$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa File: a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa (raw, json) Hash identifier: 0B7VGTwXZxMvhnqan4DrOQeLsVHIEurCVwoUXiXHUf0= Subject key identifier: 00:03:AF:A4:95:A3:77:6B:11:A1:56:FD:5B:D5:B2:0E:48:C2:EA:78 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61E316EFE93E0E59F16C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 203 IP address blocks: 20.134.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1e:31:6e:fe:93:e0:e5:9f:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=bb452874-6681-4bb5-b1c7-e16131c5e4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:dc:29:3e:ae:ba:6f:46:e9:ef:fa:f3:7f:2a: 3d:5e:de:40:44:46:29:d0:b4:51:55:fe:a1:4c:79: 71:45:a3:63:38:88:da:e8:81:1a:a1:e7:7b:e2:3b: c5:41:05:33:12:d0:c7:2e:a3:d4:60:31:43:62:03: 5e:59:2f:e7:e2:4b:cc:82:de:f5:47:6c:a6:96:22: 34:b3:7d:df:3f:6b:f6:23:0b:0e:e9:e2:e0:e8:d7: 25:8f:70:53:d5:71:9a:ec:fa:15:5e:57:be:ce:f3: 35:c7:c2:94:ec:35:2c:68:1b:08:9b:04:1d:de:93: b4:b9:ae:d8:b4:82:a7:1b:97:f0:2c:80:61:d2:9c: 83:9a:da:28:2e:2e:7e:4a:6d:73:d9:63:02:af:dd: 9f:95:e3:13:b0:6b:0b:c6:47:e1:2d:99:ae:2c:d6: 6b:27:f4:a5:d7:11:df:3b:d6:9d:87:36:96:16:eb: f2:94:9d:ce:c7:4d:d6:67:ce:67:4c:18:1e:5d:b5: cb:6e:28:cf:aa:3f:d1:19:45:80:9d:7a:49:af:01: a6:47:29:9f:f4:13:06:c9:30:67:62:59:64:6a:70: f4:0f:bd:5d:1b:60:b0:bc:d0:9e:32:8a:2a:50:ac: 2b:e3:5c:4a:55:0e:ff:65:ae:ca:6e:6d:42:80:af: 11:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:03:AF:A4:95:A3:77:6B:11:A1:56:FD:5B:D5:B2:0E:48:C2:EA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f9:50:d0:cb:80:66:56:33:56:f1:d1:a9:22:87:e2:38:8c: 1b:98:90:56:16:81:c6:74:1b:4b:27:c5:8e:9d:e0:34:b1:a1: b0:e5:17:38:43:40:9e:da:76:eb:ce:15:76:93:3c:c8:55:17: 69:25:bb:45:ce:7a:e0:ef:04:41:20:2f:35:95:39:8d:a9:14: 7e:cb:80:55:e1:be:1a:d2:c2:fa:ae:b8:8c:49:d0:d4:55:1f: 66:ac:39:8e:21:68:2a:8f:6e:ad:c0:4d:0d:32:f4:48:54:c3: 52:a2:6f:f7:3e:17:61:2b:ff:d1:97:2b:e4:48:f7:5f:02:e9: 38:fc:b5:c5:da:57:12:df:e2:1c:01:a2:90:6c:ab:40:5b:f9: f4:34:21:c3:be:94:84:18:a0:d7:58:67:44:57:0e:22:dc:7d: 57:5f:e6:ec:2e:09:e5:5e:84:04:c3:cd:b9:8c:d4:fd:30:7e: d1:34:91:61:9b:87:59:89:ff:b3:65:ca:83:34:b1:6d:61:06: be:72:e9:5d:05:92:44:97:1f:0e:17:4c:6c:36:35:b2:9f:ce: ec:8d:49:48:6e:9b:44:5e:d2:06:a5:0a:98:42:2e:d6:5f:c7: 6e:70:b7:21:fa:2f:83:50:8c:42:fe:58:31:aa:5f:c4:d6:f8: a0:68:f3:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3th4xbv6T4OWfFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk YmI0NTI4NzQtNjY4MS00YmI1LWIxYzctZTE2MTMxYzVlNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdwpPq66b0bp7/rzfyo9Xt5AREYp0LRRVf6h THlxRaNjOIja6IEaoed74jvFQQUzEtDHLqPUYDFDYgNeWS/n4kvMgt71R2ymliI0 s33fP2v2IwsO6eLg6Nclj3BT1XGa7PoVXle+zvM1x8KU7DUsaBsImwQd3pO0ua7Y tIKnG5fwLIBh0pyDmtooLi5+Sm1z2WMCr92fleMTsGsLxkfhLZmuLNZrJ/Sl1xHf O9adhzaWFuvylJ3Ox03WZ85nTBgeXbXLbijPqj/RGUWAnXpJrwGmRymf9BMGyTBn YllkanD0D71dG2CwvNCeMooqUKwr41xKVQ7/Za7Kbm1CgK8RjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAADr6SVo3drEaFW/VvVsg5Iwup4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTUxYzFiNzEtMmRhMi0z YTlmLWE3MWYtZTE1YzkzNGNjN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD35UNDLgGZWM1bx0akih+I4jBuYkFYWgcZ0G0snxY6d4DSxobDlFzhD QJ7aduvOFXaTPMhVF2klu0XOeuDvBEEgLzWVOY2pFH7LgFXhvhrSwvquuIxJ0NRV H2asOY4haCqPbq3ATQ0y9EhUw1Kib/c+F2Er/9GXK+RI918C6Tj8tcXaVxLf4hwB opBsq0Bb+fQ0IcO+lIQYoNdYZ0RXDiLcfVdf5uwuCeVehATDzbmM1P0wftE0kWGb h1mJ/7NlyoM0sW1hBr5y6V0FkkSXHw4XTGw2NbKfzuyNSUhum0Re0galCphCLtZf x25wtyH6L4NQjEL+WDGqX8TW+KBo87o= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:29 2025 by rpki-client