$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa File: 480a876e-f9de-3a86-b420-40e0c9062435.roa (raw, json) Hash identifier: KGJOI53/0slb4Ii/Z8JPie9ikvdS9PXwgkouBkru2YI= Subject key identifier: 67:B5:F5:F4:5C:CE:DA:48:30:B1:D0:86:04:20:6A:0D:1E:3A:EF:D6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61D7DFE6E9728DAFADA00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 203 IP address blocks: 20.134.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1d:7d:fe:6e:97:28:da:fa:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=80bb2bd8-ae79-4559-8850-e659d26887f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:3e:d5:c8:97:7a:ce:2b:c9:04:8a:fc:b9: 55:a9:44:f8:e6:49:09:02:33:f2:e8:2b:ad:9c:c9: cd:74:da:d1:eb:34:83:c8:98:a3:d3:65:5b:56:b5: 36:95:ac:cd:17:d0:3a:1f:e1:b3:73:0e:e0:ef:c7: 04:15:8c:37:a9:c9:11:41:f3:94:95:2f:ea:4b:9c: 16:43:ad:67:a4:a7:e5:7c:7f:a1:5d:2f:6e:da:44: c5:db:92:c3:e4:8c:fd:7f:45:96:18:be:7a:c3:c5: 63:e7:3b:0b:bb:8b:dc:a0:f3:c5:20:af:d2:4e:f0: 39:9e:4f:e0:b3:e2:f3:bc:22:52:24:c5:83:04:6f: f7:f6:48:93:32:86:a2:25:53:c3:3c:0c:34:4f:4c: d8:95:96:86:22:4b:b6:9a:7c:c7:4d:29:f0:c0:37: 6d:c1:dc:82:d1:cb:e1:a0:f1:b7:ea:d8:e4:40:37: 5b:bf:db:7a:78:71:f5:11:6c:d5:cb:eb:9d:3a:3d: c8:df:a5:d8:16:bd:91:77:b6:bc:71:e1:30:4c:74: 03:1c:3d:fe:7b:cd:ec:f3:5c:7f:05:c3:60:1f:b6: 98:84:4f:d0:7b:75:71:fe:38:e0:2f:11:c3:96:a6: 5c:05:f1:ba:29:1f:85:a5:09:d1:34:23:5f:13:35: 14:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B5:F5:F4:5C:CE:DA:48:30:B1:D0:86:04:20:6A:0D:1E:3A:EF:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:cd:f7:85:91:4b:83:a8:ef:f0:4f:bb:55:b6:f3:fe:a3:42: d9:0d:7b:89:59:f2:36:8c:ab:60:63:39:d7:c5:a9:3c:7a:61: c8:fd:a2:30:b2:ae:71:45:54:94:3d:b7:97:7a:df:e4:c3:22: 2d:39:76:0f:5e:90:7d:f1:92:45:72:02:d9:7b:f6:00:91:68: 41:91:80:29:94:5d:6b:db:5d:32:13:4e:7b:fd:25:06:13:ee: cd:bc:a2:d3:50:fd:fe:f8:d6:74:a7:c2:e5:16:85:1a:95:66: 1b:4e:b6:8c:83:bc:40:c3:ae:d6:b9:dd:19:34:e4:bb:f8:1a: 87:dd:63:4e:ae:c7:68:9a:26:27:4e:f9:6d:92:38:2a:5a:d2: 35:08:ab:c8:43:ba:c4:dd:ca:63:52:88:27:01:25:b2:43:15: 2f:ed:f8:9d:e9:fd:2a:e2:e5:58:ba:8a:32:4c:2a:50:ad:db: 60:d9:ca:e4:fd:8f:62:4d:5f:5b:42:f3:2c:a2:eb:4a:05:80: a4:bd:7c:85:ec:31:96:6b:ab:5a:45:cf:ca:f7:5d:3c:d3:e5: a9:69:aa:be:d9:41:3e:68:32:54:22:63:03:d6:c8:79:ae:2c: f9:28:48:8a:0f:6d:64:d0:cc:a4:77:c0:bf:45:e0:f8:cc:18: 20:d6:e9:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3th19/m6XKNr62gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ODBiYjJiZDgtYWU3OS00NTU5LTg4NTAtZTY1OWQyNjg4N2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFs+1ciXes4ryQSK/LlVqUT45kkJAjPy6Cut nMnNdNrR6zSDyJij02VbVrU2lazNF9A6H+Gzcw7g78cEFYw3qckRQfOUlS/qS5wW Q61npKflfH+hXS9u2kTF25LD5Iz9f0WWGL56w8Vj5zsLu4vcoPPFIK/STvA5nk/g s+LzvCJSJMWDBG/39kiTMoaiJVPDPAw0T0zYlZaGIku2mnzHTSnwwDdtwdyC0cvh oPG36tjkQDdbv9t6eHH1EWzVy+udOj3I36XYFr2Rd7a8ceEwTHQDHD3+e83s81x/ BcNgH7aYhE/Qe3Vx/jjgLxHDlqZcBfG6KR+FpQnRNCNfEzUULQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe19fRcztpIMLHQhgQgag0eOu/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDgwYTg3NmUtZjlkZS0z YTg2LWI0MjAtNDBlMGM5MDYyNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7N94WRS4Oo7/BPu1W28/6jQtkNe4lZ8jaMq2BjOdfFqTx6Ycj9ojCy rnFFVJQ9t5d63+TDIi05dg9ekH3xkkVyAtl79gCRaEGRgCmUXWvbXTITTnv9JQYT 7s28otNQ/f741nSnwuUWhRqVZhtOtoyDvEDDrta53Rk05Lv4GofdY06ux2iaJidO +W2SOCpa0jUIq8hDusTdymNSiCcBJbJDFS/t+J3p/Sri5Vi6ijJMKlCt22DZyuT9 j2JNX1tC8yyi60oFgKS9fIXsMZZrq1pFz8r3XTzT5alpqr7ZQT5oMlQiYwPWyHmu LPkoSIoPbWTQzKR3wL9F4PjMGCDW6SM= -----END CERTIFICATE-----Generated at Wed Aug 6 14:15:05 2025 by rpki-client