$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa File: d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa (raw, json) Hash identifier: JWC9GfQws1T/OcC7EvRZsxqVvcwKHOSEzM9cup7z72o= Subject key identifier: 43:F7:D7:F1:FB:F4:E0:A6:05:4A:BD:2B:7E:FB:55:71:14:69:02:75 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900CFE641B74EBA58963880 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 3360 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cf:e6:41:b7:4e:ba:58:96:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=86e3ce95-f513-4016-994d-0f35b522b6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:81:94:39:3d:43:85:55:57:26:86:c9:f6:33: d0:c4:bb:94:d2:4e:01:f1:da:ac:8e:50:3d:b3:3a: 0e:e5:e6:a7:e7:88:fc:07:29:a8:1e:04:80:3a:c6: 4b:91:e9:41:6c:98:09:6e:87:88:85:87:96:a8:ff: 16:e9:1f:ae:27:ee:cf:2b:ca:e0:52:e7:03:43:6d: af:88:26:9d:95:c0:a4:7f:5c:e5:40:ce:33:95:bd: 8c:52:d8:19:a8:8e:c5:fe:7d:9a:f3:a9:23:0b:29: 54:f7:62:db:06:b2:63:53:f2:19:e6:bd:03:8f:5c: e0:97:13:32:a1:b9:ef:ac:37:ee:0b:4d:15:bd:d2: c2:18:cb:61:4b:22:1c:bf:5a:46:34:ac:eb:ae:48: 25:a1:04:60:2c:41:f1:50:7d:b5:92:cb:be:38:5d: ab:a4:53:0d:72:ad:29:8e:49:36:1b:86:ce:6f:9e: fd:41:63:44:93:51:44:03:5c:db:a2:c8:80:d6:fe: cb:d9:e8:3c:44:61:c8:5b:18:82:4f:82:a5:1c:a2: 27:3b:bf:f6:a9:11:0f:42:ce:b5:b7:8f:df:61:71: 50:3c:1e:41:60:91:9e:0d:48:ac:b8:f5:7b:dd:62: 92:fb:79:21:a9:15:68:8a:17:65:b0:4e:f1:29:fa: 56:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F7:D7:F1:FB:F4:E0:A6:05:4A:BD:2B:7E:FB:55:71:14:69:02:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:08:b1:c9:02:4e:91:8b:c9:95:f8:65:7d:db:b6:b3:08:ff: 97:d5:9e:b8:8a:43:2e:71:8c:f2:f6:96:00:c5:02:c4:fc:42: 2e:de:2d:3a:a6:ba:4f:d3:bc:6f:2c:e8:00:6e:31:d5:19:88: cb:ec:e9:19:8d:cb:8e:57:1a:4c:08:00:19:2c:fa:c2:e5:bf: f2:6d:32:2e:dc:df:4d:02:c5:95:ef:d8:6e:43:a0:4d:e7:41: 5f:d4:8e:61:79:58:94:91:95:0e:ea:4b:e0:00:c8:28:f9:46: ce:cf:25:64:65:39:c5:3f:a2:bb:f8:5f:71:55:fc:c4:a1:23: 8d:50:4c:c7:81:08:3b:9a:1f:97:03:45:14:8c:61:5c:35:a6: 9a:09:8c:7d:8a:c4:d6:de:8e:6c:c0:4d:dd:ad:36:f3:c6:ce: f3:cb:88:7e:67:ac:ac:12:09:27:4c:1a:0b:81:cd:0b:40:ab: d5:ca:f8:b0:98:54:5e:b4:4b:18:e9:4a:51:61:4d:42:94:cc: 17:cd:3c:87:29:9d:30:13:70:a5:79:5d:57:4b:98:65:2f:45: 7c:da:04:dc:cf:61:95:c9:30:b8:00:88:3c:ad:d5:06:7b:b0: ab:13:20:25:f9:08:9d:30:a2:ed:ed:d0:7d:ae:66:9d:82:3d: ea:6b:f7:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAM/mQbdOuliWOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ODZlM2NlOTUtZjUxMy00MDE2LTk5NGQtMGYzNWI1MjJiNmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIGUOT1DhVVXJobJ9jPQxLuU0k4B8dqsjlA9 szoO5ean54j8BymoHgSAOsZLkelBbJgJboeIhYeWqP8W6R+uJ+7PK8rgUucDQ22v iCadlcCkf1zlQM4zlb2MUtgZqI7F/n2a86kjCylU92LbBrJjU/IZ5r0Dj1zglxMy obnvrDfuC00VvdLCGMthSyIcv1pGNKzrrkgloQRgLEHxUH21ksu+OF2rpFMNcq0p jkk2G4bOb579QWNEk1FEA1zbosiA1v7L2eg8RGHIWxiCT4KlHKInO7/2qREPQs61 t4/fYXFQPB5BYJGeDUisuPV73WKS+3khqRVoihdlsE7xKfpWhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP31/H79OCmBUq9K377VXEUaQJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDhhODg5NGQtZDAzNC0z OWM3LWFhNzEtY2UzOWZiMGQ4YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoIsckCTpGLyZX4ZX3btrMI/5fVnriKQy5xjPL2lgDFAsT8Qi7eLTqm uk/TvG8s6ABuMdUZiMvs6RmNy45XGkwIABks+sLlv/JtMi7c300CxZXv2G5DoE3n QV/UjmF5WJSRlQ7qS+AAyCj5Rs7PJWRlOcU/orv4X3FV/MShI41QTMeBCDuaH5cD RRSMYVw1ppoJjH2KxNbejmzATd2tNvPGzvPLiH5nrKwSCSdMGguBzQtAq9XK+LCY VF60SxjpSlFhTUKUzBfNPIcpnTATcKV5XVdLmGUvRXzaBNzPYZXJMLgAiDyt1QZ7 sKsTICX5CJ0wou3t0H2uZp2CPepr98o= -----END CERTIFICATE-----Generated at Thu Aug 7 01:10:29 2025 by rpki-client