$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d5fd34aa-2591-314e-8b27-a7c9695e168c.roa File: d5fd34aa-2591-314e-8b27-a7c9695e168c.roa (raw, json) Hash identifier: 3RQSCppp9fwjZt/weJqR+q9nuroKMw4io3GmbFxJ3W8= Subject key identifier: 2C:EF:CE:88:05:52:5E:7F:C3:1F:E4:BF:61:91:26:B2:C6:F8:F0:4D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900CF8309F6CEC35A40F400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d5fd34aa-2591-314e-8b27-a7c9695e168c.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 202 IP address blocks: 20.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cf:83:09:f6:ce:c3:5a:40:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=f0f405ec-27b0-4a2c-8ac4-4edcb0223323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:4c:27:49:4a:ca:fc:53:bf:7e:27:3f:24: a2:20:fb:6a:1b:27:cf:55:a5:b0:5b:ce:0d:ca:cf: 1b:8b:89:b0:49:eb:41:58:82:c5:d7:d7:e0:93:e9: 23:5f:a8:2c:a1:26:84:b3:cd:bd:44:f7:97:cc:98: 55:0e:07:2c:f7:88:72:f9:4a:43:19:28:d5:8e:aa: f0:8d:6e:b9:26:89:70:04:75:68:aa:cd:4c:16:51: fe:88:68:f1:a4:aa:86:9e:1b:ff:fc:4f:8f:cc:5c: 74:01:a6:e1:ec:57:d4:1d:25:67:1f:b0:55:d6:ff: 51:6b:7c:a1:c1:a7:a3:d8:87:60:ae:68:ac:a8:b5: f7:2f:da:37:3f:15:7b:d2:3c:d7:4a:10:23:71:91: 05:5e:1e:76:70:0a:af:3e:19:4e:5a:6c:94:8f:65: a5:9d:23:a5:13:7c:6a:52:bd:1b:6a:ed:3f:4c:ac: 18:9e:63:6f:54:be:c6:4c:c6:64:d4:38:68:c2:02: ed:be:9a:bb:15:4e:7c:4d:6c:55:f1:41:93:8b:b5: af:d9:f0:a4:c7:78:23:65:64:f6:51:45:3c:8c:7a: 60:71:55:16:a8:00:3c:29:15:46:60:83:ae:27:91: 56:d4:4d:18:5f:66:7c:ae:f4:5c:5c:ab:b8:57:f3: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EF:CE:88:05:52:5E:7F:C3:1F:E4:BF:61:91:26:B2:C6:F8:F0:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d5fd34aa-2591-314e-8b27-a7c9695e168c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:1a:18:84:b4:15:c6:bb:c4:79:5b:23:cb:cb:7c:21:e1:de: ac:5a:13:84:84:fb:da:e3:23:7d:fb:21:05:49:20:ab:93:1b: ae:3d:dd:6f:08:9a:41:c8:fb:3c:af:71:f7:d6:1c:6c:46:43: f5:8f:e8:eb:01:fc:ed:86:98:4d:b8:cb:d9:c5:e3:ba:98:ff: fe:4a:0e:eb:e7:d3:51:07:81:10:34:67:d0:e1:f7:78:c9:1b: 2a:6c:1b:d6:7d:96:26:ba:c6:c7:51:9f:0d:80:29:df:e8:f7: 43:40:85:48:75:fb:23:dc:63:90:eb:81:bd:90:da:54:8a:e4: 9b:a9:1b:ab:f5:15:4f:06:44:60:11:e4:64:91:a2:a7:90:fd: ec:7a:de:aa:e5:81:95:15:a4:e2:90:49:52:79:c4:3f:98:4d: 1d:6c:c4:27:bb:13:0f:d9:ad:40:6e:84:89:2c:46:3b:46:08: 01:c0:af:d2:d1:f3:f7:ee:ee:78:6a:fb:34:b1:6d:84:cc:4b: 0f:c3:85:c6:e9:a9:4f:10:25:d2:44:64:27:93:de:a1:32:a0: c5:22:88:81:9c:de:ce:dd:4a:a4:97:0c:ce:92:a1:74:eb:89: 34:55:22:99:ed:0e:b2:19:79:ce:9e:00:3e:69:82:e8:29:2a: cf:35:1a:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAM+DCfbOw1pA9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZjBmNDA1ZWMtMjdiMC00YTJjLThhYzQtNGVkY2IwMjIzMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q5MJ0lKyvxTv34nPySiIPtqGyfPVaWwW84N ys8bi4mwSetBWILF19fgk+kjX6gsoSaEs829RPeXzJhVDgcs94hy+UpDGSjVjqrw jW65JolwBHVoqs1MFlH+iGjxpKqGnhv//E+PzFx0Aabh7FfUHSVnH7BV1v9Ra3yh waej2IdgrmisqLX3L9o3PxV70jzXShAjcZEFXh52cAqvPhlOWmyUj2WlnSOlE3xq Ur0bau0/TKwYnmNvVL7GTMZk1DhowgLtvpq7FU58TWxV8UGTi7Wv2fCkx3gjZWT2 UUU8jHpgcVUWqAA8KRVGYIOuJ5FW1E0YX2Z8rvRcXKu4V/PZ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzvzogFUl5/wx/kv2GRJrLG+PBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDVmZDM0YWEtMjU5MS0z MTRlLThiMjctYTdjOTY5NWUxNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMaGIS0Fca7xHlbI8vLfCHh3qxaE4SE+9rjI337IQVJIKuTG6493W8I mkHI+zyvcffWHGxGQ/WP6OsB/O2GmE24y9nF47qY//5KDuvn01EHgRA0Z9Dh93jJ GypsG9Z9lia6xsdRnw2AKd/o90NAhUh1+yPcY5Drgb2Q2lSK5JupG6v1FU8GRGAR 5GSRoqeQ/ex63qrlgZUVpOKQSVJ5xD+YTR1sxCe7Ew/ZrUBuhIksRjtGCAHAr9LR 8/fu7nhq+zSxbYTMSw/DhcbpqU8QJdJEZCeT3qEyoMUiiIGc3s7dSqSXDM6SoXTr iTRVIpntDrIZec6eAD5pgugpKs81Gu4= -----END CERTIFICATE-----Generated at Wed Aug 6 16:14:13 2025 by rpki-client