCA0od8LKh2+QeaHbYC4sa2Elv9Qce11xX6zfY5jovQyMns3DHjFHqqsTgGtW yeUNwdHeycczrmZprR1gcFzEsXzp3Qp00FwtBphoN8h5Dabk2zYZwkabWFeyPlDB DT769lmMQnLtYZvZeSKzzlg/x/RjuGA= -----END CERTIFICATE-----Generated at Sun Jun 15 19:14:33 2025 by rpki-client