$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa File: 21be8a54-9d15-3bcf-b328-06e1c263d460.roa (raw, json) Hash identifier: a32B//tjZ8TSvJvb+C0dvQ5bWiFtPgoa0Jn6jroPQjs= Subject key identifier: B9:E8:94:13:F9:B7:00:45:70:D7:72:94:03:B4:4B:76:03:E1:D1:FD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A71EB518111D0934331EEC000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 3356 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:51:81:11:d0:93:43:31:ee:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=bc580b9e-980c-4547-a0bc-7e169119420a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:0c:9a:02:d6:a2:14:9f:fb:bd:28:9e:20: ec:cc:6a:bf:fe:bd:d3:4a:c7:0b:ed:c4:8c:62:5a: bb:ff:a5:ab:ad:bf:4e:fb:b1:22:e1:91:a0:62:75: f6:86:0a:cc:47:38:54:9a:65:c5:82:d7:70:b4:4f: 17:12:bf:09:6b:c2:3c:61:c3:76:7e:8b:3c:d7:2a: fd:12:5e:76:f2:25:da:2b:2b:fa:ce:15:66:ba:fc: 8d:3f:73:f6:a0:e1:46:3c:27:a8:d9:3d:b7:48:a2: 26:16:e7:b2:f8:6e:1b:ec:88:0b:4b:eb:6b:71:ad: 6b:ed:5e:ff:cb:6a:d3:07:55:05:3d:21:7a:3b:26: 0b:5e:8d:90:7b:20:be:26:07:f2:f9:91:f8:a6:c7: e3:11:02:2c:8d:26:9b:13:95:3a:a8:7b:d5:1f:97: 8e:7d:2e:14:a0:fa:29:91:24:0c:6a:ee:dc:f9:13: e4:9d:15:2b:9c:83:90:71:8e:27:38:67:44:74:6e: 86:04:1e:46:24:11:b5:84:99:a6:ce:35:b8:1e:5a: 07:8e:88:c0:74:8c:c4:b7:4a:59:6f:60:aa:21:d9: 0a:3e:c1:b1:94:2e:3c:c7:60:f8:4b:17:8c:5f:0c: b1:24:82:db:17:9c:b5:83:7e:61:25:81:e1:c7:a9: 97:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E8:94:13:F9:B7:00:45:70:D7:72:94:03:B4:4B:76:03:E1:D1:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b5:fe:d4:a5:7e:c7:fc:4d:e0:5f:cf:06:df:12:39:3b:81: 65:43:60:5c:66:b4:89:fe:7a:c8:ec:00:e0:9c:d8:58:37:fb: ca:38:66:07:34:73:40:5e:29:63:a1:2e:d6:46:6a:ff:4e:e4: 4c:8b:55:72:41:13:f4:22:1e:a8:cd:86:be:88:b3:e7:be:0c: 04:1c:93:14:48:79:c8:fc:22:56:a8:68:41:41:b4:a6:87:a1: eb:83:86:e1:84:c0:c9:cb:2c:e6:55:0f:4d:69:6e:8f:7e:1c: b6:5f:f2:6c:24:43:4d:49:fe:6f:14:ad:e0:06:bc:cf:0b:1d: c4:5d:2b:c5:0b:29:3f:5c:f6:7e:45:6c:7a:ea:9a:ce:c9:c6: ef:5c:1a:be:a6:db:63:8a:03:6c:b3:7b:95:dc:13:d7:92:ad: 04:62:c0:6a:29:9a:a3:89:9c:3d:cb:4f:22:0f:a8:eb:bf:55: 34:6f:f3:4b:36:ae:64:83:32:56:a8:f0:2e:8b:b2:fc:36:87: 5e:09:88:83:3f:78:ce:cd:77:df:17:fe:35:b1:98:4b:89:b7: 7c:ef:55:22:14:00:65:ba:d8:62:8a:78:9c:44:fd:19:7f:4e: 07:39:93:7c:58:07:c8:22:45:c5:c5:80:71:5a:7c:3a:35:bf: 79:f6:da:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61GBEdCTQzHuwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk YmM1ODBiOWUtOTgwYy00NTQ3LWEwYmMtN2UxNjkxMTk0MjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDYMmgLWohSf+70oniDszGq//r3TSscL7cSM Ylq7/6Wrrb9O+7Ei4ZGgYnX2hgrMRzhUmmXFgtdwtE8XEr8Ja8I8YcN2fos81yr9 El528iXaKyv6zhVmuvyNP3P2oOFGPCeo2T23SKImFuey+G4b7IgLS+trca1r7V7/ y2rTB1UFPSF6OyYLXo2QeyC+Jgfy+ZH4psfjEQIsjSabE5U6qHvVH5eOfS4UoPop kSQMau7c+RPknRUrnIOQcY4nOGdEdG6GBB5GJBG1hJmmzjW4HloHjojAdIzEt0pZ b2CqIdkKPsGxlC48x2D4SxeMXwyxJILbF5y1g35hJYHhx6mX7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnolBP5twBFcNdylAO0S3YD4dH9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjFiZThhNTQtOWQxNS0z YmNmLWIzMjgtMDZlMWMyNjNkNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq1/tSlfsf8TeBfzwbfEjk7gWVDYFxmtIn+esjsAOCc2Fg3+8o4Zgc0 c0BeKWOhLtZGav9O5EyLVXJBE/QiHqjNhr6Is+e+DAQckxRIecj8IlaoaEFBtKaH oeuDhuGEwMnLLOZVD01pbo9+HLZf8mwkQ01J/m8UreAGvM8LHcRdK8ULKT9c9n5F bHrqms7Jxu9cGr6m22OKA2yze5XcE9eSrQRiwGopmqOJnD3LTyIPqOu/VTRv80s2 rmSDMlao8C6Lsvw2h14JiIM/eM7Nd98X/jWxmEuJt3zvVSIUAGW62GKKeJxE/Rl/ Tgc5k3xYB8giRcXFgHFafDo1v3n22sA= -----END CERTIFICATE-----Generated at Thu Jul 10 06:47:26 2025 by rpki-client