$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa File: f68ba57f-5e4d-33d2-960d-57b417d05011.roa (raw, json) Hash identifier: 9QmT7yXQtW2UBjFHtEaXHYSCIxmZztURN2Grnz+F7Nk= Subject key identifier: 19:E6:1B:EE:E1:8D:4C:E9:D0:CE:0C:09:33:B3:F1:BD:A6:2F:9D:43 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900BA700A26D26187C88880 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 3356 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:ba:70:0a:26:d2:61:87:c8:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=0ed2f203-b47a-4f54-99ea-31006e560cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:2c:b4:43:24:58:8d:ef:92:5a:74:80:75: 3a:1d:19:18:49:65:32:6d:be:22:ee:07:95:a3:4b: 1c:60:a6:5d:7c:93:c1:c0:3c:da:d9:d6:5a:0f:c4: 9b:ad:b9:b6:5e:b3:7c:4a:f0:65:a3:7e:9e:be:d4: 2b:9a:e2:5a:b6:30:ca:92:69:fe:93:75:f0:1e:d8: ca:7c:57:75:a0:0a:d4:15:f8:08:5b:c5:ca:97:d5: e9:f8:e5:e4:c5:c1:ad:ce:49:e1:48:e4:96:1e:b2: c1:29:b6:41:3e:56:ae:a6:fb:d9:36:8d:bc:4a:dd: b3:33:86:71:7c:1a:54:51:af:7c:55:76:f9:fb:f5: 90:5c:5c:75:20:91:af:5b:5a:6d:bc:f9:7d:de:49: 33:d4:76:cd:a2:2a:26:af:7d:b1:e7:10:2a:0e:78: 5d:cd:dd:23:98:90:b1:b6:9f:a9:66:75:11:ea:39: 3b:e0:32:0a:84:08:b7:17:c7:83:b8:89:ac:f4:f7: 43:65:b3:54:29:55:c2:9f:b8:44:db:f0:55:8a:53: 81:a0:77:96:99:6b:6f:82:9e:da:75:4e:21:a1:69: 96:d8:3e:9b:de:bd:85:0a:95:f3:34:36:78:d6:d4: aa:cd:fc:08:cb:08:12:2a:69:86:12:6b:3f:ae:32: 24:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E6:1B:EE:E1:8D:4C:E9:D0:CE:0C:09:33:B3:F1:BD:A6:2F:9D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:cd:df:24:40:25:ed:b0:c7:75:82:45:63:dc:59:b7:9c:03: 68:eb:f2:4f:1e:ed:f0:26:e8:c0:29:a4:83:f7:31:5c:55:e4: 5a:6b:c1:fd:29:5b:fd:b0:c7:ca:29:24:09:19:c5:d7:a6:91: 4e:cf:44:85:01:3d:66:36:e1:d0:52:96:1d:48:76:21:3a:bc: 13:69:38:c8:2e:bf:82:a8:16:9f:77:33:44:eb:12:27:30:59: b9:ea:17:06:68:60:48:8c:af:04:ee:83:b5:1f:e6:f5:9e:a9: 26:ea:eb:06:0d:2f:db:2a:40:35:8c:b3:50:25:b7:b7:a1:54: 9b:62:67:9e:01:37:fd:a5:06:52:ab:2d:d4:2c:7e:ba:39:c1: 57:9d:9a:45:1e:2a:91:77:00:22:f8:60:52:dd:5d:7d:d5:a1: b9:0f:0b:ef:01:1c:c1:53:4f:b4:4e:d1:2f:75:d6:61:b0:d8: 99:61:27:a9:29:fb:3b:d0:fa:45:a8:ec:4d:37:7a:77:d5:7e: 56:f2:4f:0c:9c:82:85:b6:9b:dd:6f:83:fb:8b:9c:b1:0b:fc: df:91:05:02:6e:e5:23:d1:b0:21:55:ad:92:76:73:9a:8e:64: ee:24:59:0c:94:79:31:24:64:76:cb:02:a4:48:9a:81:6d:6c: 8b:e8:d7:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALpwCibSYYfIiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MGVkMmYyMDMtYjQ3YS00ZjU0LTk5ZWEtMzEwMDZlNTYwY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bkstEMkWI3vklp0gHU6HRkYSWUybb4i7geV o0scYKZdfJPBwDza2dZaD8Sbrbm2XrN8SvBlo36evtQrmuJatjDKkmn+k3XwHtjK fFd1oArUFfgIW8XKl9Xp+OXkxcGtzknhSOSWHrLBKbZBPlaupvvZNo28St2zM4Zx fBpUUa98VXb5+/WQXFx1IJGvW1ptvPl93kkz1HbNoiomr32x5xAqDnhdzd0jmJCx tp+pZnUR6jk74DIKhAi3F8eDuIms9PdDZbNUKVXCn7hE2/BVilOBoHeWmWtvgp7a dU4hoWmW2D6b3r2FCpXzNDZ41tSqzfwIywgSKmmGEms/rjIkcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnmG+7hjUzp0M4MCTOz8b2mL51DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjY4YmE1N2YtNWU0ZC0z M2QyLTk2MGQtNTdiNDE3ZDA1MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDN3yRAJe2wx3WCRWPcWbecA2jr8k8e7fAm6MAppIP3MVxV5Fprwf0p W/2wx8opJAkZxdemkU7PRIUBPWY24dBSlh1IdiE6vBNpOMguv4KoFp93M0TrEicw WbnqFwZoYEiMrwTug7Uf5vWeqSbq6wYNL9sqQDWMs1Alt7ehVJtiZ54BN/2lBlKr LdQsfro5wVedmkUeKpF3ACL4YFLdXX3VobkPC+8BHMFTT7RO0S911mGw2JlhJ6kp +zvQ+kWo7E03enfVflbyTwycgoW2m91vg/uLnLEL/N+RBQJu5SPRsCFVrZJ2c5qO ZO4kWQyUeTEkZHbLAqRImoFtbIvo17M= -----END CERTIFICATE-----Generated at Wed Aug 6 13:19:40 2025 by rpki-client