$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa File: cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa (raw, json) Hash identifier: qA79Do5KcL1nKVY/BIOaav9lJ4WOidBqDVieTTi9OFs= Subject key identifier: 45:0D:2E:88:2F:14:09:EB:8A:5C:28:3D:C6:B3:50:84:E0:AD:DD:A4 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A0C056C44B0DEF306ACFB7700 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 3356 IP address blocks: 20.148.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6c:44:b0:de:f3:06:ac:fb:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=9f30968d-8b38-4a1f-9941-adba937c6c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:18:71:f0:57:a8:9d:8b:07:d7:30:1e:2b:42: a1:b4:8c:13:60:ca:c5:73:44:ba:15:3c:5e:b8:69: c1:cd:47:f1:be:98:28:46:25:ca:2b:11:6e:b4:c5: f2:58:c7:0c:ce:12:04:95:bc:6f:2e:4f:c2:22:f3: c6:7c:43:c2:7c:24:53:af:f5:bf:4d:b4:54:5c:dc: 5c:a2:8b:c4:13:cd:2b:28:22:a2:99:c4:5a:be:e2: d8:0d:55:35:b6:6a:7b:96:29:58:28:fa:b0:cc:bf: cb:b6:12:30:8e:8a:3e:ee:93:70:de:1e:37:2a:0f: 45:b5:9f:34:a3:4c:b1:e0:ed:21:5b:f9:d6:fc:e6: 20:ef:17:fa:9d:f0:ab:cb:c7:45:07:a0:cb:43:96: c5:b4:5b:44:03:ab:cc:86:48:5d:6e:08:2f:ad:c2: d3:d3:b5:3a:4d:2b:b4:31:07:10:00:b3:34:b2:d7: 29:fa:a4:df:1a:48:46:42:fe:d4:5f:5b:f9:6b:55: 9c:41:df:d1:93:dc:e7:88:b1:6e:8a:d4:22:56:2f: 28:e3:ec:c4:82:c1:89:07:d1:fe:89:b9:6e:f2:8c: b3:14:2c:61:74:6e:09:e7:61:fd:ec:87:89:4d:ed: 70:31:15:2f:dd:1b:f0:5a:ef:cf:91:a9:5a:19:cc: 90:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0D:2E:88:2F:14:09:EB:8A:5C:28:3D:C6:B3:50:84:E0:AD:DD:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b1:03:19:90:56:b7:65:e8:99:25:0b:f3:67:91:8b:27:23: 32:e8:95:fa:06:d6:4e:2d:58:2d:aa:2d:d2:e4:6d:48:cb:c5: 0e:9c:60:57:2c:08:38:48:ad:47:18:83:9c:33:c5:b4:e1:03: b3:0a:58:60:ea:03:c3:1a:23:bf:dc:60:c0:40:9d:a1:7d:30: ab:d1:a2:79:ce:30:56:d2:43:cf:f7:6c:e5:90:a7:e7:78:03: 11:a6:31:d5:2f:69:44:27:3b:df:97:44:2e:fb:c6:7a:bc:3e: 1b:a9:e5:db:de:6e:53:b7:3c:86:71:3c:bd:f1:26:c8:da:29: f4:ed:db:82:4a:b7:73:b8:37:52:21:10:f0:6c:9a:dd:34:ca: 28:72:6b:8e:2f:16:67:d4:11:f7:a6:6a:a0:12:8d:49:28:e9: 75:94:a1:bd:1b:86:0f:54:8a:65:b2:1d:11:d4:cf:f5:c3:d1: 84:b0:1f:e9:02:77:4b:42:95:1b:e6:e1:ab:51:5e:b8:7a:3a: 24:8d:8b:98:5a:48:09:ff:36:e5:3a:94:62:6b:ed:65:81:3e: bd:65:95:7a:49:09:cf:ac:e3:34:d0:76:5b:8b:1f:83:22:fb: ef:37:1e:29:68:65:d7:dd:f2:ec:7a:43:4a:c2:1b:1c:90:49: 72:26:08:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWxEsN7zBqz7dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OWYzMDk2OGQtOGIzOC00YTFmLTk5NDEtYWRiYTkzN2M2YzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhhx8FeonYsH1zAeK0KhtIwTYMrFc0S6FTxe uGnBzUfxvpgoRiXKKxFutMXyWMcMzhIElbxvLk/CIvPGfEPCfCRTr/W/TbRUXNxc oovEE80rKCKimcRavuLYDVU1tmp7lilYKPqwzL/LthIwjoo+7pNw3h43Kg9FtZ80 o0yx4O0hW/nW/OYg7xf6nfCry8dFB6DLQ5bFtFtEA6vMhkhdbggvrcLT07U6TSu0 MQcQALM0stcp+qTfGkhGQv7UX1v5a1WcQd/Rk9zniLFuitQiVi8o4+zEgsGJB9H+ iblu8oyzFCxhdG4J52H97IeJTe1wMRUv3RvwWu/PkalaGcyQNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUNLogvFAnrilwoPcazUITgrd2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvY2Y2YTRmYTAtM2RiMC0z MzU0LTg4ZDktNDhiMDI1ZTBmNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqxAxmQVrdl6JklC/NnkYsnIzLolfoG1k4tWC2qLdLkbUjLxQ6cYFcs CDhIrUcYg5wzxbThA7MKWGDqA8MaI7/cYMBAnaF9MKvRonnOMFbSQ8/3bOWQp+d4 AxGmMdUvaUQnO9+XRC77xnq8Phup5dveblO3PIZxPL3xJsjaKfTt24JKt3O4N1Ih EPBsmt00yihya44vFmfUEfemaqASjUko6XWUob0bhg9UimWyHRHUz/XD0YSwH+kC d0tClRvm4atRXrh6OiSNi5haSAn/NuU6lGJr7WWBPr1llXpJCc+s4zTQdluLH4Mi ++83HiloZdfd8ux6Q0rCGxyQSXImCOA= -----END CERTIFICATE-----Generated at Tue Jun 17 23:00:25 2025 by rpki-client