$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa File: 5237c2a4-4861-320a-8193-cd92a08fc31f.roa (raw, json) Hash identifier: 9kKJudRZub9Z/cbrQ7JgqTYaTwoXsae8rJ+N0eNvRjY= Subject key identifier: BB:7E:7D:84:9E:5E:D4:33:04:43:13:8C:86:9A:B9:BA:B3:87:31:4A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A71EB51BEDCC1731CBCA98000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 3360 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:51:be:dc:c1:73:1c:bc:a9:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=d48f8ff5-2a2f-4d38-8b3b-8fd34e2bbf8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:a2:e2:db:f8:b2:be:ee:e2:19:f6:cc:b9: e3:eb:47:65:7d:67:4e:cc:08:6a:0f:45:3c:1e:52: 59:23:c5:18:09:7f:a7:87:ca:82:9b:8b:57:02:ea: 50:c1:96:1f:95:c9:5b:6e:c2:cd:f7:0a:4a:59:e1: d1:9b:4e:0c:d9:80:e3:cb:7f:16:7f:96:1d:8e:aa: 3b:33:6a:c0:b0:a8:ae:ab:65:b8:55:2c:d6:58:4e: a2:22:95:49:52:88:84:d2:ab:65:f2:ae:91:9b:14: 64:f8:cd:43:54:3f:48:48:ac:6d:04:35:6f:d7:96: 77:fe:a6:83:83:85:ae:29:4d:01:6a:c5:ad:b9:8e: 77:75:51:2b:5c:e1:98:13:4d:28:21:ce:e2:21:53: cb:a8:d1:cb:8b:e1:a6:24:5a:00:04:97:07:40:de: 65:32:f1:11:d0:c6:90:e0:fb:59:e4:26:23:20:4e: 1a:97:ee:96:ab:1c:57:30:c4:f7:31:2f:d7:fd:89: 31:1b:bc:68:ca:0f:09:78:f3:2e:7d:3e:04:93:90: f4:23:31:ec:43:d8:e8:32:c7:f3:55:ca:d2:ad:4e: 33:7f:ac:50:60:9f:15:f9:27:ad:64:46:88:b4:0c: 12:ae:38:e3:c6:b7:6e:72:cf:73:04:5c:24:5f:57: 17:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7E:7D:84:9E:5E:D4:33:04:43:13:8C:86:9A:B9:BA:B3:87:31:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:13:93:d3:76:e2:f2:c8:08:7c:2d:31:43:83:4f:7f:5c:a3: 06:a4:49:af:b9:e8:41:27:de:9f:43:5e:1e:d8:47:9a:05:95: 48:6c:8f:0f:51:c0:84:b4:73:2a:15:1d:c4:a2:d0:ba:27:42: 8e:74:69:3b:93:87:fa:52:ce:fc:af:dc:10:db:9a:df:82:5c: 5d:a0:1d:3d:36:6b:9b:14:ea:23:02:8a:2e:99:02:18:a6:8e: 2a:dd:34:01:a4:56:a8:71:05:e4:59:e9:96:2f:a7:3c:fe:21: d3:a3:bb:fd:43:c4:94:f6:b1:d0:9d:89:e5:12:10:a9:c8:6e: 8d:d6:11:48:24:5d:be:e3:41:43:fb:a5:c8:cb:9c:df:7b:48: b0:df:8f:58:2c:b7:49:63:27:f6:fb:68:28:77:f3:0a:f8:71: e7:5d:6d:58:7f:6e:d5:88:34:75:df:53:70:60:0c:e8:36:c7: 87:5f:05:10:c9:8e:1b:55:fc:ea:f2:59:e3:a1:8d:df:f7:e2: 9f:54:e5:d5:bb:22:e6:3c:d7:b1:ce:e6:2e:26:d3:fc:a5:f7: bd:59:10:75:6b:47:0b:f6:bf:15:ba:65:29:bd:8d:f6:a0:b4: ee:83:c7:fd:8b:36:49:cd:1c:96:a5:27:bc:33:62:9d:7d:88: d7:df:67:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61G+3MFzHLypgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ZDQ4ZjhmZjUtMmEyZi00ZDM4LThiM2ItOGZkMzRlMmJiZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd2i4tv4sr7u4hn2zLnj60dlfWdOzAhqD0U8 HlJZI8UYCX+nh8qCm4tXAupQwZYflclbbsLN9wpKWeHRm04M2YDjy38Wf5Ydjqo7 M2rAsKiuq2W4VSzWWE6iIpVJUoiE0qtl8q6RmxRk+M1DVD9ISKxtBDVv15Z3/qaD g4WuKU0BasWtuY53dVErXOGYE00oIc7iIVPLqNHLi+GmJFoABJcHQN5lMvER0MaQ 4PtZ5CYjIE4al+6WqxxXMMT3MS/X/YkxG7xoyg8JePMufT4Ek5D0IzHsQ9joMsfz VcrSrU4zf6xQYJ8V+SetZEaItAwSrjjjxrducs9zBFwkX1cXPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt+fYSeXtQzBEMTjIaaubqzhzFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTIzN2MyYTQtNDg2MS0z MjBhLTgxOTMtY2Q5MmEwOGZjMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMTk9N24vLICHwtMUODT39cowakSa+56EEn3p9DXh7YR5oFlUhsjw9R wIS0cyoVHcSi0LonQo50aTuTh/pSzvyv3BDbmt+CXF2gHT02a5sU6iMCii6ZAhim jirdNAGkVqhxBeRZ6ZYvpzz+IdOju/1DxJT2sdCdieUSEKnIbo3WEUgkXb7jQUP7 pcjLnN97SLDfj1gst0ljJ/b7aCh38wr4ceddbVh/btWINHXfU3BgDOg2x4dfBRDJ jhtV/OryWeOhjd/34p9U5dW7IuY817HO5i4m0/yl971ZEHVrRwv2vxW6ZSm9jfag tO6Dx/2LNknNHJalJ7wzYp19iNffZz4= -----END CERTIFICATE-----Generated at Sun Jul 27 01:45:16 2025 by rpki-client