$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d99a5305-6483-3f7c-aa24-6e3e80884735.roa File: d99a5305-6483-3f7c-aa24-6e3e80884735.roa (raw, json) Hash identifier: ofb3kqf8BfKIMj0sOkfoHrCJA+NQtPO6GzvX/Jm7oFA= Subject key identifier: 35:AF:D9:23:C7:29:D3:A4:B6:55:51:1A:DF:59:2D:AA:CA:91:FB:DB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61EE45CDF314305E9C380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d99a5305-6483-3f7c-aa24-6e3e80884735.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 202 IP address blocks: 20.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1e:e4:5c:df:31:43:05:e9:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=7a06214d-1560-4411-9031-ca1c670e6303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:65:36:9e:36:4b:38:b1:2c:19:23:24:67:58: c9:85:2b:cb:f9:28:39:1a:63:6e:19:71:8a:b9:66: f9:ef:00:cd:13:53:1b:d2:29:3c:d1:f8:b3:54:67: f0:79:2e:6c:3a:45:48:ce:2b:3b:26:fb:9b:a5:9e: a4:b3:37:ce:6d:1e:7a:95:6e:1b:0a:70:b2:90:a1: 8b:bf:3f:f8:fc:f8:e0:22:14:90:ab:2f:de:84:ef: e2:26:ba:49:5d:f3:c5:4d:5c:0d:ed:8e:6e:e7:5e: 1c:08:01:0f:a9:c6:24:49:78:6b:30:8b:9b:33:ce: ef:9c:58:97:bd:89:be:bb:0f:a9:7c:a6:8b:66:4c: ab:5e:88:83:71:58:b0:55:81:47:94:37:28:c5:38: 94:d3:bf:eb:e1:be:a9:96:46:88:0a:0f:a6:4b:0b: 4d:ac:75:13:4a:41:82:16:89:84:87:33:21:86:0b: 8a:74:81:56:48:13:6b:23:7d:15:5b:2d:1d:d0:13: 6c:04:66:8d:e4:ab:3d:30:2e:1e:fa:7b:1d:1d:38: c3:6f:14:a4:9e:1a:0a:ec:e1:6f:2a:b2:aa:a6:18: 5c:db:b2:46:4c:ca:5a:cc:c9:1c:3f:e7:6c:97:f5: 06:04:47:1a:e8:f3:61:47:c2:c1:12:7a:98:41:90: a6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AF:D9:23:C7:29:D3:A4:B6:55:51:1A:DF:59:2D:AA:CA:91:FB:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d99a5305-6483-3f7c-aa24-6e3e80884735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:31:3d:8b:40:7f:04:43:98:f8:d5:59:de:34:a8:7c:d9:ab: 9f:aa:47:1c:f8:01:8c:2f:e6:26:44:0f:c9:86:ed:66:2e:45: 91:1b:ab:62:74:69:c5:75:db:bd:83:af:1c:00:f0:0f:9a:bb: c8:b4:8d:18:41:38:4b:fd:c8:89:43:c5:6a:56:49:7a:f4:46: 00:ed:6f:bc:a2:f3:95:3c:03:54:94:2a:ae:54:c6:35:e8:fc: ae:65:a6:00:d9:90:cb:b1:2b:bf:a3:8b:f6:9d:59:b7:37:9a: 52:24:c6:15:9d:0e:a0:b6:27:cc:2e:77:99:93:75:30:13:c1: ed:e7:4b:98:38:20:a0:85:a0:9f:4a:ca:e5:8c:4e:9b:23:53: ca:95:84:d1:c0:38:ec:09:e6:03:90:eb:ad:71:4b:20:ff:0c: d2:8d:49:08:11:48:17:3e:8a:60:09:f2:c5:34:fd:68:e8:30: 0c:43:fe:95:af:59:38:58:a7:0e:b3:b9:0f:92:86:5e:96:b4: d8:74:80:86:a0:75:fb:e3:5b:7d:cf:44:40:89:42:03:e9:b6: 42:a6:00:22:c6:0d:ad:16:b3:11:7f:8b:4e:8e:88:3b:44:dd: 23:0b:32:fb:69:1a:e0:28:d0:25:d7:25:8d:9b:0d:05:87:9d: f3:a3:77:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3th7kXN8xQwXpw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk N2EwNjIxNGQtMTU2MC00NDExLTkwMzEtY2ExYzY3MGU2MzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02U2njZLOLEsGSMkZ1jJhSvL+Sg5GmNuGXGK uWb57wDNE1Mb0ik80fizVGfweS5sOkVIzis7JvubpZ6kszfObR56lW4bCnCykKGL vz/4/PjgIhSQqy/ehO/iJrpJXfPFTVwN7Y5u514cCAEPqcYkSXhrMIubM87vnFiX vYm+uw+pfKaLZkyrXoiDcViwVYFHlDcoxTiU07/r4b6plkaICg+mSwtNrHUTSkGC FomEhzMhhguKdIFWSBNrI30VWy0d0BNsBGaN5Ks9MC4e+nsdHTjDbxSknhoK7OFv KrKqphhc27JGTMpazMkcP+dsl/UGBEca6PNhR8LBEnqYQZCmYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWv2SPHKdOktlVRGt9ZLarKkfvbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDk5YTUzMDUtNjQ4My0z ZjdjLWFhMjQtNmUzZTgwODg0NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMxPYtAfwRDmPjVWd40qHzZq5+qRxz4AYwv5iZED8mG7WYuRZEbq2J0 acV1272DrxwA8A+au8i0jRhBOEv9yIlDxWpWSXr0RgDtb7yi85U8A1SUKq5UxjXo /K5lpgDZkMuxK7+ji/adWbc3mlIkxhWdDqC2J8wud5mTdTATwe3nS5g4IKCFoJ9K yuWMTpsjU8qVhNHAOOwJ5gOQ661xSyD/DNKNSQgRSBc+imAJ8sU0/WjoMAxD/pWv WThYpw6zuQ+Shl6WtNh0gIagdfvjW33PRECJQgPptkKmACLGDa0WsxF/i06OiDtE 3SMLMvtpGuAo0CXXJY2bDQWHnfOjd5s= -----END CERTIFICATE-----Generated at Wed Aug 6 09:35:31 2025 by rpki-client