$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e05ae60a-5ff9-3ee5-884e-da2510336861.roa File: e05ae60a-5ff9-3ee5-884e-da2510336861.roa (raw, json) Hash identifier: aIppUkaqDoZzjoB29oWgnoI0yWoKyjce7My6Lu9eteU= Subject key identifier: D1:B7:26:EA:B1:96:28:5B:A0:8D:8D:CC:AD:44:E8:2E:5E:96:A2:A9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A8C70E8B76984DC02DC1427E0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e05ae60a-5ff9-3ee5-884e-da2510336861.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 3360 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e8:b7:69:84:dc:02:dc:14:27:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=52a03fe2-b4eb-4214-b25c-7c5114236785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:7f:41:5e:a3:46:22:56:7d:c1:4d:3d:85: cd:cb:fd:2c:0a:75:cd:44:a0:f9:23:15:a5:78:57: e1:b5:15:4a:33:b0:15:d8:67:4b:6c:37:34:bd:3c: bc:ed:63:a1:56:ea:bf:b3:49:33:af:13:c9:4f:9b: 59:5b:6b:7b:3f:8a:c7:f4:0c:06:0b:51:30:6d:94: b9:c3:d3:6f:19:09:87:27:b5:8e:cf:1b:a9:b2:59: d6:09:0f:11:82:70:c2:4a:c4:82:7c:56:de:38:e7: 0d:53:14:6f:20:99:f5:c7:cf:b3:5b:40:8c:06:0a: 9a:8f:bc:4a:b3:6a:5d:49:bb:a9:84:2e:62:0c:47: 5c:76:c6:24:37:98:84:ee:b1:19:32:bf:65:b4:cb: c2:f5:23:26:ce:70:10:ff:ef:1c:5a:15:5e:80:95: 25:c2:4a:08:b9:10:36:3a:3b:00:9d:46:7f:9e:47: 51:db:8f:c4:a2:e5:65:45:6f:85:d8:1e:f2:56:15: b5:ed:25:f5:fc:49:7d:69:98:90:81:03:e2:d6:e5: e0:f2:b4:68:0f:e7:8f:39:7a:0c:3a:ca:36:d2:46: 23:4c:99:96:a4:e0:34:24:75:9e:aa:99:30:75:a9: 95:00:f5:b8:a6:75:6b:f7:73:6e:f5:9a:ca:a7:3e: 86:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B7:26:EA:B1:96:28:5B:A0:8D:8D:CC:AD:44:E8:2E:5E:96:A2:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e05ae60a-5ff9-3ee5-884e-da2510336861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:7f:a9:ab:fa:3f:af:bd:4a:c5:72:a8:84:d7:49:d1:da:a2: ab:46:68:7c:99:44:c4:48:b7:27:fb:6b:3a:e8:f6:f2:c3:a9: 8e:93:d9:f5:39:8d:36:39:87:41:d9:4d:a6:05:a4:b3:50:77: ff:64:84:a0:e3:4f:bc:54:32:2d:10:3a:cd:85:75:b2:2d:76: 2e:4b:1a:99:f4:b4:a8:04:3e:94:8b:88:4f:22:bc:7f:21:7a: d3:f4:29:4c:0d:56:b2:ff:02:b0:f7:61:eb:f9:b1:dd:8c:31: 4e:36:6c:7e:5b:2f:fe:f1:16:22:47:24:ad:e2:51:48:1c:04: ed:df:ed:02:99:a3:64:c5:3d:9f:77:ac:85:77:54:40:eb:d1: 3b:0a:61:50:5f:40:39:2d:71:b3:f4:aa:c8:20:a2:4a:a1:9b: 40:1c:a6:2c:74:7d:9e:c7:bc:e2:c6:9a:72:dd:f4:4e:6e:b2: 5e:c5:e1:76:3e:b0:f1:1a:a0:58:8f:65:8f:ae:00:6c:64:1f: c7:ae:ec:b3:e4:67:6f:32:8d:81:d9:3b:07:ec:73:86:47:9f: 70:20:32:52:1f:cf:3a:00:f5:e8:d8:e8:58:31:c2:4c:76:73: 31:f1:4b:49:2b:a6:65:93:6e:85:11:11:36:30:36:54:fe:8e: be:00:6e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcOi3aYTcAtwUJ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NTJhMDNmZTItYjRlYi00MjE0LWIyNWMtN2M1MTE0MjM2Nzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfl/QV6jRiJWfcFNPYXNy/0sCnXNRKD5IxWl eFfhtRVKM7AV2GdLbDc0vTy87WOhVuq/s0kzrxPJT5tZW2t7P4rH9AwGC1EwbZS5 w9NvGQmHJ7WOzxupslnWCQ8RgnDCSsSCfFbeOOcNUxRvIJn1x8+zW0CMBgqaj7xK s2pdSbuphC5iDEdcdsYkN5iE7rEZMr9ltMvC9SMmznAQ/+8cWhVegJUlwkoIuRA2 OjsAnUZ/nkdR24/EouVlRW+F2B7yVhW17SX1/El9aZiQgQPi1uXg8rRoD+ePOXoM Oso20kYjTJmWpOA0JHWeqpkwdamVAPW4pnVr93Nu9ZrKpz6GzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG3JuqxlihboI2NzK1E6C5elqKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTA1YWU2MGEtNWZmOS0z ZWU1LTg4NGUtZGEyNTEwMzM2ODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd/qav6P6+9SsVyqITXSdHaoqtGaHyZRMRItyf7azro9vLDqY6T2fU5 jTY5h0HZTaYFpLNQd/9khKDjT7xUMi0QOs2FdbItdi5LGpn0tKgEPpSLiE8ivH8h etP0KUwNVrL/ArD3Yev5sd2MMU42bH5bL/7xFiJHJK3iUUgcBO3f7QKZo2TFPZ93 rIV3VEDr0TsKYVBfQDktcbP0qsggokqhm0Acpix0fZ7HvOLGmnLd9E5usl7F4XY+ sPEaoFiPZY+uAGxkH8eu7LPkZ28yjYHZOwfsc4ZHn3AgMlIfzzoA9ejY6Fgxwkx2 czHxS0krpmWTboURETYwNlT+jr4Abpc= -----END CERTIFICATE-----Generated at Thu Aug 7 02:07:08 2025 by rpki-client