$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa File: 032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa (raw, json) Hash identifier: cjyy47mWBa0rg6THsmSNjzL4PQKEdARNlDMa0x53EG0= Subject key identifier: DF:72:34:97:FC:32:F7:F7:B1:1C:91:E8:53:33:76:6A:7D:FF:46:70 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849F9DFDD3AF3361D7601F861C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 203 IP address blocks: 20.139.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:dd:3a:f3:36:1d:76:01:f8:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=1af3a0ff-6dbe-4864-84aa-dd4a286a8f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:59:3b:22:7a:55:7b:1e:8e:b0:1e:6f:8f:da: 92:8d:da:2d:55:22:7a:a7:6d:de:c4:df:aa:c3:26: c2:e1:8a:cb:90:57:1c:da:7c:e4:c4:d4:ce:54:b1: f7:b9:03:c7:04:8c:2d:b5:af:01:33:dd:1e:2c:a9: 71:12:3c:0d:15:7d:8f:0f:c3:c0:07:f3:a2:49:66: 4b:b8:03:9e:96:df:f6:c8:ec:c3:33:17:11:5e:24: ea:b5:a8:48:49:fe:bf:2c:09:ee:45:c7:7c:46:90: d2:c8:b5:d1:70:ca:72:df:fd:f5:a9:5f:cd:cd:df: 29:e9:ad:3d:a1:31:cc:ac:29:57:9d:7d:8f:45:c1: 00:f0:a1:84:84:80:18:6c:0e:f9:75:39:f8:77:17: 86:dd:5d:5b:de:2d:6b:84:f4:c5:1e:f6:0d:29:07: cb:a5:28:01:71:2e:bd:60:e0:44:6d:44:53:7f:75: ee:ca:3e:8a:4a:83:fc:5c:da:b7:f9:66:b7:e8:b3: e4:24:bb:3b:04:2e:b8:19:e3:07:4f:6d:1f:ae:86: b1:3e:03:4d:80:46:2b:69:8e:31:a0:72:a8:3c:7f: 7d:28:77:8e:79:fb:1b:74:0b:df:c9:68:2a:72:cc: 61:4a:84:86:24:cd:67:07:da:e0:39:41:d0:b5:c3: a2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:72:34:97:FC:32:F7:F7:B1:1C:91:E8:53:33:76:6A:7D:FF:46:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:fb:64:72:35:2b:c8:bb:5e:81:fc:26:3c:6e:8e:87:0d:fa: 9e:0a:3d:9b:e1:50:eb:d4:3b:f8:69:99:77:c8:f1:3a:4a:39: 56:73:e5:a5:a9:35:dd:7b:49:69:a2:35:9d:0c:c1:86:43:ee: 8d:87:f8:e9:3b:b7:75:2c:2f:d8:c5:ab:92:d2:c1:5f:68:6d: 86:69:a9:98:19:98:1e:08:79:ba:3f:21:e3:1e:2b:fd:a6:a8: 58:47:ee:7a:f5:4e:08:8d:67:64:a3:87:72:11:1c:b3:dd:f0: 53:da:06:f4:32:b1:52:24:9a:ec:a9:51:3d:18:1e:aa:54:0d: 11:08:43:d0:63:be:d3:a1:25:ef:fa:40:5e:61:40:da:b2:e9: cc:bd:e5:65:46:64:cb:f5:5c:0e:55:54:20:76:e4:e4:e6:89: e9:d9:7c:04:0f:98:48:bf:e3:70:2a:71:d1:ac:06:5f:06:13: 33:75:94:4c:83:ae:aa:34:47:c9:a2:36:47:98:09:6e:f5:88: ee:ec:d7:b4:c9:c3:e7:70:6f:f3:df:8f:95:35:a8:33:84:49: 82:e1:f2:14:b3:72:68:69:a5:14:17:a5:44:db:c9:1b:d8:96: 1d:2b:29:2d:e2:9e:ca:4d:c1:d4:fc:63:bb:15:02:89:1d:4e: c1:66:34:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539068zYddgH4YcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk MWFmM2EwZmYtNmRiZS00ODY0LTg0YWEtZGQ0YTI4NmE4ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlk7InpVex6OsB5vj9qSjdotVSJ6p23exN+q wybC4YrLkFcc2nzkxNTOVLH3uQPHBIwtta8BM90eLKlxEjwNFX2PD8PAB/OiSWZL uAOelt/2yOzDMxcRXiTqtahISf6/LAnuRcd8RpDSyLXRcMpy3/31qV/Nzd8p6a09 oTHMrClXnX2PRcEA8KGEhIAYbA75dTn4dxeG3V1b3i1rhPTFHvYNKQfLpSgBcS69 YOBEbURTf3Xuyj6KSoP8XNq3+Wa36LPkJLs7BC64GeMHT20froaxPgNNgEYraY4x oHKoPH99KHeOefsbdAvfyWgqcsxhSoSGJM1nB9rgOUHQtcOiBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9yNJf8Mvf3sRyR6FMzdmp9/0ZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDMyZWM3YjUtNTBiYy0z YTllLWJhZjAtNmJkNGQ4YWMxZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG77ZHI1K8i7XoH8JjxujocN+p4KPZvhUOvUO/hpmXfI8TpKOVZz5aWp Nd17SWmiNZ0MwYZD7o2H+Ok7t3UsL9jFq5LSwV9obYZpqZgZmB4Iebo/IeMeK/2m qFhH7nr1TgiNZ2Sjh3IRHLPd8FPaBvQysVIkmuypUT0YHqpUDREIQ9BjvtOhJe/6 QF5hQNqy6cy95WVGZMv1XA5VVCB25OTmienZfAQPmEi/43AqcdGsBl8GEzN1lEyD rqo0R8miNkeYCW71iO7s17TJw+dwb/Pfj5U1qDOESYLh8hSzcmhppRQXpUTbyRvY lh0rKS3inspNwdT8Y7sVAokdTsFmNLA= -----END CERTIFICATE-----Generated at Fri Jun 6 12:22:04 2025 by rpki-client