$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa File: da015e1a-f458-3674-9325-2b4dbacc74f1.roa (raw, json) Hash identifier: May6RDRzdTfUi49Sy07OIOtRRDIr6w+kckmw79dcN/w= Subject key identifier: 63:57:13:A8:FB:F3:71:82:27:8B:E3:27:C0:D0:90:86:0B:94:57:8D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A71EB512AD6E2FB44A6DE1000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 3360 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:51:2a:d6:e2:fb:44:a6:de:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=3cfb90ba-c634-4567-bc14-50b06f429ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ab:31:0b:66:1a:28:9e:92:50:57:74:09:64: 0e:c2:19:30:9b:2d:2d:32:13:d3:af:73:ae:43:55: b1:c6:cf:f0:34:c9:94:f9:0e:b2:1b:5a:e6:3f:07: 92:16:9d:c4:47:63:f0:ad:c7:b6:b0:37:09:ff:29: b6:55:af:bd:7b:4c:69:cb:3d:4b:46:37:90:c3:78: b5:1f:74:40:c5:d0:8c:e3:50:9a:97:00:44:43:71: a7:7d:15:49:ee:99:75:14:c2:a1:97:a2:42:0a:77: 2f:7e:f9:ad:07:7d:72:61:0e:19:8a:0c:02:17:96: 7a:5e:a2:f2:ab:e4:ba:ed:20:a3:bd:cd:5b:26:a4: 90:a9:91:88:82:66:53:e6:2a:b2:69:4c:05:0c:76: 19:2f:e3:74:ad:07:2d:d3:a0:82:8a:76:ee:5b:f5: ab:14:fb:14:e6:8f:82:5d:35:20:6f:6e:84:72:a7: 45:33:ee:a6:b2:1d:51:7d:db:96:07:3a:00:46:db: 0c:29:f7:34:54:69:21:8d:4e:ff:b6:a4:44:b2:e3: c6:76:ca:12:8a:59:fb:c0:1e:fb:2f:ef:5c:bd:7a: 05:ce:54:c5:2d:d6:bd:dc:b4:2c:f9:9a:22:dc:c9: d4:4a:a2:22:8a:22:cc:b3:87:62:94:b2:85:38:27: 98:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:57:13:A8:FB:F3:71:82:27:8B:E3:27:C0:D0:90:86:0B:94:57:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:32:e7:cd:33:4e:48:34:e7:18:73:63:9a:fb:3e:6e:9c:ad: 09:c7:89:e9:4f:2c:e6:82:59:69:7a:77:ee:83:27:a4:d4:27: 52:10:13:8d:c5:e1:64:4b:6c:e7:c9:5f:c2:f3:3f:1e:fc:78: 9d:e6:d1:04:0b:40:b3:a8:81:9b:6f:ba:4f:ed:a3:8c:f4:02: 9c:39:f1:89:c5:85:70:19:db:ce:3c:9f:39:01:be:1e:7d:27: 6d:00:f7:df:9e:a2:81:9b:b8:6b:b4:cc:a2:f6:81:de:cc:a7: b9:7c:1c:78:63:7c:94:17:ef:ae:16:70:b6:7e:60:bd:39:59: 1b:e7:c7:7e:9f:23:41:21:d6:d0:26:2f:ea:ad:d5:e9:7f:76: b7:d0:ad:ed:be:36:a1:f5:11:46:45:d0:6c:97:21:88:9a:18: c1:9b:ac:57:14:6c:06:22:25:41:7b:37:7b:1d:69:71:a3:06: 4f:01:aa:a9:64:fb:2d:b7:94:7b:42:00:c4:20:80:0f:9e:76: a3:c1:3a:12:4b:42:f9:7f:d7:0e:3f:e5:fa:a8:0b:44:ba:c8: f8:86:26:4e:2f:d2:e9:94:2b:dc:03:05:63:0e:ff:d9:6d:35: bd:8d:f4:f4:ca:65:b8:fb:24:bc:8c:44:58:b7:f4:09:a5:5b: 6b:e1:92:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61Eq1uL7RKbeEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk M2NmYjkwYmEtYzYzNC00NTY3LWJjMTQtNTBiMDZmNDI5YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqsxC2YaKJ6SUFd0CWQOwhkwmy0tMhPTr3Ou Q1Wxxs/wNMmU+Q6yG1rmPweSFp3ER2Pwrce2sDcJ/ym2Va+9e0xpyz1LRjeQw3i1 H3RAxdCM41CalwBEQ3GnfRVJ7pl1FMKhl6JCCncvfvmtB31yYQ4ZigwCF5Z6XqLy q+S67SCjvc1bJqSQqZGIgmZT5iqyaUwFDHYZL+N0rQct06CCinbuW/WrFPsU5o+C XTUgb26EcqdFM+6msh1RfduWBzoARtsMKfc0VGkhjU7/tqREsuPGdsoSiln7wB77 L+9cvXoFzlTFLda93LQs+Zoi3MnUSqIiiiLMs4dilLKFOCeYPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNXE6j783GCJ4vjJ8DQkIYLlFeNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwMTVlMWEtZjQ1OC0z Njc0LTkzMjUtMmI0ZGJhY2M3NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8y580zTkg05xhzY5r7Pm6crQnHielPLOaCWWl6d+6DJ6TUJ1IQE43F 4WRLbOfJX8LzPx78eJ3m0QQLQLOogZtvuk/to4z0Apw58YnFhXAZ2848nzkBvh59 J20A99+eooGbuGu0zKL2gd7Mp7l8HHhjfJQX764WcLZ+YL05WRvnx36fI0Eh1tAm L+qt1el/drfQre2+NqH1EUZF0GyXIYiaGMGbrFcUbAYiJUF7N3sdaXGjBk8Bqqlk +y23lHtCAMQggA+edqPBOhJLQvl/1w4/5fqoC0S6yPiGJk4v0umUK9wDBWMO/9lt Nb2N9PTKZbj7JLyMRFi39AmlW2vhkpM= -----END CERTIFICATE-----Generated at Thu Jul 10 08:27:37 2025 by rpki-client