$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/117fea5b-1b16-3b26-99f3-438854fe7962.roa File: 117fea5b-1b16-3b26-99f3-438854fe7962.roa (raw, json) Hash identifier: 9pY7ysqWhUEi/iDS6ZtW6fhfQvM2NHH7MEf+oMTO4bc= Subject key identifier: BC:71:DB:E3:0B:57:BD:BE:A2:8D:76:0C:98:4F:6D:F2:61:F4:D9:C3 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61D473C8F141B4FDF7AA0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/117fea5b-1b16-3b26-99f3-438854fe7962.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 3356 IP address blocks: 20.134.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1d:47:3c:8f:14:1b:4f:df:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=0a421739-870f-44cf-92d3-35a74bce673c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:8d:15:82:20:b9:91:67:06:4e:92:03:b1: 13:c7:9e:29:bf:5d:0e:27:1f:38:a4:5b:ac:3f:f6: 13:e3:88:7f:6d:4d:c8:56:67:e4:fe:ab:da:30:de: 0f:88:00:af:7f:80:e7:53:da:20:ac:4b:98:b2:34: f0:13:dd:70:6e:ce:64:11:32:db:53:76:21:e0:af: cd:e4:4f:2b:76:42:aa:a9:9b:97:15:68:21:ac:41: 9d:1b:96:25:f9:3b:a3:b2:29:11:94:00:55:eb:ae: 1a:b5:22:0f:b0:e8:d7:09:ef:29:f9:45:85:49:2b: cf:2e:e4:1a:f9:94:eb:0d:2a:75:8f:fd:03:07:fd: 4c:d9:00:de:41:61:15:e2:45:d8:88:0f:ef:d0:1c: be:8d:ee:de:8e:71:36:86:5c:94:cd:ed:15:de:0b: c9:65:42:31:22:24:47:f8:e9:f8:f6:fb:12:61:c2: d6:cd:da:d3:8f:18:a8:d2:89:5b:26:d2:10:a9:51: 19:7f:bb:09:38:df:99:f8:77:dd:a2:31:21:59:86: 7c:b6:8a:07:2f:19:b1:94:79:ab:58:17:85:35:6e: e8:ed:33:bb:c7:67:dd:c1:b5:04:6a:d5:fb:22:b8: 37:9d:d3:b5:87:3a:6a:0f:8f:b2:19:36:18:e3:d1: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:71:DB:E3:0B:57:BD:BE:A2:8D:76:0C:98:4F:6D:F2:61:F4:D9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/117fea5b-1b16-3b26-99f3-438854fe7962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7f:28:6d:2c:4a:a0:fe:d6:fd:53:a1:cf:e4:b6:16:0c:2b: 5f:d7:44:c5:5e:b3:e2:1c:f0:3b:43:3b:e0:d7:d7:46:0c:41: f5:61:6d:cd:1a:d8:e3:0a:2b:7f:46:54:30:9c:85:58:d0:5f: 59:1f:c4:7f:e9:5e:8d:96:2a:9a:f8:b5:0d:5d:34:39:05:5f: 0e:36:ff:b3:b2:7f:8d:9f:19:8a:74:55:3e:a1:4f:53:1b:f9: 9e:22:43:b2:55:31:03:47:1a:27:2c:c6:79:fa:73:88:74:e3: 42:a0:08:9c:5e:94:8e:e0:1d:74:fa:8f:f6:65:3b:33:d1:1c: 7a:97:f8:a6:6a:c9:e7:3f:b3:13:36:7c:04:e7:f3:33:7f:cd: 32:aa:62:c5:8d:a2:f9:df:41:83:de:ff:72:7a:66:75:09:05: b6:40:1b:10:df:e8:76:96:27:39:e9:9a:4e:b7:68:f1:03:c1: d5:34:11:74:29:0f:b5:4a:e8:ca:33:4b:fc:a1:af:20:a6:2f: c7:93:7d:e2:82:10:ef:aa:33:46:cf:9d:02:84:d2:89:9d:dd: 60:ec:11:8a:2f:3f:00:d9:24:0b:32:99:19:73:ff:cb:e1:f9: 3e:07:eb:87:d4:d4:0a:d6:f5:27:dc:63:af:3d:cd:c8:2c:95: e8:46:ae:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3th1HPI8UG0/feqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk MGE0MjE3MzktODcwZi00NGNmLTkyZDMtMzVhNzRiY2U2NzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2GNFYIguZFnBk6SA7ETx54pv10OJx84pFus P/YT44h/bU3IVmfk/qvaMN4PiACvf4DnU9ogrEuYsjTwE91wbs5kETLbU3Yh4K/N 5E8rdkKqqZuXFWghrEGdG5Yl+TujsikRlABV664atSIPsOjXCe8p+UWFSSvPLuQa +ZTrDSp1j/0DB/1M2QDeQWEV4kXYiA/v0By+je7ejnE2hlyUze0V3gvJZUIxIiRH +On49vsSYcLWzdrTjxio0olbJtIQqVEZf7sJON+Z+HfdojEhWYZ8tooHLxmxlHmr WBeFNW7o7TO7x2fdwbUEatX7Irg3ndO1hzpqD4+yGTYY49HrEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxx2+MLV72+oo12DJhPbfJh9NnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTE3ZmVhNWItMWIxNi0z YjI2LTk5ZjMtNDM4ODU0ZmU3OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN/KG0sSqD+1v1Toc/kthYMK1/XRMVes+Ic8DtDO+DX10YMQfVhbc0a 2OMKK39GVDCchVjQX1kfxH/pXo2WKpr4tQ1dNDkFXw42/7Oyf42fGYp0VT6hT1Mb +Z4iQ7JVMQNHGicsxnn6c4h040KgCJxelI7gHXT6j/ZlOzPRHHqX+KZqyec/sxM2 fATn8zN/zTKqYsWNovnfQYPe/3J6ZnUJBbZAGxDf6HaWJznpmk63aPEDwdU0EXQp D7VK6MozS/yhryCmL8eTfeKCEO+qM0bPnQKE0omd3WDsEYovPwDZJAsymRlz/8vh +T4H64fU1ArW9SfcY689zcgslehGrjE= -----END CERTIFICATE-----Generated at Wed Aug 6 14:16:58 2025 by rpki-client