$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac7e5964-f652-3724-a0ba-235f4627f21f.roa File: ac7e5964-f652-3724-a0ba-235f4627f21f.roa (raw, json) Hash identifier: xbGFfxIuPcI0rBVChbJ8ZKzrJfACO0V6J++CrnH8QLA= Subject key identifier: BF:68:D1:53:A7:63:26:C2:0E:B9:A8:35:63:06:77:7F:5D:8C:C3:BC Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB4EB7D1B08D2A721FD61E180 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac7e5964-f652-3724-a0ba-235f4627f21f.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 3360 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:7d:1b:08:d2:a7:21:fd:61:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=8c31ad72-9803-4827-a897-0f74d08a00d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:66:55:ac:c2:60:6c:d3:ce:41:7e:e8:4d:a6: ed:06:73:6b:2f:40:29:10:b8:65:97:6e:c4:7e:90: 10:8a:97:2c:38:5c:33:2f:d1:17:dc:87:b9:05:87: de:af:c0:cd:98:8f:68:b5:e8:57:c6:db:db:0b:32: 79:ce:4b:a0:e5:0d:1a:f8:59:16:1c:1b:17:c5:fb: 56:24:f4:43:d7:5d:43:11:f5:f0:96:71:c8:3f:be: fe:83:a2:2a:ef:aa:31:ab:fe:a2:5b:cf:bc:6e:86: 28:77:5f:1a:27:df:cc:60:78:f9:50:9c:49:59:62: 39:e6:7d:2f:ca:2f:70:cd:a7:79:52:a9:a9:7e:1c: 0d:33:23:16:6d:d6:49:41:e6:63:45:14:96:31:7d: 9c:36:ac:f4:be:41:0e:37:19:96:4c:a0:49:e7:2a: a0:e9:8a:82:d0:26:0d:d8:22:b7:a2:c8:b6:ba:0b: 85:55:38:13:ba:0d:fc:94:1f:54:89:0d:84:57:85: a8:e6:e4:1e:35:be:7d:bd:c5:be:eb:d5:74:db:81: 8b:f8:40:d2:14:f1:bb:33:d5:bc:be:7e:f1:81:19: f7:a6:42:75:60:a7:63:88:ea:4b:34:b1:de:23:f6: fd:16:1d:66:5a:0d:42:62:11:ec:b7:0f:90:bd:15: f9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:68:D1:53:A7:63:26:C2:0E:B9:A8:35:63:06:77:7F:5D:8C:C3:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac7e5964-f652-3724-a0ba-235f4627f21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:81:e0:67:eb:53:e2:18:aa:c7:6e:b1:a5:3f:c9:28:6d:76: fd:a2:6a:49:7c:42:48:3e:2c:ec:5e:f8:86:47:fd:12:f1:3b: c1:4e:4a:d4:5f:c2:3d:0d:ad:78:b0:23:39:76:19:e5:4e:df: b0:f0:7a:18:9d:20:8c:3b:91:6f:53:1f:ec:43:61:8c:b0:3e: 26:35:e6:04:71:b4:68:49:1c:5c:6e:3f:f7:a1:ca:50:d7:e2: af:1b:a3:70:ce:76:e8:15:49:a0:60:ff:29:c6:33:e3:40:e3: c5:46:67:2b:43:40:be:c4:3b:e5:89:28:0a:98:f5:a2:58:4b: 1c:d5:35:83:8e:53:37:fb:d7:1f:c6:cc:53:55:66:5f:ce:e9: c9:6d:30:96:b4:dc:1b:40:1a:3e:cc:f1:d3:f8:1f:35:0a:b3: 1d:69:7f:fd:57:54:6b:b0:9a:e7:c0:09:55:30:84:16:d9:b3: 99:aa:e0:bd:91:69:b2:78:ad:42:2a:10:37:7b:89:7a:39:be: ba:12:bc:10:cd:ba:0b:c0:69:a4:51:19:00:91:d8:e9:d4:eb: d2:af:26:32:09:33:77:3f:a5:1f:0e:43:0a:a2:cf:b5:c8:b3: 8c:db:b2:fd:0c:e4:cc:57:c8:ca:42:3d:6c:fa:18:92:19:9e: 88:fa:81:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0630bCNKnIf1h4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OGMzMWFkNzItOTgwMy00ODI3LWE4OTctMGY3NGQwOGEwMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2ZVrMJgbNPOQX7oTabtBnNrL0ApELhll27E fpAQipcsOFwzL9EX3Ie5BYfer8DNmI9otehXxtvbCzJ5zkug5Q0a+FkWHBsXxftW JPRD111DEfXwlnHIP77+g6Iq76oxq/6iW8+8boYod18aJ9/MYHj5UJxJWWI55n0v yi9wzad5UqmpfhwNMyMWbdZJQeZjRRSWMX2cNqz0vkEONxmWTKBJ5yqg6YqC0CYN 2CK3osi2uguFVTgTug38lB9UiQ2EV4Wo5uQeNb59vcW+69V024GL+EDSFPG7M9W8 vn7xgRn3pkJ1YKdjiOpLNLHeI/b9Fh1mWg1CYhHstw+QvRX5vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9o0VOnYybCDrmoNWMGd39djMO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWM3ZTU5NjQtZjY1Mi0z NzI0LWEwYmEtMjM1ZjQ2MjdmMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyB4GfrU+IYqsdusaU/yShtdv2iakl8Qkg+LOxe+IZH/RLxO8FOStRf wj0NrXiwIzl2GeVO37DwehidIIw7kW9TH+xDYYywPiY15gRxtGhJHFxuP/ehylDX 4q8bo3DOdugVSaBg/ynGM+NA48VGZytDQL7EO+WJKAqY9aJYSxzVNYOOUzf71x/G zFNVZl/O6cltMJa03BtAGj7M8dP4HzUKsx1pf/1XVGuwmufACVUwhBbZs5mq4L2R abJ4rUIqEDd7iXo5vroSvBDNugvAaaRRGQCR2OnU69KvJjIJM3c/pR8OQwqiz7XI s4zbsv0M5MxXyMpCPWz6GJIZnoj6gSk= -----END CERTIFICATE-----Generated at Thu Aug 7 01:21:38 2025 by rpki-client