$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7d241db8-ecaf-3a3b-9e77-8814fc7fed64.roa File: 7d241db8-ecaf-3a3b-9e77-8814fc7fed64.roa (raw, json) Hash identifier: B/F0Fy8tY1c4HZuoixjDnDLf94XxNCOfDhl1Xx1pqY8= Subject key identifier: 47:92:51:AF:C9:EF:26:F7:E9:79:49:5B:58:B8:C6:39:E9:29:A4:48 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61D65A2FE0E133EE44100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7d241db8-ecaf-3a3b-9e77-8814fc7fed64.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 202 IP address blocks: 20.134.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1d:65:a2:fe:0e:13:3e:e4:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=cf636494-791d-42d2-8313-902bc84958eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:db:1d:c1:d6:d0:1c:47:50:79:0f:02:83:82: 82:5e:1a:93:d7:3d:0b:ab:53:ee:fa:23:71:40:fa: c0:16:e5:f4:b2:28:f9:28:97:ed:90:8e:f6:04:c8: bd:c2:36:21:d4:ff:6f:3d:25:81:ee:61:3c:25:6f: 9c:50:52:8e:a7:cc:77:39:9b:8e:7d:94:b5:51:ee: 70:d0:2c:ef:f6:67:67:2f:2e:e1:fe:fb:98:ad:31: 73:08:51:58:cb:ad:d9:24:c8:d9:9b:3b:b5:cd:58: ae:dc:d1:c8:4c:97:40:2a:76:0d:45:7b:64:fc:66: 39:db:d4:4b:fb:0f:68:04:00:7b:09:f9:8a:6d:61: 6c:37:ca:1b:b6:19:01:5e:66:97:11:d8:e8:c3:df: 58:70:2b:6b:03:23:a0:5b:b7:87:40:88:ea:d4:91: ee:28:06:eb:4b:2a:44:c0:29:f1:57:48:32:60:b6: 6c:4e:f1:aa:aa:9b:00:a7:f2:4f:c4:a9:65:14:a3: e4:49:05:21:6b:83:72:89:78:ae:03:a6:1a:b7:6f: eb:cb:fb:d0:79:4b:2a:ba:ea:f7:1a:bf:5a:ad:19: 66:b2:e6:4e:73:17:ff:3b:10:ad:40:58:a1:9f:73: a7:43:fd:15:d8:6d:1a:e6:40:fc:16:c3:cc:31:df: c3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:92:51:AF:C9:EF:26:F7:E9:79:49:5B:58:B8:C6:39:E9:29:A4:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7d241db8-ecaf-3a3b-9e77-8814fc7fed64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:8e:58:3a:2d:56:b9:42:cb:d0:b2:f6:c0:d5:78:2f:c2:98: 13:b4:27:a1:ea:32:e2:4a:e6:e3:ac:2e:2d:85:74:5b:11:bc: 36:15:60:9f:00:29:56:80:b9:5c:ea:5d:7d:71:21:ee:d9:0a: 39:30:24:c6:5d:69:ee:60:b5:aa:b2:d9:48:16:e1:85:64:02: e5:de:21:16:c9:db:c1:cd:d9:7b:3b:9a:0f:7e:eb:76:2c:35: af:22:41:4e:a4:15:f1:cf:ce:39:e3:b6:d1:8a:ce:cb:35:4c: f7:d4:9a:12:78:81:c2:e8:44:98:26:eb:1c:3c:a3:6d:19:13: 4a:63:e6:2d:04:64:34:a2:04:14:6a:45:7b:df:72:d4:dd:0d: 00:a4:6f:72:b5:1c:22:fa:f0:e4:fe:97:a7:27:1f:c7:2d:dc: fb:d7:b9:51:d1:88:b8:21:46:b4:2d:90:19:06:58:87:3e:ee: 7d:80:bb:ca:c7:34:e2:0c:ca:de:96:95:68:c9:0e:27:54:07: 27:63:d3:d5:a0:93:6f:38:a4:b5:04:e1:a9:cb:ca:20:aa:be: 57:16:6d:02:9b:7a:af:a3:41:55:e0:57:f0:d0:3c:db:5e:c3: 6b:f4:12:60:8d:13:44:54:ba:ca:01:45:f7:22:81:fd:24:df: ac:32:73:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3th1lov4OEz7kQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk Y2Y2MzY0OTQtNzkxZC00MmQyLTgzMTMtOTAyYmM4NDk1OGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtsdwdbQHEdQeQ8Cg4KCXhqT1z0Lq1Pu+iNx QPrAFuX0sij5KJftkI72BMi9wjYh1P9vPSWB7mE8JW+cUFKOp8x3OZuOfZS1Ue5w 0Czv9mdnLy7h/vuYrTFzCFFYy63ZJMjZmzu1zViu3NHITJdAKnYNRXtk/GY529RL +w9oBAB7CfmKbWFsN8obthkBXmaXEdjow99YcCtrAyOgW7eHQIjq1JHuKAbrSypE wCnxV0gyYLZsTvGqqpsAp/JPxKllFKPkSQUha4NyiXiuA6Yat2/ry/vQeUsquur3 Gr9arRlmsuZOcxf/OxCtQFihn3OnQ/0V2G0a5kD8FsPMMd/D8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeSUa/J7yb36XlJW1i4xjnpKaRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2QyNDFkYjgtZWNhZi0z YTNiLTllNzctODgxNGZjN2ZlZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmOWDotVrlCy9Cy9sDVeC/CmBO0J6HqMuJK5uOsLi2FdFsRvDYVYJ8A KVaAuVzqXX1xIe7ZCjkwJMZdae5gtaqy2UgW4YVkAuXeIRbJ28HN2Xs7mg9+63Ys Na8iQU6kFfHPzjnjttGKzss1TPfUmhJ4gcLoRJgm6xw8o20ZE0pj5i0EZDSiBBRq RXvfctTdDQCkb3K1HCL68OT+l6cnH8ct3PvXuVHRiLghRrQtkBkGWIc+7n2Au8rH NOIMyt6WlWjJDidUBydj09Wgk284pLUE4anLyiCqvlcWbQKbeq+jQVXgV/DQPNte w2v0EmCNE0RUusoBRfcigf0k36wyczA= -----END CERTIFICATE-----Generated at Wed Aug 6 11:11:02 2025 by rpki-client