$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa File: 023b5472-f6c0-3095-80c3-7b022b15a339.roa (raw, json) Hash identifier: gsGNsTpfI0i5IP6TPe9VmaQzweCMyeFw9WnS6Cp7HDo= Subject key identifier: 77:4A:8D:51:29:35:34:DA:19:DF:B3:82:20:51:7E:7B:07:A7:7F:3F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A71EB519DC52F641DB44CBB00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 203 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:51:9d:c5:2f:64:1d:b4:4c:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=0a0dd6dd-a0e8-4884-9ef5-1733c0214a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:ee:cf:e0:a4:50:7f:c7:b8:3d:2a:ab:03: 2c:59:4f:1c:f0:3a:0d:73:ee:27:f1:87:f9:8d:15: 45:96:7f:af:a3:e1:42:f6:ea:26:d7:68:f9:98:81: 81:54:61:8f:e8:53:ad:53:94:c4:f5:43:4e:c2:6b: 40:f9:fc:db:23:64:0e:21:b7:0c:f8:06:d1:50:07: 7e:69:f7:9c:bd:6c:8a:52:b7:d5:fa:d1:f6:1d:61: bd:a1:e9:ac:5e:26:28:dc:ab:41:5b:49:97:9b:7d: f3:53:52:a1:b8:22:86:11:3b:e4:25:eb:e5:df:24: 85:b4:4a:de:0f:b4:bf:6f:04:8b:d5:52:ee:94:53: c0:87:a3:72:28:ee:44:58:31:a6:52:58:47:63:f7: 96:a7:4b:cf:55:07:ec:f3:f0:ee:67:7f:21:b2:34: 64:0f:a0:af:c1:af:96:13:aa:cf:68:0d:35:96:f5: ba:25:0d:2a:b9:f1:7d:6d:2c:af:3a:a4:20:1f:f9: 30:f7:1c:6b:39:71:df:18:c1:d4:d4:46:73:0e:07: d3:a2:5f:d4:5a:21:2b:04:b3:b9:fd:bd:b2:33:3f: e9:05:5d:a3:ab:77:75:67:32:6d:9c:f5:9f:93:b5: a9:fa:5b:51:11:7d:01:ba:9c:da:ab:7b:4f:f4:1c: a6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4A:8D:51:29:35:34:DA:19:DF:B3:82:20:51:7E:7B:07:A7:7F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:83:c6:3d:41:2b:e5:6c:fc:99:b3:2c:f4:f5:c2:4e:03:a8: 50:dc:33:75:49:c3:7a:0c:f1:6c:47:cf:fc:16:fc:77:7c:c5: 49:3f:ca:a6:32:e8:c0:bb:69:79:4b:30:cb:3f:c3:e2:0d:0e: 55:63:92:f0:63:84:4a:fe:37:5c:c1:17:17:55:75:95:44:16: 32:03:bb:c9:3e:e4:67:d6:d2:a7:ed:b1:60:86:2a:c4:cd:0f: 08:71:f1:c3:cc:3f:cc:e8:2b:8d:d0:1b:09:70:5b:bf:58:8c: e7:5b:ca:58:55:d8:a8:68:be:b4:31:9c:83:6b:8e:42:b4:12: 04:d3:01:54:53:32:66:79:2a:ab:bb:ca:00:3d:7a:aa:47:3e: f9:95:24:9e:6e:1a:3e:e4:c2:ae:33:6d:50:15:3c:4b:68:12: 21:de:a2:46:95:20:58:3c:2c:1a:bf:d4:36:f2:1d:86:1e:1b: aa:d7:27:b4:42:2a:a7:9f:5b:0f:9b:65:c2:58:81:6f:d9:d3: 39:31:2d:0d:0c:43:6b:af:5d:74:54:94:c3:ca:43:22:52:9e: 31:8f:b2:af:d6:f4:32:af:9b:70:7d:22:82:20:32:3c:f0:54: 0b:63:e6:cd:15:05:c4:72:fe:f9:22:25:f1:f3:e4:db:bd:b5: 83:94:47:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61GdxS9kHbRMuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MGEwZGQ2ZGQtYTBlOC00ODg0LTllZjUtMTczM2MwMjE0YTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygHuz+CkUH/HuD0qqwMsWU8c8DoNc+4n8Yf5 jRVFln+vo+FC9uom12j5mIGBVGGP6FOtU5TE9UNOwmtA+fzbI2QOIbcM+AbRUAd+ afecvWyKUrfV+tH2HWG9oemsXiYo3KtBW0mXm33zU1KhuCKGETvkJevl3ySFtEre D7S/bwSL1VLulFPAh6NyKO5EWDGmUlhHY/eWp0vPVQfs8/DuZ38hsjRkD6Cvwa+W E6rPaA01lvW6JQ0qufF9bSyvOqQgH/kw9xxrOXHfGMHU1EZzDgfTol/UWiErBLO5 /b2yMz/pBV2jq3d1ZzJtnPWfk7Wp+ltREX0Bupzaq3tP9BymxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdKjVEpNTTaGd+zgiBRfnsHp38/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDIzYjU0NzItZjZjMC0z MDk1LTgwYzMtN2IwMjJiMTVhMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeDxj1BK+Vs/JmzLPT1wk4DqFDcM3VJw3oM8WxHz/wW/Hd8xUk/yqYy 6MC7aXlLMMs/w+INDlVjkvBjhEr+N1zBFxdVdZVEFjIDu8k+5GfW0qftsWCGKsTN Dwhx8cPMP8zoK43QGwlwW79YjOdbylhV2KhovrQxnINrjkK0EgTTAVRTMmZ5Kqu7 ygA9eqpHPvmVJJ5uGj7kwq4zbVAVPEtoEiHeokaVIFg8LBq/1DbyHYYeG6rXJ7RC KqefWw+bZcJYgW/Z0zkxLQ0MQ2uvXXRUlMPKQyJSnjGPsq/W9DKvm3B9IoIgMjzw VAtj5s0VBcRy/vkiJfHz5Nu9tYOURzQ= -----END CERTIFICATE-----Generated at Wed Aug 20 20:21:59 2025 by rpki-client