$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa File: df22a43e-e64f-3eee-a833-cc30d25d5a51.roa (raw, json) Hash identifier: YLr++KzXpOkkkniI/SCFYY6ibHNKE3AeLOudWfVfVh4= Subject key identifier: B9:65:38:35:48:BD:73:5A:2F:EF:0E:3B:5C:10:A8:AB:B7:A3:09:ED Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900CEF8D103A88A59353D80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 3356 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:ce:f8:d1:03:a8:8a:59:35:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=15a41967-2c24-4008-b71c-b784f7b350af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:42:33:cc:10:67:6a:7b:3d:ee:e1:47:f2: 2a:4d:ee:71:98:52:5f:0d:3e:26:6a:5d:d2:bf:65: 45:4a:8c:ce:44:82:6a:14:c1:31:36:96:f5:74:ce: d8:8f:09:13:a1:f9:ce:07:fe:6b:6f:fe:eb:4a:78: c3:20:0a:7b:ed:11:3c:65:9a:4e:0d:d2:3c:77:8a: 0b:29:8a:74:09:24:7a:6d:70:02:bc:40:6a:4f:23: e7:8f:d4:85:cd:b8:a8:27:ea:1a:b0:dd:87:66:91: 6e:df:ad:97:42:cc:60:5a:9d:0f:33:14:6c:16:b7: 9c:37:ef:2b:ba:c9:4c:c0:82:4b:b2:79:7f:a5:65: 0e:54:5e:8d:ef:f6:2f:32:9e:c4:20:9f:ed:99:93: 0c:98:6f:57:36:ea:78:54:ca:e6:12:d5:5e:6b:90: d7:3e:64:0f:ac:b2:b6:c7:fb:50:ad:bc:26:95:da: 66:69:ee:d2:01:3a:d0:bc:be:0a:90:67:9e:17:58: 7c:f2:b6:ef:3b:4b:df:63:5b:4a:49:e0:78:c0:8a: b3:26:02:48:12:43:d8:69:24:25:dc:b4:43:95:86: c4:a5:ce:49:bd:3b:75:70:cf:74:a4:4a:d5:11:06: f2:a0:b4:c2:c6:6d:7d:0b:14:32:98:88:22:10:74: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:65:38:35:48:BD:73:5A:2F:EF:0E:3B:5C:10:A8:AB:B7:A3:09:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1b:ea:4a:31:3d:e6:1e:a9:96:0c:91:e2:fd:31:c6:a7:97: 9b:21:bf:64:47:da:21:66:04:2e:4f:81:37:45:c9:f7:8f:2f: c9:82:1c:e0:61:2e:16:36:e7:1e:db:ce:e0:f9:5b:19:d1:8b: d3:85:99:c4:b0:2a:4a:d5:49:59:bc:e0:3d:fe:a2:d0:f9:1f: 6d:15:55:0d:bf:57:61:95:4f:be:ea:70:c8:b0:b1:a4:6d:ee: 39:70:c0:2a:8f:97:a5:b4:3a:2a:c0:5f:b4:c3:2b:e4:c6:30: 1a:b0:ea:47:d5:1f:cb:f2:c2:bd:58:39:0b:3e:59:d9:0c:79: a2:d2:4a:2b:f3:fb:fb:e9:86:88:d2:b1:d2:36:2d:1d:82:fc: 58:37:a8:0a:e7:36:1d:a3:d9:0a:ad:fa:d2:c4:71:6d:37:36: 35:a9:90:59:46:00:d7:72:90:cf:ea:8e:f8:f5:a7:e9:82:9a: 96:6a:d3:f0:c8:39:2b:3b:ca:06:9a:40:fd:b8:28:d6:d2:89: a4:f9:54:67:69:ad:fe:cb:f2:d2:8f:92:ba:ab:6f:a8:86:ca: b2:86:37:3d:6a:a8:23:56:6f:0a:4f:72:b5:bf:98:7c:97:c5: 3f:9f:fc:5e:98:23:be:8c:db:56:98:14:c0:29:76:43:ab:a0: 1a:8e:73:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAM740QOoilk1PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MTVhNDE5NjctMmMyNC00MDA4LWI3MWMtYjc4NGY3YjM1MGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhttCM8wQZ2p7Pe7hR/IqTe5xmFJfDT4mal3S v2VFSozORIJqFMExNpb1dM7YjwkTofnOB/5rb/7rSnjDIAp77RE8ZZpODdI8d4oL KYp0CSR6bXACvEBqTyPnj9SFzbioJ+oasN2HZpFu362XQsxgWp0PMxRsFrecN+8r uslMwIJLsnl/pWUOVF6N7/YvMp7EIJ/tmZMMmG9XNup4VMrmEtVea5DXPmQPrLK2 x/tQrbwmldpmae7SATrQvL4KkGeeF1h88rbvO0vfY1tKSeB4wIqzJgJIEkPYaSQl 3LRDlYbEpc5JvTt1cM90pErVEQbyoLTCxm19CxQymIgiEHQ9CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLllODVIvXNaL+8OO1wQqKu3owntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGYyMmE0M2UtZTY0Zi0z ZWVlLWE4MzMtY2MzMGQyNWQ1YTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYb6koxPeYeqZYMkeL9Mcanl5shv2RH2iFmBC5PgTdFyfePL8mCHOBh LhY25x7bzuD5WxnRi9OFmcSwKkrVSVm84D3+otD5H20VVQ2/V2GVT77qcMiwsaRt 7jlwwCqPl6W0OirAX7TDK+TGMBqw6kfVH8vywr1YOQs+WdkMeaLSSivz+/vphojS sdI2LR2C/Fg3qArnNh2j2Qqt+tLEcW03NjWpkFlGANdykM/qjvj1p+mCmpZq0/DI OSs7ygaaQP24KNbSiaT5VGdprf7L8tKPkrqrb6iGyrKGNz1qqCNWbwpPcrW/mHyX xT+f/F6YI76M21aYFMApdkOroBqOczY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:31:40 2025 by rpki-client