$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa File: bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa (raw, json) Hash identifier: SquGEDbkeXu9qgyFoVnw/37+ZQtLu3ZHay2U4qLwWog= Subject key identifier: 7E:1A:BC:57:4E:D9:D9:C8:97:3A:47:16:BF:FE:00:04:9F:40:45:E9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900B8F7439BAC4440978380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 203 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:b8:f7:43:9b:ac:44:40:97:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=c8278c52-eb50-4afa-9540-fc964fb35252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:01:6e:f0:77:38:b6:d6:1c:52:1c:6b:e2: b1:d6:aa:ff:ca:85:f8:2a:0e:49:2a:e1:ad:0a:2b: 85:76:96:2e:49:b3:8c:94:95:94:6b:2d:87:cc:95: e8:1c:af:37:b2:d9:b6:0e:c4:ef:25:8f:ef:6c:05: 33:19:e3:70:4c:41:d0:de:57:81:18:1b:1e:58:dd: 53:d1:92:8b:31:09:92:6c:02:66:1c:13:a0:80:3c: eb:8a:4a:56:6b:f8:a8:74:9c:ff:13:1a:8b:96:e8: e8:96:56:89:e7:73:8b:f6:c2:16:a5:53:ba:dd:56: 10:dd:24:a9:26:fe:1e:58:5c:2d:6f:09:2a:e5:2e: 9b:bc:30:a1:cb:00:15:01:bb:96:be:82:9e:49:52: 92:e4:50:00:b8:83:e1:ac:66:25:50:de:06:55:b7: 55:06:75:25:26:92:02:b8:99:01:66:56:9d:78:e4: 25:fb:54:75:e2:e1:0b:c2:80:d5:5f:a3:66:57:c4: 52:76:6b:2e:84:f8:ca:39:77:cc:a6:f1:5f:13:07: 0e:26:9b:9b:50:eb:d9:ba:d7:42:a6:b6:6f:55:d6: c5:8e:eb:89:d9:f8:f3:38:ba:6a:29:15:4a:b5:fd: 23:44:7b:e6:71:2c:f1:db:d5:c7:c1:b0:18:84:17: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1A:BC:57:4E:D9:D9:C8:97:3A:47:16:BF:FE:00:04:9F:40:45:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2b:73:91:64:dc:86:17:4c:50:a4:c7:97:96:03:f1:94:e8: de:06:b0:88:6e:7f:ea:ba:f3:af:fe:e1:bc:1e:70:62:3d:99: 2f:96:b5:7c:7c:2b:73:69:00:b7:bc:9a:03:34:f8:88:6e:c1: fb:98:da:24:17:6c:d0:ec:0d:82:7c:e2:06:e8:9e:0a:63:c5: c9:b5:ca:e1:ea:f7:ed:d1:d6:16:9b:e7:a2:13:9f:c1:a1:75: 7a:a8:f8:cb:2e:42:85:a0:3e:54:ae:31:d1:4a:24:4d:f0:3f: d3:83:af:39:34:30:90:41:a1:2a:05:1a:2f:21:42:6c:94:7a: 3c:e5:e4:49:5a:8e:f9:e9:5a:de:28:16:06:f5:1c:8a:a7:0a: c3:8f:67:7a:f3:ba:75:fb:d3:15:a4:5c:63:44:72:3f:7a:f9: 77:ea:4b:32:de:7c:b1:3d:42:37:88:49:4d:a7:d5:cf:03:86: 3d:b1:16:17:51:89:5e:77:74:01:45:4a:f3:6e:02:0d:01:3a: 03:63:59:f2:e0:b9:6e:5b:43:36:db:3d:bc:15:e3:ef:52:68: 8e:ed:6f:60:c5:0d:87:3d:11:9b:30:bc:aa:a7:bf:22:72:79: 29:b0:2a:04:94:76:48:b0:99:1f:13:77:c6:56:e8:60:b3:91: 57:e9:38:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALj3Q5usRECXg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YzgyNzhjNTItZWI1MC00YWZhLTk1NDAtZmM5NjRmYjM1MjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqUBbvB3OLbWHFIca+Kx1qr/yoX4Kg5JKuGt CiuFdpYuSbOMlJWUay2HzJXoHK83stm2DsTvJY/vbAUzGeNwTEHQ3leBGBseWN1T 0ZKLMQmSbAJmHBOggDzrikpWa/iodJz/ExqLlujollaJ53OL9sIWpVO63VYQ3SSp Jv4eWFwtbwkq5S6bvDChywAVAbuWvoKeSVKS5FAAuIPhrGYlUN4GVbdVBnUlJpIC uJkBZladeOQl+1R14uELwoDVX6NmV8RSdmsuhPjKOXfMpvFfEwcOJpubUOvZutdC prZvVdbFjuuJ2fjzOLpqKRVKtf0jRHvmcSzx29XHwbAYhBchNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4avFdO2dnIlzpHFr/+AASfQEXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmNkMDhmN2QtODAwNC0z MjdiLTkyZDMtODdiYzdjZmI0NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUrc5Fk3IYXTFCkx5eWA/GU6N4GsIhuf+q686/+4bwecGI9mS+WtXx8 K3NpALe8mgM0+IhuwfuY2iQXbNDsDYJ84gbongpjxcm1yuHq9+3R1hab56ITn8Gh dXqo+MsuQoWgPlSuMdFKJE3wP9ODrzk0MJBBoSoFGi8hQmyUejzl5ElajvnpWt4o Fgb1HIqnCsOPZ3rzunX70xWkXGNEcj96+XfqSzLefLE9QjeISU2n1c8Dhj2xFhdR iV53dAFFSvNuAg0BOgNjWfLguW5bQzbbPbwV4+9SaI7tb2DFDYc9EZswvKqnvyJy eSmwKgSUdkiwmR8Td8ZW6GCzkVfpOKA= -----END CERTIFICATE-----Generated at Wed Aug 6 05:12:12 2025 by rpki-client