$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f53243-f56a-3ac2-9bea-227907a4d81c.roa File: 38f53243-f56a-3ac2-9bea-227907a4d81c.roa (raw, json) Hash identifier: KBJrmC83RwI31cGQw927OSliygXVCe6NM6GGpjfmfUE= Subject key identifier: 7C:69:C4:D9:88:72:71:90:87:15:D3:08:2B:83:62:88:BE:95:FC:D6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61DB17CB617EEC246D0D0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f53243-f56a-3ac2-9bea-227907a4d81c.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 203 IP address blocks: 20.134.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1d:b1:7c:b6:17:ee:c2:46:d0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=bd242767-83dd-4dde-98c3-0b182fdac6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:fb:d9:3f:e3:ba:5b:76:a9:f7:e3:8f:8a: 25:58:07:ea:0a:a3:45:f3:88:97:bc:1e:14:3e:6b: 7a:ea:d1:39:f7:a0:6b:38:d1:2f:0b:f7:39:ff:f4: c8:ac:02:8f:f9:bf:f9:89:e1:f2:63:52:46:79:ca: 81:24:b6:24:34:3a:7b:1a:30:e5:cd:38:eb:c5:0d: f9:1d:0a:8a:df:c0:a4:77:d2:f7:df:16:6e:e3:45: 3d:bd:c8:e9:91:42:5c:73:32:e3:2d:56:1c:f9:a2: 64:b8:a0:c8:31:28:fd:82:91:57:73:b2:20:f9:41: 95:a7:5d:17:17:69:ec:86:a1:c2:7f:3a:c0:fd:f1: 75:d9:85:ea:06:d2:9b:61:dc:5d:83:ec:f3:43:23: 61:af:b8:cf:92:8e:5c:62:25:ce:b6:2e:76:de:33: 5d:3b:58:2e:ba:cf:f3:70:b7:14:cd:6b:d4:74:77: d1:9a:2d:89:f7:be:58:b2:a1:59:6a:ab:80:e5:e0: 5a:b7:5e:9c:60:6a:75:52:67:14:64:46:d1:c8:85: 50:db:de:9f:66:ae:43:df:5f:33:3c:52:92:ed:9a: 83:3b:34:ff:a0:4f:96:e3:a0:5f:37:f4:6d:4e:46: a7:91:99:aa:d4:40:58:bc:47:cb:dc:27:6d:da:69: f6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:69:C4:D9:88:72:71:90:87:15:D3:08:2B:83:62:88:BE:95:FC:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f53243-f56a-3ac2-9bea-227907a4d81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:38:c9:18:10:c8:b4:fc:58:fa:1a:6f:31:43:02:30:eb:3f: 14:1e:b9:34:72:34:75:61:fa:01:f0:ec:68:d6:f8:68:00:7b: 1a:0d:dc:d4:20:7c:7c:c7:56:32:4e:07:57:1b:b4:33:ee:c5: 64:1d:d5:02:71:fd:35:75:1b:5c:a1:62:58:ef:a9:cf:18:a7: b4:09:5f:65:d7:b8:f3:e8:8f:8d:2e:85:44:63:d5:7e:60:55: d0:5d:5e:1d:54:25:b0:6d:ed:44:53:09:ee:ab:6d:1c:96:61: 02:86:0b:67:db:3e:8d:97:29:73:0f:0f:e8:f2:bb:cb:da:d0: 2b:d1:ab:45:db:ff:75:43:5a:74:d1:7f:84:b3:3c:b7:70:f8: d8:44:65:dd:9f:dd:af:18:1b:43:a0:d3:c6:0e:3c:d7:3a:34: 3b:a3:f1:aa:72:ca:14:e7:09:b5:1f:21:c9:78:b6:38:3f:8d: 24:48:6d:9b:2b:8d:ab:ba:a3:a8:48:af:1f:7d:ed:a6:56:a8: 67:98:9b:2d:64:09:05:87:e8:f1:f9:bc:32:38:a7:5d:d4:d4: b6:ba:38:7d:34:83:9a:f9:f3:36:41:44:5e:52:35:d8:d3:30: 2e:dc:57:9f:a1:b3:b0:e4:5e:63:2e:06:c6:23:ce:94:33:f9: 8d:cb:68:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3th2xfLYX7sJG0NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk YmQyNDI3NjctODNkZC00ZGRlLTk4YzMtMGIxODJmZGFjNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkf72T/jult2qffjj4olWAfqCqNF84iXvB4U Pmt66tE596BrONEvC/c5//TIrAKP+b/5ieHyY1JGecqBJLYkNDp7GjDlzTjrxQ35 HQqK38Ckd9L33xZu40U9vcjpkUJcczLjLVYc+aJkuKDIMSj9gpFXc7Ig+UGVp10X F2nshqHCfzrA/fF12YXqBtKbYdxdg+zzQyNhr7jPko5cYiXOti523jNdO1guus/z cLcUzWvUdHfRmi2J975YsqFZaquA5eBat16cYGp1UmcUZEbRyIVQ296fZq5D318z PFKS7ZqDOzT/oE+W46BfN/RtTkankZmq1EBYvEfL3Cdt2mn2aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxpxNmIcnGQhxXTCCuDYoi+lfzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhmNTMyNDMtZjU2YS0z YWMyLTliZWEtMjI3OTA3YTRkODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE4yRgQyLT8WPoabzFDAjDrPxQeuTRyNHVh+gHw7GjW+GgAexoN3NQg fHzHVjJOB1cbtDPuxWQd1QJx/TV1G1yhYljvqc8Yp7QJX2XXuPPoj40uhURj1X5g VdBdXh1UJbBt7URTCe6rbRyWYQKGC2fbPo2XKXMPD+jyu8va0CvRq0Xb/3VDWnTR f4SzPLdw+NhEZd2f3a8YG0Og08YOPNc6NDuj8apyyhTnCbUfIcl4tjg/jSRIbZsr jau6o6hIrx997aZWqGeYmy1kCQWH6PH5vDI4p13U1La6OH00g5r58zZBRF5SNdjT MC7cV5+hs7DkXmMuBsYjzpQz+Y3LaLw= -----END CERTIFICATE-----Generated at Wed Aug 6 05:52:04 2025 by rpki-client