$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa File: 094276eb-a22a-3e33-8c6d-37f68e1f7695.roa (raw, json) Hash identifier: 7KHjl2hSQqp2tZtSXj8FyaigFNM9csnQdaX08v77Q1I= Subject key identifier: C5:F1:A7:6E:67:DC:4F:75:3B:95:54:41:86:DB:73:1D:74:E1:4B:B7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61CF81CBF5280BDAF8880 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 203 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1c:f8:1c:bf:52:80:bd:af:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=9539e416-69fe-40ad-97ce-256d55cde5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:ff:82:be:73:ea:5e:ea:20:8d:6b:be:40: 9c:78:14:49:51:99:97:c5:e8:d6:a6:ac:9a:38:01: a0:82:cd:0b:65:84:64:4c:87:30:5e:d8:60:0e:3f: 51:03:fc:e5:d8:0a:9f:db:0f:89:24:33:ac:9b:f9: 17:0a:c8:0e:15:5c:77:d6:7b:dd:2f:f8:d3:bb:d0: 77:37:14:2f:4c:d1:5f:5c:54:df:a2:6b:dc:87:06: 02:84:b1:ad:3c:9b:3b:1f:30:48:f6:e0:37:7b:fa: 8b:53:a9:e8:11:63:84:bd:e3:35:8f:39:36:3b:a7: c0:c7:9b:4c:b3:b5:27:f3:bf:8c:83:56:d6:8b:14: d4:ae:08:07:59:1a:74:38:6b:65:1f:05:0a:ed:06: 23:6c:0a:d9:67:08:80:9e:92:29:8d:73:df:7f:4a: b2:a3:54:36:fe:99:77:a4:f5:f3:34:d7:03:95:d1: 1f:ef:0a:29:cf:d9:fd:2d:06:ac:41:6b:d2:b6:6c: 23:f7:cf:b8:de:a8:e1:53:be:33:04:dd:e5:aa:59: b6:58:b5:c3:09:3c:7f:d2:e5:ef:3c:0a:e5:c1:e0: 58:a5:4c:a6:ec:0b:4b:9e:5a:3a:7e:e0:80:15:70: 4c:04:94:fc:8b:87:1b:20:ac:02:17:aa:1c:8d:b3: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F1:A7:6E:67:DC:4F:75:3B:95:54:41:86:DB:73:1D:74:E1:4B:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:37:75:2d:16:9d:58:ef:bf:38:d3:59:b8:49:b3:3d:93:d2: 4a:27:d8:df:00:b0:51:c3:7b:ec:23:47:de:b7:51:65:f1:de: 19:c2:a7:84:4b:1d:29:a7:3f:c3:fc:89:a5:2b:c5:f5:7d:16: 7d:98:5e:14:69:ac:69:9f:95:0b:27:2e:d6:af:f0:b9:eb:36: 82:71:13:8a:95:7b:d7:c8:2e:c7:14:b8:ae:a0:28:d6:de:9d: 70:9a:a2:4a:ee:b6:9c:47:8a:dd:1e:ac:f9:5d:dc:a5:0c:09: ed:1c:a6:3f:f4:95:a0:cb:68:1d:ed:3f:fc:7e:90:49:09:ef: 10:c0:e4:90:7f:78:36:f9:19:eb:98:6f:f7:95:d8:68:3b:e4: 86:a3:2e:6d:4f:8e:26:b6:55:a5:fc:1d:78:61:df:d5:74:4d: 07:2c:4a:9d:c1:ab:fa:2f:12:ca:68:2f:29:88:91:69:91:06: 3e:9d:44:47:8d:cb:b0:36:45:98:61:52:8c:09:75:6e:8a:ad: 0c:91:d2:88:9e:57:43:a5:55:8c:25:75:43:25:99:86:33:a7: 41:df:94:18:4b:80:14:5b:0a:5e:54:ff:ad:10:fa:52:78:d2: d7:d5:7c:7c:6c:52:d3:76:db:f1:f4:38:9d:13:6c:d2:93:9a: ac:8a:43:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3thz4HL9SgL2viIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk OTUzOWU0MTYtNjlmZS00MGFkLTk3Y2UtMjU2ZDU1Y2RlNWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK3/gr5z6l7qII1rvkCceBRJUZmXxejWpqya OAGggs0LZYRkTIcwXthgDj9RA/zl2Aqf2w+JJDOsm/kXCsgOFVx31nvdL/jTu9B3 NxQvTNFfXFTfomvchwYChLGtPJs7HzBI9uA3e/qLU6noEWOEveM1jzk2O6fAx5tM s7Un87+Mg1bWixTUrggHWRp0OGtlHwUK7QYjbArZZwiAnpIpjXPff0qyo1Q2/pl3 pPXzNNcDldEf7wopz9n9LQasQWvStmwj98+43qjhU74zBN3lqlm2WLXDCTx/0uXv PArlweBYpUym7AtLnlo6fuCAFXBMBJT8i4cbIKwCF6ocjbOhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXxp25n3E91O5VUQYbbcx104Uu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDk0Mjc2ZWItYTIyYS0z ZTMzLThjNmQtMzdmNjhlMWY3Njk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM3dS0WnVjvvzjTWbhJsz2T0kon2N8AsFHDe+wjR963UWXx3hnCp4RL HSmnP8P8iaUrxfV9Fn2YXhRprGmflQsnLtav8LnrNoJxE4qVe9fILscUuK6gKNbe nXCaokrutpxHit0erPld3KUMCe0cpj/0laDLaB3tP/x+kEkJ7xDA5JB/eDb5GeuY b/eV2Gg75IajLm1Pjia2VaX8HXhh39V0TQcsSp3Bq/ovEspoLymIkWmRBj6dREeN y7A2RZhhUowJdW6KrQyR0oieV0OlVYwldUMlmYYzp0HflBhLgBRbCl5U/60Q+lJ4 0tfVfHxsUtN22/H0OJ0TbNKTmqyKQ1o= -----END CERTIFICATE-----Generated at Wed Aug 6 06:06:28 2025 by rpki-client