$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa File: a25da213-0d7e-3813-aab1-7137753f8c5f.roa (raw, json) Hash identifier: gstkIgSSCpuECdN7d2M3p82Lq5zEu7+B9m6NVUNyTiA= Subject key identifier: D1:58:69:6A:AF:36:F6:25:35:7E:06:66:4E:75:47:DE:D4:8C:E4:42 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A0C056BAABA92FC134EFB1980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 203 IP address blocks: 20.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6b:aa:ba:92:fc:13:4e:fb:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=a5da78dd-1e97-46dd-a470-682630bc923c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:9e:3b:5f:28:0f:14:ac:f1:c2:ce:dd:8c: 9a:b6:34:76:4e:7f:d1:02:63:30:34:4e:a4:33:ae: 6e:6f:86:e5:cb:f1:7d:78:4c:b6:ea:1d:11:1a:c4: bd:cf:3e:9c:ee:b4:50:e1:22:85:7d:bf:c7:7a:7e: 37:84:a9:c7:e4:90:bf:4a:36:11:1f:4e:61:e3:72: c1:e5:05:ba:ae:fb:c0:1b:0f:92:ca:3e:72:7d:38: 3f:e1:79:8e:a7:8a:71:3e:b2:61:4f:fc:39:77:e7: 34:df:89:8e:6d:b1:0f:4b:bf:ee:ca:f2:d6:76:7b: 8d:9a:8d:9e:84:a6:d0:b0:36:80:39:c9:ee:04:52: 56:0f:28:59:04:b3:4e:5f:15:ff:0e:0b:7e:53:da: 62:da:c2:cb:33:1c:99:0b:49:ff:64:c3:e5:35:54: ad:41:b1:ab:2b:c3:8b:b5:e5:26:9f:17:62:42:50: 95:20:c3:50:c5:44:eb:f5:9f:5e:a9:af:88:90:18: c9:30:8b:77:3d:60:ac:25:c5:ec:98:4c:d3:eb:81: 52:02:63:c5:cf:06:72:9c:a4:78:07:7f:5d:73:ae: 65:41:d8:fd:ed:1a:7e:d8:50:62:9d:a0:a2:9e:e0: 41:ac:dc:32:bd:2b:c3:3a:5d:04:f7:a4:21:e1:9b: a8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:58:69:6A:AF:36:F6:25:35:7E:06:66:4E:75:47:DE:D4:8C:E4:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a25da213-0d7e-3813-aab1-7137753f8c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c0:e4:f1:eb:a2:5d:39:de:1c:31:5e:b9:2d:63:09:2c:e4: 04:cb:3f:26:5a:a8:55:14:16:2d:2c:9b:07:f0:ca:3e:5c:26: 64:a7:49:6c:fe:a2:83:47:db:55:09:a3:da:6f:92:2a:b7:ea: 4c:0f:1d:eb:13:1c:75:6d:64:bf:2c:9a:b4:ac:9e:12:84:a7: 34:0f:55:1b:63:cb:0c:1d:de:bf:d6:4f:f5:99:b9:88:93:66: 27:32:e3:8a:ec:f7:8c:3f:6b:40:ea:36:a0:22:d5:7f:8f:7b: 1e:d1:6e:b8:58:20:bf:05:b6:30:10:a6:b0:01:12:fb:73:f5: d3:cc:4b:61:65:55:44:4b:b9:5e:6e:a6:43:c2:f8:69:5e:83: 4b:d4:e6:99:62:db:8f:17:7a:b3:3f:ba:4c:9d:dc:21:c9:91: c7:dd:20:5a:e2:d2:0f:81:c4:61:87:fc:34:b2:ab:0d:3e:97: f5:de:3e:73:97:1b:32:b2:a0:8d:20:49:d9:46:37:bd:26:41: 23:98:c1:50:19:f5:68:07:f4:f4:cf:51:09:34:44:e2:3f:9f: 47:83:6a:4b:91:63:03:6d:b3:51:fa:a2:ae:ad:8f:13:2b:bb: d9:f8:11:39:0a:11:31:5e:9c:a5:d0:2c:03:49:05:96:a6:b1: ca:75:55:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWuqupL8E077GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YTVkYTc4ZGQtMWU5Ny00NmRkLWE0NzAtNjgyNjMwYmM5MjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZqeO18oDxSs8cLO3YyatjR2Tn/RAmMwNE6k M65ub4bly/F9eEy26h0RGsS9zz6c7rRQ4SKFfb/Hen43hKnH5JC/SjYRH05h43LB 5QW6rvvAGw+Syj5yfTg/4XmOp4pxPrJhT/w5d+c034mObbEPS7/uyvLWdnuNmo2e hKbQsDaAOcnuBFJWDyhZBLNOXxX/Dgt+U9pi2sLLMxyZC0n/ZMPlNVStQbGrK8OL teUmnxdiQlCVIMNQxUTr9Z9eqa+IkBjJMIt3PWCsJcXsmEzT64FSAmPFzwZynKR4 B39dc65lQdj97Rp+2FBinaCinuBBrNwyvSvDOl0E96Qh4Zuo1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFYaWqvNvYlNX4GZk51R97UjORCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTI1ZGEyMTMtMGQ3ZS0z ODEzLWFhYjEtNzEzNzc1M2Y4YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFInYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTA5PHrol053hwxXrktYwks5ATLPyZaqFUUFi0smwfwyj5cJmSnSWz+ ooNH21UJo9pvkiq36kwPHesTHHVtZL8smrSsnhKEpzQPVRtjywwd3r/WT/WZuYiT Zicy44rs94w/a0DqNqAi1X+Pex7RbrhYIL8FtjAQprABEvtz9dPMS2FlVURLuV5u pkPC+Gleg0vU5pli248XerM/ukyd3CHJkcfdIFri0g+BxGGH/DSyqw0+l/XePnOX GzKyoI0gSdlGN70mQSOYwVAZ9WgH9PTPUQk0ROI/n0eDakuRYwNts1H6oq6tjxMr u9n4ETkKETFenKXQLANJBZamscp1Vak= -----END CERTIFICATE-----Generated at Sat Jun 7 00:28:19 2025 by rpki-client