$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa File: 7ec506b0-9799-3a53-982d-39afbe885b36.roa (raw, json) Hash identifier: AD8+cHKlmaBB25YcIvKdwqxPdjOcev8dzRwAH1nz6zs= Subject key identifier: 8A:0F:59:84:56:16:F4:02:E7:47:86:24:75:20:6C:35:90:10:1D:60 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61E190C6093604607CF00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 203 IP address blocks: 20.134.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1e:19:0c:60:93:60:46:07:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=500a239d-53d7-4171-a0aa-29431c7b2ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:03:69:d5:bf:e7:43:a3:61:d7:1a:01:ac: 9e:32:91:30:ed:d2:d1:54:fd:46:4e:f4:c4:14:bd: 5f:ef:fb:31:5f:fd:6c:2c:04:e0:cc:6a:4d:52:98: 3c:80:d7:da:66:78:eb:2e:ad:ed:73:cc:01:b0:d0: ae:17:94:4f:1b:e8:66:be:92:cb:14:44:2b:2c:93: 3a:d2:88:cd:34:22:f5:41:5b:b2:d1:d5:f5:71:23: ce:bc:86:da:b9:02:95:fe:e4:85:0d:7a:71:a2:2c: 35:fe:50:fa:c1:12:fa:22:1a:62:51:ac:9c:41:5f: ac:f1:4d:5c:69:50:c4:3d:49:55:0a:3b:7f:d4:66: d0:74:12:8b:88:df:50:e4:27:7d:c9:fc:dd:c0:19: c9:e3:70:8f:eb:86:fe:e7:36:24:c6:46:72:4f:46: 69:84:6c:f5:82:f6:12:67:b0:38:3e:f3:92:d1:70: bf:71:21:4d:4e:2d:55:88:d4:e6:05:5b:a1:e5:ce: 22:00:2a:0e:e0:ce:9b:72:f9:e5:26:ef:9c:19:35: b8:ac:12:cf:2d:c9:64:c6:f1:e7:cb:fc:56:04:0d: 6a:ca:9a:04:52:18:3a:4d:58:69:2e:c0:82:91:89: 87:c5:72:02:43:a9:d9:9b:b6:46:c2:79:3c:34:be: 2f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0F:59:84:56:16:F4:02:E7:47:86:24:75:20:6C:35:90:10:1D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:da:21:5a:d6:ef:e7:15:73:f8:9a:c0:6c:d2:53:ca:f8:9d: dd:54:43:67:8a:bc:c5:22:42:de:e6:4a:5a:b5:59:7f:68:67: 48:a7:f2:23:40:6a:e1:ee:bc:ef:cb:05:26:de:91:6d:73:9f: c6:da:5f:d2:62:e8:1c:7c:fe:6c:97:ce:07:87:8a:a5:81:8e: 50:3d:72:da:d2:d8:03:bb:46:45:4c:69:83:61:58:0c:95:c6: a5:bd:6b:08:53:9f:21:bf:a9:d2:d0:88:47:13:e5:b3:cf:4f: f7:8c:27:53:b8:21:ed:84:f3:ec:30:ca:c7:d7:a8:a8:65:89: f9:5a:6b:f7:c6:7a:99:31:97:dc:37:02:3d:c9:7c:80:1e:a6: 38:c8:00:05:c8:75:2a:04:e4:2f:29:ee:d9:f1:30:00:8d:16: 06:dc:15:ae:e1:cd:9c:6c:1f:7c:97:fe:a1:a8:21:3d:c7:11: a7:b0:e1:57:76:4a:db:77:27:f1:15:14:2f:ee:1f:4f:6f:26: 91:22:55:e6:d6:89:7c:85:59:c7:68:09:e9:43:7f:dd:9a:65: fe:2f:73:a0:26:2d:c4:7f:ba:03:cb:ce:36:f4:80:75:27:63: 1e:22:61:ff:5c:4b:3b:92:6d:bf:25:94:ee:f2:67:dd:1b:fe: bb:40:5f:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3th4ZDGCTYEYHzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk NTAwYTIzOWQtNTNkNy00MTcxLWEwYWEtMjk0MzFjN2IyZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjawDadW/50OjYdcaAayeMpEw7dLRVP1GTvTE FL1f7/sxX/1sLATgzGpNUpg8gNfaZnjrLq3tc8wBsNCuF5RPG+hmvpLLFEQrLJM6 0ojNNCL1QVuy0dX1cSPOvIbauQKV/uSFDXpxoiw1/lD6wRL6IhpiUaycQV+s8U1c aVDEPUlVCjt/1GbQdBKLiN9Q5Cd9yfzdwBnJ43CP64b+5zYkxkZyT0ZphGz1gvYS Z7A4PvOS0XC/cSFNTi1ViNTmBVuh5c4iACoO4M6bcvnlJu+cGTW4rBLPLclkxvHn y/xWBA1qypoEUhg6TVhpLsCCkYmHxXICQ6nZm7ZGwnk8NL4vPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoPWYRWFvQC50eGJHUgbDWQEB1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2VjNTA2YjAtOTc5OS0z YTUzLTk4MmQtMzlhZmJlODg1YjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfaIVrW7+cVc/iawGzSU8r4nd1UQ2eKvMUiQt7mSlq1WX9oZ0in8iNA auHuvO/LBSbekW1zn8baX9Ji6Bx8/myXzgeHiqWBjlA9ctrS2AO7RkVMaYNhWAyV xqW9awhTnyG/qdLQiEcT5bPPT/eMJ1O4Ie2E8+wwysfXqKhliflaa/fGepkxl9w3 Aj3JfIAepjjIAAXIdSoE5C8p7tnxMACNFgbcFa7hzZxsH3yX/qGoIT3HEaew4Vd2 Stt3J/EVFC/uH09vJpEiVebWiXyFWcdoCelDf92aZf4vc6AmLcR/ugPLzjb0gHUn Yx4iYf9cSzuSbb8llO7yZ90b/rtAX0c= -----END CERTIFICATE-----Generated at Thu Aug 7 05:16:07 2025 by rpki-client