$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa File: f8da539f-a988-3038-8316-0c63126db070.roa (raw, json) Hash identifier: XG2TzFqo5aNnCzFZUUEIv2Ir/8gJqs3DHDTmRSjW4ew= Subject key identifier: B7:C0:47:30:58:23:85:86:D3:E5:FF:19:55:57:85:8D:85:0D:44:61 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900BAE8E8453E5D47071440 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 203 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:ba:e8:e8:45:3e:5d:47:07:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=3caf17ca-23ac-45d4-a733-dfcab1c73778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0b:27:ce:21:50:1e:8c:37:78:71:86:1c:ca: 6e:ab:21:d3:b9:7a:53:95:3b:f5:49:c1:aa:87:33: ae:22:1f:a5:bf:fe:22:f8:70:19:5b:8a:46:b9:42: a9:48:ed:e1:be:3e:4f:a6:3a:80:fa:ef:eb:b4:5e: bc:74:e6:ba:25:35:c3:85:02:25:fe:a8:e6:64:c3: da:18:06:ad:db:78:cc:0c:df:fe:dc:cc:6a:6c:04: ed:37:71:15:e7:6e:92:2d:d2:54:93:8b:e6:78:b1: ce:eb:a2:1a:1f:9f:bd:23:7e:e6:fb:a1:44:0f:71: 5e:af:97:04:e0:20:7b:97:fc:2b:31:ca:2a:47:f6: 1d:31:4b:0b:52:cd:c5:5a:5e:3f:8d:fa:d2:77:bf: 14:ec:0d:1d:1d:60:3b:7b:06:ad:bc:d7:a7:c9:3b: c3:ad:7a:fd:0c:84:e5:d3:6d:5d:a6:e2:81:6d:b3: 1c:56:30:65:dc:87:c0:e1:e8:4a:be:6c:39:0a:a7: 7c:7f:ed:f3:84:fd:f1:a4:13:6c:27:b9:c2:b3:11: b8:80:9a:54:b2:59:29:4a:8e:94:61:d7:96:2f:1a: 3e:d9:a9:10:47:30:53:92:0b:c2:9c:3a:5f:d8:02: fe:73:27:bb:45:a4:7c:d1:2a:de:d3:2a:69:04:a1: 61:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C0:47:30:58:23:85:86:D3:E5:FF:19:55:57:85:8D:85:0D:44:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:80:ea:9c:97:c3:85:5d:56:e8:23:9d:b8:8c:57:4f:f4:57: f6:37:54:cf:50:7b:5c:a3:1e:9e:bb:61:b2:0f:03:61:4b:20: b1:20:bc:fa:72:ec:0c:09:b2:6c:47:f5:c7:1c:3c:56:f0:6e: 99:ae:db:b5:0d:bb:c8:8d:36:f3:40:a6:db:4d:ce:9f:41:e2: 78:ed:cc:0a:49:90:ef:08:69:c6:a2:51:7c:b2:b5:a5:6d:31: 56:37:0e:73:93:b1:6e:44:c0:f9:81:c3:64:d5:c4:b0:64:6f: 78:68:18:e1:9d:6f:10:9d:a8:90:8d:1d:eb:c7:0a:be:57:b4: 66:8b:84:52:ec:73:7f:68:be:b3:05:86:88:da:bc:14:ae:37: 71:c3:45:3c:3a:e2:a0:e8:e5:9a:17:fe:1b:06:9a:c2:21:9f: 5c:84:15:3a:2c:40:65:ae:c7:30:18:c7:fa:e9:19:d6:09:19: 23:24:2f:2a:0a:91:d0:db:09:b0:21:c8:1a:6f:65:d3:39:05: fe:fe:7c:1a:5f:e3:98:0b:bc:c0:fd:f2:42:8a:60:44:94:de: 16:43:d2:f0:1d:5f:60:83:c8:04:10:e5:b2:e0:fd:e9:49:1a: 0f:fb:05:78:98:0d:82:63:13:f9:a9:83:5e:43:ea:84:58:84: 5b:56:44:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALro6EU+XUcHFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk M2NhZjE3Y2EtMjNhYy00NWQ0LWE3MzMtZGZjYWIxYzczNzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAsnziFQHow3eHGGHMpuqyHTuXpTlTv1ScGq hzOuIh+lv/4i+HAZW4pGuUKpSO3hvj5PpjqA+u/rtF68dOa6JTXDhQIl/qjmZMPa GAat23jMDN/+3MxqbATtN3EV526SLdJUk4vmeLHO66IaH5+9I37m+6FED3Fer5cE 4CB7l/wrMcoqR/YdMUsLUs3FWl4/jfrSd78U7A0dHWA7ewatvNenyTvDrXr9DITl 021dpuKBbbMcVjBl3IfA4ehKvmw5Cqd8f+3zhP3xpBNsJ7nCsxG4gJpUslkpSo6U YdeWLxo+2akQRzBTkgvCnDpf2AL+cye7RaR80Sre0yppBKFhjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfARzBYI4WG0+X/GVVXhY2FDURhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjhkYTUzOWYtYTk4OC0z MDM4LTgzMTYtMGM2MzEyNmRiMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmA6pyXw4VdVugjnbiMV0/0V/Y3VM9Qe1yjHp67YbIPA2FLILEgvPpy 7AwJsmxH9cccPFbwbpmu27UNu8iNNvNApttNzp9B4njtzApJkO8IacaiUXyytaVt MVY3DnOTsW5EwPmBw2TVxLBkb3hoGOGdbxCdqJCNHevHCr5XtGaLhFLsc39ovrMF hojavBSuN3HDRTw64qDo5ZoX/hsGmsIhn1yEFTosQGWuxzAYx/rpGdYJGSMkLyoK kdDbCbAhyBpvZdM5Bf7+fBpf45gLvMD98kKKYESU3hZD0vAdX2CDyAQQ5bLg/elJ Gg/7BXiYDYJjE/mpg15D6oRYhFtWRBA= -----END CERTIFICATE-----Generated at Thu Aug 7 04:34:36 2025 by rpki-client