$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa File: 38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa (raw, json) Hash identifier: sIK+AKM/uUpSbtN6AvWIv6g36SVS9P15IH+GWgRwYBc= Subject key identifier: 73:3B:45:E9:91:51:44:8D:8B:4B:2C:C1:84:7F:8F:11:47:58:B6:63 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A71EB51CF1A7632AC058EBE80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 3356 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:51:cf:1a:76:32:ac:05:8e:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=34369bbe-6325-439d-9f41-e2e5795a0cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:22:42:83:35:5d:b3:0c:80:f9:c1:42:4b:0f: 24:eb:3d:69:5f:e5:40:9d:58:e0:11:92:38:76:18: e6:28:19:92:5b:20:1d:bc:44:22:c9:51:cd:97:8d: 51:46:ca:40:f3:de:45:eb:b5:ac:96:cd:a7:38:55: 5f:86:3d:c4:1d:0a:45:c0:cd:ac:c3:34:fc:13:7d: 7b:09:92:0f:95:f9:ec:cd:f3:06:af:2f:8c:00:28: 34:e5:6a:8f:a0:0a:6a:8c:5f:34:30:71:60:23:80: dc:55:b8:fc:be:87:61:c1:c0:e7:e1:b5:1d:ce:75: 23:36:52:89:42:e1:7c:33:44:9a:8f:48:16:b2:3a: 79:32:e3:0d:80:ad:d7:30:20:7e:65:02:08:d1:40: 6e:ca:47:9b:f6:f5:f9:23:a0:34:13:f0:6d:82:27: 58:a8:7c:db:7f:cf:64:2a:d5:20:03:6d:0d:f1:1b: 26:ec:77:63:f4:f8:cc:2c:0d:8f:29:42:58:37:76: 92:03:82:81:cc:3b:02:e9:5a:11:21:e6:cb:a8:05: 92:4e:fc:fd:02:b3:cd:1b:6f:02:d7:d7:17:94:bd: 01:f8:65:23:88:1c:c3:75:cb:47:0b:75:e6:49:39: 0a:0c:ac:1b:19:b6:23:93:be:2e:12:36:49:80:f8: 40:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3B:45:E9:91:51:44:8D:8B:4B:2C:C1:84:7F:8F:11:47:58:B6:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:5f:15:0c:bd:49:be:a5:17:af:8f:ea:57:1b:b4:ba:d2:58: 8d:93:1e:bf:c2:82:86:cc:4b:1a:2b:07:74:43:eb:29:03:5c: d5:55:fd:47:ad:6e:17:5a:63:4e:cb:32:27:d5:0f:7e:fc:1b: ff:6b:be:10:f4:36:df:ec:df:9c:d7:ca:2a:29:65:a6:72:4a: 0e:c2:de:9d:98:8f:0f:4a:3d:e4:f8:46:29:db:03:ab:07:27: 88:79:56:ae:3f:23:eb:08:4d:c4:a6:48:fe:d9:73:07:2d:1a: 3e:db:f9:81:07:f1:db:57:35:73:ba:e7:33:5a:ca:ae:cd:8c: e8:bc:eb:8f:27:5e:72:9a:77:38:23:f1:a7:b0:15:a9:05:a8: f6:46:2b:0f:69:0b:0e:76:bf:72:e6:8e:eb:25:db:80:ba:8b: b3:c2:d3:fc:ba:95:85:fe:07:ed:91:81:7b:7d:cf:db:83:e3: 24:59:08:fe:ef:bf:5f:51:55:26:1a:8a:59:bb:60:ac:69:bf: ac:6f:ed:6d:19:05:3c:8b:99:f2:0e:8e:bc:75:49:d4:33:5a: 75:38:3e:d9:fd:c5:7a:d2:16:68:48:80:ab:c6:7c:ad:a8:3b: 7e:65:ee:69:cf:79:b0:9f:f1:55:1e:ed:51:1c:b6:f2:88:03: 05:23:1b:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61HPGnYyrAWOvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MzQzNjliYmUtNjMyNS00MzlkLTlmNDEtZTJlNTc5NWEwY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSJCgzVdswyA+cFCSw8k6z1pX+VAnVjgEZI4 dhjmKBmSWyAdvEQiyVHNl41RRspA895F67Wsls2nOFVfhj3EHQpFwM2swzT8E317 CZIPlfnszfMGry+MACg05WqPoApqjF80MHFgI4DcVbj8vodhwcDn4bUdznUjNlKJ QuF8M0Saj0gWsjp5MuMNgK3XMCB+ZQII0UBuykeb9vX5I6A0E/BtgidYqHzbf89k KtUgA20N8Rsm7Hdj9PjMLA2PKUJYN3aSA4KBzDsC6VoRIebLqAWSTvz9ArPNG28C 19cXlL0B+GUjiBzDdctHC3XmSTkKDKwbGbYjk74uEjZJgPhARQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM7RemRUUSNi0sswYR/jxFHWLZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhhNDk4ZmYtZjZmNi0z ZDU0LTliZmEtOGY3ZmYyMjZmYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtfFQy9Sb6lF6+P6lcbtLrSWI2THr/CgobMSxorB3RD6ykDXNVV/Uet bhdaY07LMifVD378G/9rvhD0Nt/s35zXyiopZaZySg7C3p2Yjw9KPeT4RinbA6sH J4h5Vq4/I+sITcSmSP7ZcwctGj7b+YEH8dtXNXO65zNayq7NjOi8648nXnKadzgj 8aewFakFqPZGKw9pCw52v3Lmjusl24C6i7PC0/y6lYX+B+2RgXt9z9uD4yRZCP7v v19RVSYailm7YKxpv6xv7W0ZBTyLmfIOjrx1SdQzWnU4Ptn9xXrSFmhIgKvGfK2o O35l7mnPebCf8VUe7VEctvKIAwUjG3I= -----END CERTIFICATE-----Generated at Thu Jul 10 06:41:53 2025 by rpki-client