$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa File: 3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa (raw, json) Hash identifier: 0W/n3iG+/YgoChZFaXYb1PzMxc/36fboZnNI5e27cyc= Subject key identifier: 2D:AA:87:B9:50:42:22:97:07:5E:29:9B:EF:95:53:E8:09:CF:77:A8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900BBDABA983183CA059C00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 3356 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:bb:da:ba:98:31:83:ca:05:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=17a5e470-733b-4c88-a702-7d551d9be153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:08:23:9a:c0:42:2b:65:01:29:05:58:61:fd: 1d:a7:99:22:85:02:39:99:2a:2a:a4:c2:58:a8:4d: 86:16:a2:cb:42:44:7d:54:38:40:10:73:71:6a:a1: 41:68:45:9d:7f:e6:c1:85:00:28:32:51:18:42:2b: 56:58:1c:8f:10:28:81:de:24:ca:22:93:8d:2d:42: 00:15:72:a9:3f:6f:9e:1b:d1:71:e6:d9:6d:ba:cb: 9f:dd:3d:9d:58:7e:d9:48:fa:2c:fd:27:f9:58:70: 5b:c3:d9:bd:0c:98:b2:0d:5b:86:54:f0:29:c6:01: 2e:fb:d5:3f:d6:bf:3a:f9:55:e7:81:0d:22:c2:2d: 60:96:e3:a2:94:73:23:28:51:f5:bd:1d:1f:5b:9d: 75:1d:93:fa:84:c2:b5:3f:b4:22:64:1f:09:3a:ca: e0:64:dd:4d:b2:4d:dc:fe:eb:20:f0:bf:bd:a6:ea: 3a:72:b6:57:b6:e4:e2:f1:18:e0:ad:54:21:a1:ff: 43:fe:ac:7b:5c:04:5b:56:e9:86:e5:24:17:46:0e: 9a:a6:07:8d:32:b4:1e:1d:89:aa:2f:8a:f9:cb:a4: d0:a8:6c:a7:75:15:53:bf:d5:1d:e5:c0:03:0a:46: 5f:60:b6:6d:ff:a4:e5:9a:e5:d1:c2:12:0a:87:06: 17:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AA:87:B9:50:42:22:97:07:5E:29:9B:EF:95:53:E8:09:CF:77:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a3:00:fe:15:94:65:6e:96:0a:75:7e:a3:91:24:ec:20:cf: fa:c2:1b:4a:ee:08:05:78:d8:7d:14:57:07:8a:7c:f7:a0:4c: a6:6d:3d:4f:c0:40:c5:31:e5:4f:69:c0:66:3b:15:56:fa:0b: d8:ab:27:24:b1:06:e5:dc:9a:b1:87:55:12:c2:b0:28:0d:a7: 2e:08:30:da:04:46:56:1f:7f:0a:38:58:71:4f:b9:8b:63:e5: 59:61:c1:a9:1f:60:7a:c4:ab:41:31:ef:35:b5:66:d9:6c:cf: e5:b3:29:a6:c4:05:4a:b8:4b:51:31:61:0d:b1:dc:bd:02:19: ca:57:39:ba:6a:4a:5d:91:85:36:09:e0:d0:06:66:8e:fa:d3: 47:7b:07:90:eb:49:60:e7:1e:31:2a:d0:3d:b5:05:b3:15:9b: db:bc:28:bf:0c:c8:d8:2e:35:09:8d:90:39:37:2a:14:5c:ec: 3f:4c:0b:ed:9f:95:48:c4:fb:02:31:26:87:a4:b4:30:73:4f: 31:3b:66:de:63:47:51:17:9f:78:e0:45:0e:bb:ce:55:08:39: 73:b3:b9:6d:61:4e:ee:c1:1e:4c:4d:36:f5:ac:a0:e7:ef:36: 55:87:b5:91:37:b3:15:62:18:d1:9a:e3:6a:7a:d7:81:b9:e7: 40:98:1f:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALvaupgxg8oFnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MTdhNWU0NzAtNzMzYi00Yzg4LWE3MDItN2Q1NTFkOWJlMTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AgjmsBCK2UBKQVYYf0dp5kihQI5mSoqpMJY qE2GFqLLQkR9VDhAEHNxaqFBaEWdf+bBhQAoMlEYQitWWByPECiB3iTKIpONLUIA FXKpP2+eG9Fx5tltusuf3T2dWH7ZSPos/Sf5WHBbw9m9DJiyDVuGVPApxgEu+9U/ 1r86+VXngQ0iwi1gluOilHMjKFH1vR0fW511HZP6hMK1P7QiZB8JOsrgZN1Nsk3c /usg8L+9puo6crZXtuTi8RjgrVQhof9D/qx7XARbVumG5SQXRg6apgeNMrQeHYmq L4r5y6TQqGyndRVTv9Ud5cADCkZfYLZt/6TlmuXRwhIKhwYXuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2qh7lQQiKXB14pm++VU+gJz3eoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2JmMDg5NjktMWEyYS0z MDk5LThmNjgtYWQxZjRjMGY3ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqjAP4VlGVulgp1fqORJOwgz/rCG0ruCAV42H0UVweKfPegTKZtPU/A QMUx5U9pwGY7FVb6C9irJySxBuXcmrGHVRLCsCgNpy4IMNoERlYffwo4WHFPuYtj 5VlhwakfYHrEq0Ex7zW1Ztlsz+WzKabEBUq4S1ExYQ2x3L0CGcpXObpqSl2RhTYJ 4NAGZo7600d7B5DrSWDnHjEq0D21BbMVm9u8KL8MyNguNQmNkDk3KhRc7D9MC+2f lUjE+wIxJoektDBzTzE7Zt5jR1EXn3jgRQ67zlUIOXOzuW1hTu7BHkxNNvWsoOfv NlWHtZE3sxViGNGa42p614G550CYHww= -----END CERTIFICATE-----Generated at Thu Jul 31 02:10:22 2025 by rpki-client