$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bb245afb-3ade-32c5-8e44-003c6ff567bd.roa File: bb245afb-3ade-32c5-8e44-003c6ff567bd.roa (raw, json) Hash identifier: EIi/oSpgh5bJQB0HepLKX8ZOrogXyMr7kA9qwAdvebs= Subject key identifier: D9:20:F3:1D:CE:45:05:61:AA:9F:CD:1D:38:5E:98:77:B5:D0:58:67 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61F4929317FF43626F100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bb245afb-3ade-32c5-8e44-003c6ff567bd.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 3356 IP address blocks: 20.139.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1f:49:29:31:7f:f4:36:26:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=63953bca-e404-49c5-b73a-475f69f4f5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:83:b5:6f:68:14:35:25:11:58:7c:58:c5: ed:9e:97:f4:c9:52:86:9b:fa:9d:c4:47:04:0e:54: 51:ac:09:5f:89:ef:b5:c1:4b:99:76:31:ae:a2:7d: ab:31:14:70:35:65:68:68:29:3a:0c:d4:bb:09:9f: 6a:f5:e3:10:5c:54:9c:a9:2e:22:00:1b:a0:8c:25: 3f:e3:6a:68:e9:49:04:3e:95:c2:35:58:1f:b2:12: db:07:98:5c:84:27:04:c6:01:52:4e:57:d3:af:a0: 93:50:f8:43:5b:32:8d:ba:1a:d4:d2:da:96:65:28: 3d:29:f4:b7:e3:73:8e:70:97:68:30:09:27:a0:85: e0:09:26:5c:43:df:eb:04:2a:42:17:c4:97:8e:58: 11:4b:a0:b4:78:80:8d:ad:1f:25:ee:f5:f3:29:9d: ed:d2:17:3a:02:49:b4:6a:b8:d8:a4:44:79:d9:89: c7:d4:d7:73:e3:d9:13:b8:20:05:d6:82:ef:0d:bc: 8f:3b:c3:13:09:f9:e8:64:72:1d:e2:2c:e8:0a:dd: b8:88:3b:b4:4f:c4:9f:da:71:1c:7a:4c:0b:ae:94: f0:0a:0b:fe:fd:6b:7d:c4:dd:cd:c6:af:5f:59:ad: 6d:10:74:62:d1:16:98:af:f8:5d:2e:09:3e:c9:f2: 30:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:20:F3:1D:CE:45:05:61:AA:9F:CD:1D:38:5E:98:77:B5:D0:58:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bb245afb-3ade-32c5-8e44-003c6ff567bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:01:e8:93:bc:9e:ad:7e:32:cb:35:0a:e2:05:32:f1:88:bd: db:1e:e5:9a:cc:59:70:85:1d:e9:9e:da:27:c8:a1:c5:78:3b: 39:be:39:a6:88:cc:a5:2b:51:74:89:bd:64:25:21:96:25:90: 5d:66:44:d1:e3:ec:6d:56:3d:4c:26:3c:eb:2c:16:04:29:6f: 09:1b:38:ca:97:1f:f1:98:b1:9d:b9:fd:c2:ca:0c:72:1a:1e: 91:e7:75:69:f0:3a:81:40:50:8a:21:52:f2:14:c4:84:0b:ba: 26:53:c8:e6:33:86:70:61:77:7a:55:37:e5:8f:ad:04:bf:02: c0:bd:20:01:68:c9:be:d8:0b:2f:6d:e6:ea:35:4d:85:ab:c5: fd:bb:69:62:e3:04:58:1a:7e:5e:bc:b6:c6:8a:f4:f2:fa:da: 4e:3b:77:12:c2:7e:30:d5:91:7f:43:f6:38:47:19:81:de:06: c4:f4:b4:a5:08:bc:07:49:5f:05:10:9f:39:fd:16:1b:4b:2b: b6:e1:dc:e5:2a:70:15:75:88:52:36:17:09:f2:0e:e3:a6:d7: 4b:8a:23:be:23:8e:5d:9d:ac:d0:ed:31:2e:58:6f:a0:1d:ca: 4b:95:7f:bc:6c:94:8a:71:b3:b5:8d:c3:ca:19:fb:59:e3:7a: 78:91:81:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3th9JKTF/9DYm8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk NjM5NTNiY2EtZTQwNC00OWM1LWI3M2EtNDc1ZjY5ZjRmNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iKDtW9oFDUlEVh8WMXtnpf0yVKGm/qdxEcE DlRRrAlfie+1wUuZdjGuon2rMRRwNWVoaCk6DNS7CZ9q9eMQXFScqS4iABugjCU/ 42po6UkEPpXCNVgfshLbB5hchCcExgFSTlfTr6CTUPhDWzKNuhrU0tqWZSg9KfS3 43OOcJdoMAknoIXgCSZcQ9/rBCpCF8SXjlgRS6C0eICNrR8l7vXzKZ3t0hc6Akm0 arjYpER52YnH1Ndz49kTuCAF1oLvDbyPO8MTCfnoZHId4izoCt24iDu0T8Sf2nEc ekwLrpTwCgv+/Wt9xN3Nxq9fWa1tEHRi0RaYr/hdLgk+yfIwMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkg8x3ORQVhqp/NHThemHe10FhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmIyNDVhZmItM2FkZS0z MmM1LThlNDQtMDAzYzZmZjU2N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsB6JO8nq1+Mss1CuIFMvGIvdse5ZrMWXCFHeme2ifIocV4Ozm+OaaI zKUrUXSJvWQlIZYlkF1mRNHj7G1WPUwmPOssFgQpbwkbOMqXH/GYsZ25/cLKDHIa HpHndWnwOoFAUIohUvIUxIQLuiZTyOYzhnBhd3pVN+WPrQS/AsC9IAFoyb7YCy9t 5uo1TYWrxf27aWLjBFgafl68tsaK9PL62k47dxLCfjDVkX9D9jhHGYHeBsT0tKUI vAdJXwUQnzn9FhtLK7bh3OUqcBV1iFI2FwnyDuOm10uKI74jjl2drNDtMS5Yb6Ad ykuVf7xslIpxs7WNw8oZ+1njeniRgS4= -----END CERTIFICATE-----Generated at Wed Aug 20 12:01:19 2025 by rpki-client