$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa File: e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa (raw, json) Hash identifier: fqS1vK1kr1zeNFko1L6vPMdwy69GBhtzxO+HLUi1E5M= Subject key identifier: 06:46:98:D3:55:73:9F:8A:A5:3B:A1:55:59:34:1F:15:B6:12:4B:90 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A71EB5138EF5B4F3AD5216B80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 3356 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:51:38:ef:5b:4f:3a:d5:21:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=cef9bfc9-a71c-4090-9aeb-528d598d27d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:0f:74:6e:46:16:7d:cf:a0:8d:81:3f:f8: 96:4d:17:22:3d:b1:a6:02:75:a1:9e:3d:20:ca:39: 57:f2:5e:6b:c0:41:8a:65:65:8b:d7:86:13:c0:3f: e5:b0:89:c0:1b:a3:ce:fc:52:0e:35:a9:1e:b7:e7: 27:e1:1f:6b:28:2c:e9:f0:3e:6f:9f:52:08:4d:db: f9:47:73:3d:fd:7e:15:78:d1:13:7a:a7:43:8c:d1: dc:e7:03:c2:69:b4:2a:9f:6f:a6:3d:9f:1f:d1:5c: 71:c5:b0:61:f0:d6:f0:e2:7f:27:53:8e:c4:9f:55: 01:6d:f5:9a:dc:81:b1:d9:79:8e:db:37:98:4f:1e: b4:72:cc:53:13:13:f1:5e:bb:65:c5:06:c1:93:2b: 32:96:a0:5b:a6:4b:77:6a:e8:58:d8:56:b9:89:54: 85:52:a0:93:18:86:ac:3d:10:cc:26:ad:66:db:6e: 62:42:0a:22:73:c6:01:ca:27:cb:43:23:33:74:23: 51:ee:96:fc:0e:bb:ba:2a:68:00:f3:ca:a0:89:0c: f5:93:91:a6:71:0a:80:0b:8d:9a:06:dd:14:79:7b: 1e:2f:83:f8:05:7e:5b:60:38:8d:52:03:a9:a0:a4: 85:5b:fc:44:d2:5f:c3:68:c0:91:e9:6d:56:80:38: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:46:98:D3:55:73:9F:8A:A5:3B:A1:55:59:34:1F:15:B6:12:4B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:74:d2:84:ba:14:ba:16:30:6c:66:d8:ba:da:a6:88:77:7e: 09:5f:81:6b:2b:e0:45:56:14:d8:bc:d4:d6:2a:60:f2:cb:f0: e6:29:6f:1f:a4:63:a9:9e:c1:7a:3b:a6:ce:54:5a:a0:8b:e5: 4f:3e:78:a8:bb:0c:ec:ec:69:b8:22:2a:c4:4b:c7:9a:7e:e9: db:09:0f:22:e3:1f:40:a4:65:7d:c4:0c:51:f6:ca:48:59:d1: f7:c9:c9:13:ee:98:70:3c:e5:22:0c:71:c4:6d:80:49:22:e7: 9a:de:95:04:66:aa:a0:b2:3a:0e:68:04:5c:e6:d0:9c:20:61: da:e6:7b:c2:6e:5b:17:d3:ea:88:09:cf:c8:a5:40:1e:28:4e: 6c:5b:de:e8:6b:36:73:ca:0d:8f:34:7b:eb:46:f4:6c:3f:46: 9c:06:99:70:9d:c3:6f:07:66:55:46:98:96:0f:dc:fc:dd:ea: 5b:ae:79:49:f2:9c:0f:7e:de:2d:af:fe:5f:28:9b:97:70:ac: eb:8e:c9:e0:c5:d0:ad:ce:22:ae:ae:68:b3:b6:af:16:79:c7: 20:b7:ca:b3:9b:0b:cd:14:e3:bf:01:88:a3:97:9a:d3:ec:0c: a0:ff:9c:ff:fc:8d:9c:ae:e8:81:67:e9:ff:5c:6a:93:33:0f: eb:94:c1:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61E471tPOtUha4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk Y2VmOWJmYzktYTcxYy00MDkwLTlhZWItNTI4ZDU5OGQyN2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpQPdG5GFn3PoI2BP/iWTRciPbGmAnWhnj0g yjlX8l5rwEGKZWWL14YTwD/lsInAG6PO/FIONaket+cn4R9rKCzp8D5vn1IITdv5 R3M9/X4VeNETeqdDjNHc5wPCabQqn2+mPZ8f0VxxxbBh8Nbw4n8nU47En1UBbfWa 3IGx2XmO2zeYTx60csxTExPxXrtlxQbBkysylqBbpkt3auhY2Fa5iVSFUqCTGIas PRDMJq1m225iQgoic8YByifLQyMzdCNR7pb8Dru6KmgA88qgiQz1k5GmcQqAC42a Bt0UeXseL4P4BX5bYDiNUgOpoKSFW/xE0l/DaMCR6W1WgDiTPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZGmNNVc5+KpTuhVVk0HxW2EkuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTJkMTdkNzEtZjZmOC0z YmU1LWFkMmQtODgzODE3MTYwOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR00oS6FLoWMGxm2Lrapoh3fglfgWsr4EVWFNi81NYqYPLL8OYpbx+k Y6mewXo7ps5UWqCL5U8+eKi7DOzsabgiKsRLx5p+6dsJDyLjH0CkZX3EDFH2ykhZ 0ffJyRPumHA85SIMccRtgEki55relQRmqqCyOg5oBFzm0JwgYdrme8JuWxfT6ogJ z8ilQB4oTmxb3uhrNnPKDY80e+tG9Gw/RpwGmXCdw28HZlVGmJYP3Pzd6luueUny nA9+3i2v/l8om5dwrOuOyeDF0K3OIq6uaLO2rxZ5xyC3yrObC80U478BiKOXmtPs DKD/nP/8jZyu6IFn6f9capMzD+uUwTw= -----END CERTIFICATE-----Generated at Thu Jul 10 06:38:09 2025 by rpki-client