$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa File: b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa (raw, json) Hash identifier: 0NtfAY+rFV6FKfYGRspeyCibN40zGXfNmlzn1a/8E8A= Subject key identifier: 4C:50:FD:97:BC:9B:F4:75:46:74:20:E9:8E:C2:62:77:AC:B4:CB:53 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D42FB42AF6E186305C1B4300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 3360 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b4:2a:f6:e1:86:30:5c:1b:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=a8cd3df9-bc06-4cf0-8a81-113bbd51dc98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:13:1f:57:a6:b8:5a:55:cc:44:cd:c4:b5: 6f:59:0e:3d:8d:c4:4e:a4:91:53:0f:9f:03:4c:e7: 61:9e:01:1d:a3:38:f0:20:cf:d9:ae:a2:fc:2e:8a: 06:9a:f3:f9:df:53:37:66:21:8a:16:dd:af:aa:0f: 59:ad:7e:31:f0:1e:39:85:d3:3a:7d:09:54:18:0d: f7:af:46:70:e0:4d:13:47:61:1c:2e:46:88:c4:3c: 4d:c9:9d:da:25:3c:a8:b5:81:37:25:9f:e8:ba:42: 67:52:ba:8a:63:c1:72:9c:98:f8:7c:f5:d2:0d:82: 3d:9b:f4:c8:a0:1f:44:d8:d3:1d:d2:22:bc:99:f7: 05:e7:68:f7:30:41:1c:e5:1a:e1:32:94:1b:b2:76: bb:49:4a:59:a9:08:6d:a5:a8:ee:09:bb:c2:71:51: 3d:16:c3:57:f6:5a:81:cc:1e:7e:64:12:bb:0a:c3: 81:86:8a:0c:5a:21:3d:52:da:28:ca:c3:e2:bd:29: 8f:f5:8a:f6:49:e5:34:9f:0d:71:88:b9:9c:cc:5a: 83:04:50:fd:dd:82:8b:7c:ab:1d:73:48:8c:da:48: c5:5b:73:11:8a:6c:df:e5:07:f0:46:26:3b:57:99: 97:2c:d3:6d:6c:15:c6:66:64:9f:d2:1d:0c:7c:f6: 11:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:50:FD:97:BC:9B:F4:75:46:74:20:E9:8E:C2:62:77:AC:B4:CB:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:27:16:6d:a9:0a:ac:04:b5:c4:1a:b4:ae:d1:a7:30:74:92: 9d:00:54:66:22:ab:af:35:ae:91:86:79:a0:1c:9c:3a:74:8c: de:ca:18:69:f2:77:8a:6d:a9:74:e1:47:9d:a8:a3:83:ea:84: d4:da:81:b1:0e:56:d9:c7:34:5f:f5:64:01:ff:79:d8:6a:32: c4:77:bf:5a:d9:df:7b:39:9b:8d:5d:a5:3e:10:f5:d3:d6:01: d1:28:0c:8d:fe:da:30:4d:46:c5:48:64:de:73:0e:6a:b9:b4: 9a:53:a7:a9:2a:3c:e6:84:fa:d9:bf:03:32:13:39:28:6b:64: 34:c8:0f:23:ca:af:92:6f:d7:d1:05:55:1b:95:5e:56:b6:fb: 46:ec:63:0b:af:9f:c8:b9:69:91:d6:67:0c:bb:d0:16:f5:30: 41:34:f6:13:6e:39:55:e9:98:f8:a9:95:70:dd:e6:3b:aa:c5: 3b:0d:b6:63:db:fc:56:8f:a9:92:d0:8a:eb:30:eb:15:08:d6: 40:36:1d:c2:65:82:9c:15:96:d0:04:d4:7b:63:14:93:e4:80: 60:5b:ff:bb:d1:5d:8d:ae:1a:66:30:2d:6e:e4:61:bb:88:39: c2:81:19:59:6f:6f:18:57:c2:43:73:d5:26:93:1a:b6:34:7f: d3:9e:86:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7Qq9uGGMFwbQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YThjZDNkZjktYmMwNi00Y2YwLThhODEtMTEzYmJkNTFkYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b4TH1emuFpVzETNxLVvWQ49jcROpJFTD58D TOdhngEdozjwIM/ZrqL8LooGmvP531M3ZiGKFt2vqg9ZrX4x8B45hdM6fQlUGA33 r0Zw4E0TR2EcLkaIxDxNyZ3aJTyotYE3JZ/oukJnUrqKY8FynJj4fPXSDYI9m/TI oB9E2NMd0iK8mfcF52j3MEEc5RrhMpQbsna7SUpZqQhtpajuCbvCcVE9FsNX9lqB zB5+ZBK7CsOBhooMWiE9UtooysPivSmP9Yr2SeU0nw1xiLmczFqDBFD93YKLfKsd c0iM2kjFW3MRimzf5QfwRiY7V5mXLNNtbBXGZmSf0h0MfPYRywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExQ/Ze8m/R1RnQg6Y7CYnestMtTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjlmMjAyNGMtZGE1Yy0z ZTVlLWIyMTUtYTVhZWZiZTJmMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYnFm2pCqwEtcQatK7RpzB0kp0AVGYiq681rpGGeaAcnDp0jN7KGGny d4ptqXThR52oo4PqhNTagbEOVtnHNF/1ZAH/edhqMsR3v1rZ33s5m41dpT4Q9dPW AdEoDI3+2jBNRsVIZN5zDmq5tJpTp6kqPOaE+tm/AzITOShrZDTIDyPKr5Jv19EF VRuVXla2+0bsYwuvn8i5aZHWZwy70Bb1MEE09hNuOVXpmPiplXDd5juqxTsNtmPb /FaPqZLQiusw6xUI1kA2HcJlgpwVltAE1HtjFJPkgGBb/7vRXY2uGmYwLW7kYbuI OcKBGVlvbxhXwkNz1SaTGrY0f9OehhM= -----END CERTIFICATE-----Generated at Sat Jun 7 13:52:48 2025 by rpki-client