$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa File: 0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa (raw, json) Hash identifier: KUWaF2RW1H35SZFc6mFa0nLoeilIGDn3z3ETnJB7BxQ= Subject key identifier: EB:A9:53:5C:5F:AF:2C:47:AA:E3:CE:10:01:E3:A6:A8:41:B6:89:4E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB4EB7D054F460235BD3311A0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 3356 IP address blocks: 20.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:7d:05:4f:46:02:35:bd:33:11:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=fef688d3-1ed9-4b20-b079-b508d0f082fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:39:f3:86:1b:d2:8c:a3:fe:15:9e:44:47:ca: 93:22:62:e2:fb:02:93:bb:88:c3:78:1d:0a:91:28: c5:15:13:24:57:48:c1:cd:b9:5a:51:30:8b:f6:d8: 63:78:60:cb:7c:97:88:00:b9:e8:8c:b3:03:eb:9e: e5:1a:5f:82:e5:9f:02:12:4b:4b:6e:64:b4:39:0a: d4:a3:20:25:5b:f3:59:2c:da:66:f9:74:26:43:e6: c7:7b:a2:98:d7:da:30:95:b9:5d:1f:2f:37:d8:a0: 18:10:2c:d0:de:ac:d3:40:fe:04:42:36:df:5f:3e: ce:b5:71:0f:95:eb:bd:0a:eb:90:00:56:49:a4:4b: 7f:fb:22:4a:3f:15:b5:9f:5c:12:d6:da:8d:43:f0: 92:14:c3:8a:ee:11:7e:99:cf:e6:f7:c5:55:98:fb: 20:02:f0:cd:fa:9e:f2:f8:a5:f5:08:bb:8a:1a:fe: 6a:8e:95:86:6e:09:fd:dd:44:a7:39:14:30:f2:5f: 0a:1c:b1:a1:20:b8:15:7c:85:cf:79:4d:1b:04:fd: 88:3a:8f:f0:ea:e6:58:9a:ef:14:ec:b0:e1:19:e7: 07:a7:79:a2:d3:f6:f9:9a:74:29:a2:d2:07:95:49: 37:2d:00:f4:9b:5a:d9:95:4f:5c:10:2b:5f:30:fb: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A9:53:5C:5F:AF:2C:47:AA:E3:CE:10:01:E3:A6:A8:41:B6:89:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2b:52:dc:92:f6:17:e7:de:3f:35:a3:0b:ea:74:e6:ce:1c: d8:7c:55:7d:ba:6a:71:c8:65:74:e5:00:35:71:17:20:52:1f: 18:1e:d4:b0:5c:6f:c5:63:ea:f8:31:63:ce:01:82:e1:58:3f: f5:b7:d8:b7:06:0d:45:af:be:1a:b0:2a:45:7b:55:c8:f2:3d: fe:76:f7:10:00:ab:9d:b2:63:3b:6b:49:c0:be:d7:78:34:df: 80:15:e3:08:d3:d3:51:21:66:0a:6e:3f:17:8a:fb:ac:50:6b: 63:fc:04:a1:26:0a:83:0b:9a:fb:21:0a:b2:5e:3d:1f:d8:92: cf:d2:c9:3a:45:99:d0:f0:9e:fb:87:05:95:41:2a:07:07:e1: a5:c8:81:09:ba:46:8f:9e:a3:3d:b1:2d:2c:69:8b:cc:09:b9: 75:b2:45:d3:0f:47:66:ab:a2:7a:94:fb:e9:36:e3:b3:6b:61: aa:92:4b:77:16:a0:a5:37:0a:17:48:a3:52:cf:ab:b3:07:d3: 81:07:7a:c4:96:70:db:54:3e:49:f5:83:13:c2:39:db:64:ac: 62:7c:c6:77:c0:ae:66:97:e5:2c:6f:f2:ef:37:3f:35:ec:f2: 80:b2:e9:bd:49:43:2f:bb:01:7a:f1:65:7f:60:2b:91:6c:e2: 01:ef:7d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0630FT0YCNb0zEaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZmVmNjg4ZDMtMWVkOS00YjIwLWIwNzktYjUwOGQwZjA4MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDnzhhvSjKP+FZ5ER8qTImLi+wKTu4jDeB0K kSjFFRMkV0jBzblaUTCL9thjeGDLfJeIALnojLMD657lGl+C5Z8CEktLbmS0OQrU oyAlW/NZLNpm+XQmQ+bHe6KY19owlbldHy832KAYECzQ3qzTQP4EQjbfXz7OtXEP leu9CuuQAFZJpEt/+yJKPxW1n1wS1tqNQ/CSFMOK7hF+mc/m98VVmPsgAvDN+p7y +KX1CLuKGv5qjpWGbgn93USnORQw8l8KHLGhILgVfIXPeU0bBP2IOo/w6uZYmu8U 7LDhGecHp3mi0/b5mnQpotIHlUk3LQD0m1rZlU9cECtfMPsi7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOupU1xfryxHquPOEAHjpqhBtolOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGVjZTQxODEtZWExMi0z OWM0LThiNDctNTNkMmY0ZjI4MDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFArUtyS9hfn3j81owvqdObOHNh8VX26anHIZXTlADVxFyBSHxge1LBc b8Vj6vgxY84BguFYP/W32LcGDUWvvhqwKkV7VcjyPf529xAAq52yYztrScC+13g0 34AV4wjT01EhZgpuPxeK+6xQa2P8BKEmCoMLmvshCrJePR/Yks/SyTpFmdDwnvuH BZVBKgcH4aXIgQm6Ro+eoz2xLSxpi8wJuXWyRdMPR2aronqU++k247NrYaqSS3cW oKU3ChdIo1LPq7MH04EHesSWcNtUPkn1gxPCOdtkrGJ8xnfArmaX5Sxv8u83PzXs 8oCy6b1JQy+7AXrxZX9gK5Fs4gHvfSc= -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:05 2025 by rpki-client