$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa File: 5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa (raw, json) Hash identifier: kDL4vyrt9tYVob5VReg8jIbaSkcZ7uqDOxsxEgnotrY= Subject key identifier: 28:5F:31:30:60:74:17:46:94:6B:34:8E:75:D4:05:C3:3E:CE:19:A7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB4EB7D2E89AB5605DE0B8480 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 3356 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:7d:2e:89:ab:56:05:de:0b:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=e95e365e-17ae-4c1d-87f3-a6aaeaf52fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e7:99:e6:ce:80:7f:2b:61:38:a1:66:51:c7: e7:84:2c:40:11:3f:d2:25:7c:6a:48:1c:5d:3c:76: 39:c0:b8:a1:e7:c5:36:e7:09:b2:8f:97:bc:5e:86: 9e:f6:35:df:b0:e5:94:02:54:1a:95:1a:bc:b3:25: 47:95:4f:ef:ae:3f:1b:79:c5:d5:3c:95:53:ce:7c: 22:f7:62:e2:d9:20:23:4f:7c:d2:dd:a9:b1:2a:0e: e5:60:51:c7:10:44:df:a1:69:09:b2:b2:34:9e:c9: 85:e2:3c:44:b2:0f:0f:20:74:16:26:d3:56:a6:11: 36:83:c7:bf:56:e2:8a:1b:43:91:78:99:25:1c:3c: 9a:ab:11:74:30:15:89:42:60:4a:e3:e7:77:89:35: e6:7c:55:73:35:a3:f6:3d:e9:9b:29:ad:35:a2:20: 11:73:d3:77:1d:e2:44:2f:84:3d:da:12:8c:0e:c7: 93:24:88:a8:4d:90:42:5c:d5:61:92:f4:6a:6a:51: 45:ae:f4:34:0c:16:e2:5a:48:cc:de:30:ea:26:9a: 77:32:57:74:0b:26:e6:8c:84:62:3b:1b:25:a7:89: 1b:00:c4:1a:4f:6a:02:96:cb:66:11:98:1a:31:85: 85:6b:4f:29:b3:dc:34:82:38:2a:55:bd:a6:1c:6e: 3e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5F:31:30:60:74:17:46:94:6B:34:8E:75:D4:05:C3:3E:CE:19:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e5:79:48:77:95:60:8f:83:35:ec:50:ee:aa:5b:c7:b3:66: eb:e6:76:82:46:56:a4:c7:9b:96:24:e2:88:57:bc:92:82:77: cf:b5:a7:9e:9f:c6:34:f1:72:0f:ec:d4:8c:c8:40:d8:24:5b: 18:fd:18:a7:88:0c:f9:b9:a1:65:9a:d3:7f:90:a6:dc:4c:99: 70:14:af:1c:d8:75:b5:e2:f2:cb:18:db:69:1d:38:57:9a:72: 0d:dd:00:56:98:86:00:1d:11:50:12:66:a4:92:36:37:22:a2: 29:0a:67:b5:4b:8d:f1:fb:9f:ac:1d:19:f4:41:b3:7a:e4:79: 7a:27:8c:75:9b:7a:e6:ff:73:f7:e1:be:c2:2a:7b:1f:c7:f7: 0f:7b:63:bd:62:e5:b6:64:d2:ed:e4:b5:fc:f3:a5:77:69:d6: bf:69:26:d1:49:1c:61:5d:6a:b1:fc:9a:ab:0b:de:86:8c:17: d9:15:ed:c4:4e:8d:6a:cf:ed:4f:30:a8:52:e6:92:7f:f4:87: 0c:a9:7a:75:4e:c9:30:9f:87:e0:9c:74:de:e4:e0:fa:97:80: bf:e2:a7:a1:7b:11:be:fa:a4:c6:0e:24:fb:59:b9:fa:e4:16: 14:35:c7:88:06:b7:a3:dc:c2:af:6f:6c:a4:11:4f:dc:ab:74: 8a:05:f4:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0630uiatWBd4LhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZTk1ZTM2NWUtMTdhZS00YzFkLTg3ZjMtYTZhYWVhZjUyZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlueZ5s6AfythOKFmUcfnhCxAET/SJXxqSBxd PHY5wLih58U25wmyj5e8Xoae9jXfsOWUAlQalRq8syVHlU/vrj8becXVPJVTznwi 92Li2SAjT3zS3amxKg7lYFHHEETfoWkJsrI0nsmF4jxEsg8PIHQWJtNWphE2g8e/ VuKKG0OReJklHDyaqxF0MBWJQmBK4+d3iTXmfFVzNaP2PembKa01oiARc9N3HeJE L4Q92hKMDseTJIioTZBCXNVhkvRqalFFrvQ0DBbiWkjM3jDqJpp3Mld0CybmjIRi Oxslp4kbAMQaT2oClstmEZgaMYWFa08ps9w0gjgqVb2mHG4+jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChfMTBgdBdGlGs0jnXUBcM+zhmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWE3NWI1NGMtNzFiZC0z MjQzLTgwZDgtN2Q3OWQyNDY1YThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXleUh3lWCPgzXsUO6qW8ezZuvmdoJGVqTHm5Yk4ohXvJKCd8+1p56f xjTxcg/s1IzIQNgkWxj9GKeIDPm5oWWa03+QptxMmXAUrxzYdbXi8ssY22kdOFea cg3dAFaYhgAdEVASZqSSNjcioikKZ7VLjfH7n6wdGfRBs3rkeXonjHWbeub/c/fh vsIqex/H9w97Y71i5bZk0u3ktfzzpXdp1r9pJtFJHGFdarH8mqsL3oaMF9kV7cRO jWrP7U8wqFLmkn/0hwypenVOyTCfh+CcdN7k4PqXgL/ip6F7Eb76pMYOJPtZufrk FhQ1x4gGt6Pcwq9vbKQRT9yrdIoF9NE= -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:20 2025 by rpki-client