$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa File: 59a83d47-6316-3fc5-9032-22b42a178341.roa (raw, json) Hash identifier: 6ulita9yagB5Eqxp+dsgliTGiat2OTQ1VkmDhQLlC4Y= Subject key identifier: 16:3F:4F:5A:FF:AA:98:F5:24:2F:28:28:30:46:EB:0A:63:29:1A:0F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61E4AE72F1FBD05D5D230 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 202 IP address blocks: 20.134.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1e:4a:e7:2f:1f:bd:05:d5:d2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=e841d8e7-c9fa-4536-af51-10ce5b89dc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:19:2b:95:28:0b:b1:91:95:54:59:af:b1:9b: 2e:06:08:dc:23:bb:9b:dd:1c:de:9f:8a:a1:31:ca: b5:81:40:0d:a3:18:27:39:0c:36:00:dc:14:a3:74: c4:55:2c:ac:06:61:e5:5c:cf:08:7f:56:6e:70:b2: 47:43:ac:5f:7f:cd:4e:17:f9:c2:eb:d3:63:11:6a: 62:64:12:96:9a:61:e8:39:d4:0e:ab:99:e0:69:10: aa:e4:3d:b7:6c:8d:82:15:1e:48:98:41:00:34:48: 5a:ea:9d:79:e3:f0:aa:ba:ce:17:11:99:98:4e:ef: 59:43:6f:62:a9:80:8e:44:8e:4d:78:00:6d:a8:55: 71:da:30:8f:ae:b2:e5:b0:d5:48:ff:85:da:9a:b8: ea:5d:8b:46:24:2d:5b:03:7e:70:5d:54:f9:6e:f5: 7c:72:60:10:c5:33:14:3a:33:c7:de:01:db:19:90: 64:06:3d:fd:70:e6:7b:74:70:63:19:11:2b:00:df: 60:a8:90:24:4a:41:35:d9:61:96:d1:2d:29:bd:7c: ca:be:4e:b5:a0:a8:8e:98:4e:3e:2e:8a:22:fe:6b: b5:88:26:55:e8:bc:6d:da:c0:56:3a:76:2b:b5:25: 64:82:aa:bd:3c:d4:15:3f:19:ee:10:38:34:86:8c: b9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3F:4F:5A:FF:AA:98:F5:24:2F:28:28:30:46:EB:0A:63:29:1A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:81:7a:83:64:c1:84:bc:1b:10:4c:eb:18:4e:27:ae:dc:94: 9a:77:dd:b2:3a:ca:bb:5d:7a:a2:d0:e9:be:ca:4b:dc:64:54: ad:4c:bb:69:44:2e:eb:1e:44:4f:d2:e3:be:56:51:24:5e:93: a0:8d:2d:12:63:ad:17:ec:a3:c3:9b:a9:c8:15:3b:11:54:8b: 16:97:13:f2:4f:dd:2b:b4:a0:58:9a:0f:73:be:9c:b7:93:bd: ee:2c:94:6f:e6:de:4b:ee:30:f2:af:69:78:32:5b:61:8a:81: 30:fc:4e:34:bf:4f:06:cd:a0:7f:71:68:22:36:0e:71:a6:08: 9c:0c:83:01:20:f5:69:6a:fd:e2:2c:c1:d0:1b:1e:b0:30:b5: 87:2d:df:05:ce:ee:df:08:a5:b4:9d:79:62:94:d5:2b:d9:b8: 35:ca:b9:ab:42:ae:cd:fb:49:c3:5a:e8:d8:5a:68:80:a2:57: d6:7c:7b:83:a2:d8:48:53:b9:6b:d0:81:db:80:d0:af:a4:db: 62:70:bd:87:7e:47:d3:8e:7d:6a:73:38:81:0e:ee:3e:05:b6: b8:00:58:1d:90:7c:07:56:a5:0c:2c:c1:4a:7b:47:c7:86:05: 44:86:c0:ec:df:11:0d:a2:ea:aa:e5:40:5c:53:5b:87:d5:53: 52:17:b8:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3th5K5y8fvQXV0jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ZTg0MWQ4ZTctYzlmYS00NTM2LWFmNTEtMTBjZTViODlkYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxkrlSgLsZGVVFmvsZsuBgjcI7ub3Rzen4qh Mcq1gUANoxgnOQw2ANwUo3TEVSysBmHlXM8If1ZucLJHQ6xff81OF/nC69NjEWpi ZBKWmmHoOdQOq5ngaRCq5D23bI2CFR5ImEEANEha6p154/Cqus4XEZmYTu9ZQ29i qYCORI5NeABtqFVx2jCPrrLlsNVI/4XamrjqXYtGJC1bA35wXVT5bvV8cmAQxTMU OjPH3gHbGZBkBj39cOZ7dHBjGRErAN9gqJAkSkE12WGW0S0pvXzKvk61oKiOmE4+ Looi/mu1iCZV6Lxt2sBWOnYrtSVkgqq9PNQVPxnuEDg0hoy5awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY/T1r/qpj1JC8oKDBG6wpjKRoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTlhODNkNDctNjMxNi0z ZmM1LTkwMzItMjJiNDJhMTc4MzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWBeoNkwYS8GxBM6xhOJ67clJp33bI6yrtdeqLQ6b7KS9xkVK1Mu2lE LuseRE/S475WUSRek6CNLRJjrRfso8ObqcgVOxFUixaXE/JP3Su0oFiaD3O+nLeT ve4slG/m3kvuMPKvaXgyW2GKgTD8TjS/TwbNoH9xaCI2DnGmCJwMgwEg9Wlq/eIs wdAbHrAwtYct3wXO7t8IpbSdeWKU1SvZuDXKuatCrs37ScNa6NhaaICiV9Z8e4Oi 2EhTuWvQgduA0K+k22JwvYd+R9OOfWpzOIEO7j4FtrgAWB2QfAdWpQwswUp7R8eG BUSGwOzfEQ2i6qrlQFxTW4fVU1IXuJA= -----END CERTIFICATE-----Generated at Sat Aug 9 10:53:52 2025 by rpki-client