$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf26bf23-9642-3aae-be69-73e2d9498a25.roa File: cf26bf23-9642-3aae-be69-73e2d9498a25.roa (raw, json) Hash identifier: zTc6z8oSdHsmL0DHjrU77L3ATteam0qeiZ8Qq4OPj8M= Subject key identifier: BC:E1:1A:EF:07:57:2D:54:C6:77:BF:3D:61:FC:21:86:B4:3B:5D:F7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A03A556FE09596C7BB337D7C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf26bf23-9642-3aae-be69-73e2d9498a25.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 202 IP address blocks: 20.137.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:56:fe:09:59:6c:7b:b3:37:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=3b533cc1-edbe-4cbd-9ec7-8d63476b9e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:61:36:60:31:65:7d:35:67:d9:cc:77:a5:3b: ff:97:f0:eb:c0:01:d5:47:4f:7a:d8:85:92:ed:0a: 5b:4b:63:ea:f7:02:d0:19:12:fb:3e:96:42:5e:f8: e3:70:51:dd:9a:e0:15:e1:27:b5:44:f2:eb:cb:e4: e7:02:ba:70:a2:cd:24:cf:40:51:de:2e:7e:90:f2: 86:d2:f4:d4:42:42:ed:c4:d8:0d:6b:ff:04:8f:19: 29:4a:d1:ef:2e:bd:5e:18:42:5f:23:86:50:a9:04: 45:47:12:eb:ed:3b:ee:fa:0e:fb:a3:93:d1:fc:6b: 21:cc:c6:2f:36:d6:49:75:41:04:5a:8c:ee:02:97: 0f:82:91:8e:26:18:d8:02:55:90:32:6e:7e:74:de: 1f:05:ce:d9:e9:66:fc:51:43:21:44:b0:af:90:e5: 6f:b5:f4:4b:07:c7:1c:dd:8f:7e:78:b7:b3:c1:a1: fb:6b:76:a7:4f:ae:c1:ba:a1:5b:ac:30:f6:22:0b: f5:9b:8a:22:8d:ce:5f:18:30:b7:52:b1:87:d0:f2: 23:c4:9a:da:27:a1:9e:43:ed:55:75:c7:f5:d3:b9: 6b:75:19:03:92:42:89:d3:26:7f:9b:d2:f3:e7:f4: e1:e5:cf:bb:e0:b2:ad:ec:ca:bf:1e:19:ec:57:91: 22:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E1:1A:EF:07:57:2D:54:C6:77:BF:3D:61:FC:21:86:B4:3B:5D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf26bf23-9642-3aae-be69-73e2d9498a25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d9:76:e9:cb:97:13:d9:a1:f6:07:3a:45:a7:83:46:37:82: ae:62:f5:67:2d:19:96:ae:8e:da:0b:6c:e9:78:cb:47:72:9b: 84:31:a2:6c:e3:b7:39:83:9b:a0:27:db:2e:9f:69:88:6c:4f: e9:0d:15:df:35:8a:76:7a:e9:7d:68:42:2f:51:00:6b:95:81: 41:4a:e8:35:ea:dd:76:93:a8:d6:43:cf:a0:2b:d1:94:18:9c: 8f:75:00:ea:eb:8a:e4:b7:9a:15:97:4f:1f:07:a3:70:9a:1e: 0e:08:4a:47:26:cf:1e:ac:51:1a:33:df:22:6a:63:04:76:99: 2f:9c:9c:af:bb:0a:97:5f:93:5f:22:98:91:9b:6d:d2:cd:96: 98:00:03:bb:51:6d:8d:45:d6:58:59:84:78:e0:18:d6:f0:64: d8:b2:14:05:3c:a5:f7:f2:a8:ec:21:13:14:88:69:dd:45:f5: 40:d9:c2:da:3f:a1:91:02:2a:af:fd:50:22:16:8d:55:99:1f: 64:c3:57:c6:f9:b6:a9:9a:ea:59:88:ab:c2:0f:07:4a:aa:e4: d9:52:0d:a6:d0:1a:4a:8b:17:45:1c:18:7d:c1:9c:61:84:cd: 42:ac:c4:c8:2f:18:28:0e:1e:87:f8:ec:d1:3e:79:21:25:89: e4:7d:5e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVb+CVlse7M318AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk M2I1MzNjYzEtZWRiZS00Y2JkLTllYzctOGQ2MzQ3NmI5ZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2E2YDFlfTVn2cx3pTv/l/DrwAHVR0962IWS 7QpbS2Pq9wLQGRL7PpZCXvjjcFHdmuAV4Se1RPLry+TnArpwos0kz0BR3i5+kPKG 0vTUQkLtxNgNa/8EjxkpStHvLr1eGEJfI4ZQqQRFRxLr7Tvu+g77o5PR/GshzMYv NtZJdUEEWozuApcPgpGOJhjYAlWQMm5+dN4fBc7Z6Wb8UUMhRLCvkOVvtfRLB8cc 3Y9+eLezwaH7a3anT67BuqFbrDD2Igv1m4oijc5fGDC3UrGH0PIjxJraJ6GeQ+1V dcf107lrdRkDkkKJ0yZ/m9Lz5/Th5c+74LKt7Mq/HhnsV5EiyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzhGu8HVy1Uxne/PWH8IYa0O133MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvY2YyNmJmMjMtOTY0Mi0z YWFlLWJlNjktNzNlMmQ5NDk4YTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvZdunLlxPZofYHOkWng0Y3gq5i9WctGZaujtoLbOl4y0dym4Qxomzj tzmDm6An2y6faYhsT+kNFd81inZ66X1oQi9RAGuVgUFK6DXq3XaTqNZDz6Ar0ZQY nI91AOrriuS3mhWXTx8Ho3CaHg4ISkcmzx6sURoz3yJqYwR2mS+cnK+7Cpdfk18i mJGbbdLNlpgAA7tRbY1F1lhZhHjgGNbwZNiyFAU8pffyqOwhExSIad1F9UDZwto/ oZECKq/9UCIWjVWZH2TDV8b5tqma6lmIq8IPB0qq5NlSDabQGkqLF0UcGH3BnGGE zUKsxMgvGCgOHof47NE+eSElieR9Xgs= -----END CERTIFICATE-----Generated at Fri Jun 6 12:26:12 2025 by rpki-client