$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3c1034bb-6f35-33bc-bfd1-327b7c6a59bf.roa File: 3c1034bb-6f35-33bc-bfd1-327b7c6a59bf.roa (raw, json) Hash identifier: 92GB9DUDFS9GXBpPSxDfdFrMpmX06loylNOD2trBOFQ= Subject key identifier: 3D:9B:25:0A:DC:DA:2D:9D:3D:A5:E9:BF:A7:D4:6E:EE:B7:DE:D5:41 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A549B211BE6DEE23BCC85FA80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3c1034bb-6f35-33bc-bfd1-327b7c6a59bf.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 202 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:21:1b:e6:de:e2:3b:cc:85:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=0951cfb2-b11a-4fe7-b16e-85189f140905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:1f:cb:5e:c1:6d:a7:d2:ab:ee:a9:d8:fa: 54:1b:b1:87:29:09:51:47:c6:65:1a:ca:2d:35:ce: a1:b5:5e:37:8e:ec:34:39:e8:e5:ec:7e:d0:08:ca: 80:2d:07:42:ff:91:6e:fb:c9:2e:da:5d:84:e5:13: cd:73:f7:20:71:e1:2e:51:a3:d8:92:00:aa:30:5e: ad:b7:c7:ef:5c:7e:31:18:71:66:88:ae:3d:65:e1: fb:35:0f:5e:bc:17:3d:4c:ca:1d:8e:7f:20:de:4a: 45:11:b3:ee:1f:ef:35:32:74:fd:cf:21:bb:ec:56: 63:b8:65:31:52:78:3c:01:b1:32:c6:71:c0:7e:a8: b1:de:02:08:2b:84:3d:bd:e4:52:e8:e8:91:a9:1b: 0c:46:19:4a:cd:dc:46:ea:e4:34:8a:ce:f6:78:2b: e9:3d:f9:e6:c8:6b:bf:57:f3:98:02:4e:00:08:7c: eb:ca:f7:c5:3a:05:94:d9:92:64:a4:56:05:79:1d: d1:35:3f:2d:a2:99:2b:56:a4:e7:45:f5:8b:a6:06: 0b:c7:4d:84:5a:a2:52:3f:1a:56:fa:15:92:62:d2: b4:e3:dc:b5:2d:d6:b4:52:09:5b:08:e7:01:6c:41: 94:86:5e:26:16:b7:1c:e5:95:35:d5:04:bf:63:7c: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9B:25:0A:DC:DA:2D:9D:3D:A5:E9:BF:A7:D4:6E:EE:B7:DE:D5:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3c1034bb-6f35-33bc-bfd1-327b7c6a59bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:87:0e:84:53:70:2b:32:cd:8b:72:6c:f7:e2:10:19:66:f5: 75:d1:da:9e:25:45:40:71:df:1a:92:cc:56:d2:60:9f:17:2b: c1:11:2d:ad:47:cd:08:aa:08:c0:e6:97:54:18:db:42:2b:84: 21:f1:65:07:7a:9e:c3:76:c5:97:ea:70:1f:76:92:6c:bf:3e: 7b:69:2a:b5:55:b1:86:9c:07:47:32:58:c9:b8:99:9c:18:a1: a0:9e:3f:5e:47:2d:cb:a3:fc:da:ee:50:96:63:c4:a5:cc:02: 19:08:4e:21:a3:67:11:d9:a4:1e:52:56:28:36:aa:ce:99:6d: ef:96:fe:32:a9:dc:98:5e:c2:f7:9b:1e:2e:8d:12:d9:5a:ff: c9:6a:e1:ee:dc:0b:d1:07:c2:b1:cc:b3:58:53:ab:1b:ea:4d: 11:c0:d3:e9:06:76:7c:2b:e5:8c:30:81:8b:71:3a:ea:69:d3: 1a:21:4d:c4:08:95:5a:bd:a0:66:8d:da:8e:7b:6b:6a:8d:9a: 15:f5:1e:0e:fa:59:79:f9:f3:af:2d:15:57:3a:97:fc:10:0c: 3d:9c:35:cd:50:74:4e:64:08:3d:33:92:dc:bb:78:e4:0e:c3: 99:87:4e:7a:9f:ab:ce:7d:ff:fa:09:d9:a9:be:42:bb:bf:2b: 19:70:79:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmyEb5t7iO8yF+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MDk1MWNmYjItYjExYS00ZmU3LWIxNmUtODUxODlmMTQwOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzywfy17BbafSq+6p2PpUG7GHKQlRR8ZlGsot Nc6htV43juw0Oejl7H7QCMqALQdC/5Fu+8ku2l2E5RPNc/cgceEuUaPYkgCqMF6t t8fvXH4xGHFmiK49ZeH7NQ9evBc9TModjn8g3kpFEbPuH+81MnT9zyG77FZjuGUx Ung8AbEyxnHAfqix3gIIK4Q9veRS6OiRqRsMRhlKzdxG6uQ0is72eCvpPfnmyGu/ V/OYAk4ACHzryvfFOgWU2ZJkpFYFeR3RNT8topkrVqTnRfWLpgYLx02EWqJSPxpW +hWSYtK049y1Lda0UglbCOcBbEGUhl4mFrcc5ZU11QS/Y3yb8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2bJQrc2i2dPaXpv6fUbu633tVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2MxMDM0YmItNmYzNS0z M2JjLWJmZDEtMzI3YjdjNmE1OWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOHDoRTcCsyzYtybPfiEBlm9XXR2p4lRUBx3xqSzFbSYJ8XK8ERLa1H zQiqCMDml1QY20IrhCHxZQd6nsN2xZfqcB92kmy/PntpKrVVsYacB0cyWMm4mZwY oaCeP15HLcuj/NruUJZjxKXMAhkITiGjZxHZpB5SVig2qs6Zbe+W/jKp3Jhewveb Hi6NEtla/8lq4e7cC9EHwrHMs1hTqxvqTRHA0+kGdnwr5YwwgYtxOupp0xohTcQI lVq9oGaN2o57a2qNmhX1Hg76WXn5868tFVc6l/wQDD2cNc1QdE5kCD0zkty7eOQO w5mHTnqfq859//oJ2am+Qru/KxlweUo= -----END CERTIFICATE-----Generated at Thu Jul 10 15:37:27 2025 by rpki-client