$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa File: b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa (raw, json) Hash identifier: Mlbrpc/GjW7DdUzhG4LEGt2isl/4CKi9FUsZEzPJlK8= Subject key identifier: D5:03:69:CC:34:AF:66:05:74:38:55:64:C6:1B:3A:A8:42:94:12:48 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900BCB1EAB8DB1C07EFE5C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 3356 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:bc:b1:ea:b8:db:1c:07:ef:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=dc8748ea-d7cb-462e-8b25-5e7ad2de5559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5e:75:be:1c:03:d5:b5:f4:d9:b9:62:48:af: 4a:b3:1d:e3:a8:c6:e6:38:08:a7:ae:2f:f5:12:da: 6a:5a:44:81:44:5f:59:99:7b:45:5e:3e:36:24:41: 19:e5:3f:23:0f:7e:65:4b:6e:81:3e:34:34:c5:36: f9:dd:1d:56:3a:18:6b:15:c9:bb:5c:98:1f:23:a7: d5:2b:fe:15:29:52:ff:93:44:ff:0e:a9:5d:45:c6: 7b:2a:44:6a:c8:53:4a:59:f7:a0:aa:af:ac:ab:23: 32:2b:31:c2:bc:23:ac:5e:ff:c6:19:ab:c8:b6:57: 87:68:28:01:27:26:37:7b:82:94:8b:d6:ff:40:28: 01:b6:6f:8d:54:16:f0:61:0f:b9:62:97:83:08:a9: 15:eb:e4:1d:80:61:b4:07:96:47:7f:b6:28:0e:7b: f9:4d:9f:a2:3d:56:7a:9f:a7:2e:e5:83:08:9d:b6: 58:36:f4:aa:cb:de:ba:6b:8d:cf:23:f0:bf:a1:d1: 2e:63:4d:58:17:1a:d2:96:4c:0a:7f:4b:eb:3b:fc: e3:f7:b4:6b:f2:c2:2f:13:56:00:15:e6:b7:b1:6a: f8:a5:d5:30:5b:af:1e:27:fb:f1:a9:ac:c7:d5:b1: 01:ba:66:75:97:f7:a5:e8:f1:ad:70:d1:63:2b:f3: f3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:03:69:CC:34:AF:66:05:74:38:55:64:C6:1B:3A:A8:42:94:12:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:27:2b:94:f7:2b:ef:f6:e8:a5:dd:6f:bb:8f:1c:2b:c6:8f: 4c:44:41:4c:08:11:39:10:9d:2e:01:0d:25:03:3c:5d:cf:80: d6:83:9a:37:d9:4b:83:41:2d:18:42:ac:e6:6a:9e:17:79:6a: 03:d1:f7:9a:7e:a9:39:82:73:ab:43:3e:77:ee:31:5b:9c:a6: 88:63:70:d3:5d:24:88:50:fb:e8:3c:a2:b2:44:8f:8f:18:61: d4:84:b1:10:93:5f:06:b2:58:bc:1d:5c:e0:32:7b:fb:d1:83: a2:df:90:7a:46:29:9e:9b:68:96:18:cd:c3:5a:7b:2c:9b:b5: b6:90:e5:4e:39:56:67:32:41:df:28:96:9b:01:df:50:32:cf: e0:db:58:20:5c:87:2b:62:31:5e:d9:28:7e:0c:b8:48:98:b0: a5:7a:19:48:7f:89:85:1d:2a:5b:37:45:73:ea:48:14:b8:04: 12:fc:2d:0f:33:e7:51:a6:b0:20:12:58:0d:1f:b9:a6:c4:38: 1c:e6:ff:c5:a1:91:e0:52:19:42:6f:96:a9:9c:ae:b2:ff:9a: 43:44:d1:bc:62:45:ac:72:34:4e:7e:70:16:15:af:9d:5d:44: 06:f7:08:5d:43:73:8a:5b:0b:d7:88:0a:b0:f1:56:21:9f:b4: 63:b1:42:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALyx6rjbHAfv5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZGM4NzQ4ZWEtZDdjYi00NjJlLThiMjUtNWU3YWQyZGU1NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF51vhwD1bX02bliSK9Ksx3jqMbmOAinri/1 EtpqWkSBRF9ZmXtFXj42JEEZ5T8jD35lS26BPjQ0xTb53R1WOhhrFcm7XJgfI6fV K/4VKVL/k0T/DqldRcZ7KkRqyFNKWfegqq+sqyMyKzHCvCOsXv/GGavItleHaCgB JyY3e4KUi9b/QCgBtm+NVBbwYQ+5YpeDCKkV6+QdgGG0B5ZHf7YoDnv5TZ+iPVZ6 n6cu5YMInbZYNvSqy966a43PI/C/odEuY01YFxrSlkwKf0vrO/zj97Rr8sIvE1YA Fea3sWr4pdUwW68eJ/vxqazH1bEBumZ1l/el6PGtcNFjK/PzGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUDacw0r2YFdDhVZMYbOqhClBJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjliZmMzMGMtNGQyNS0z YmQwLTkzMjQtY2NjYmJkZTE2MjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwnK5T3K+/26KXdb7uPHCvGj0xEQUwIETkQnS4BDSUDPF3PgNaDmjfZ S4NBLRhCrOZqnhd5agPR95p+qTmCc6tDPnfuMVucpohjcNNdJIhQ++g8orJEj48Y YdSEsRCTXwayWLwdXOAye/vRg6LfkHpGKZ6baJYYzcNaeyybtbaQ5U45VmcyQd8o lpsB31Ayz+DbWCBchytiMV7ZKH4MuEiYsKV6GUh/iYUdKls3RXPqSBS4BBL8LQ8z 51GmsCASWA0fuabEOBzm/8WhkeBSGUJvlqmcrrL/mkNE0bxiRaxyNE5+cBYVr51d RAb3CF1Dc4pbC9eICrDxViGftGOxQvE= -----END CERTIFICATE-----Generated at Wed Aug 6 10:19:09 2025 by rpki-client