$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa File: b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa (raw, json) Hash identifier: uYQtSIvj87qoXIp4NjG2Ovva3nFZpgCDGrRtYlcU0mA= Subject key identifier: 61:9E:AA:4F:78:6C:D2:86:29:1A:A6:BF:95:88:1A:05:D0:E2:60:13 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61D2A89F27A6E10BA3100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 3356 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1d:2a:89:f2:7a:6e:10:ba:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=a590eddd-19be-4d7c-a9a9-32cf4a709a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:78:03:75:23:cb:88:a5:47:2c:cb:ca:d3: ca:54:2b:0f:40:30:e2:db:52:59:bc:42:ea:97:c5: 20:d3:cb:81:0b:fd:39:d3:d9:b3:4c:14:7a:80:24: 47:ed:8d:41:ba:d5:29:49:7f:87:d1:89:58:ff:19: a3:04:ba:eb:50:bf:14:11:7f:e1:3d:be:14:45:3e: 13:69:c4:fb:f4:62:ed:58:87:ec:e7:23:8f:0a:01: ba:01:2a:97:25:e9:c4:1d:ae:8e:0e:be:c8:21:75: c5:b2:4c:a0:0e:5d:73:68:74:60:70:f8:32:08:13: bf:0d:04:d5:58:51:3c:a0:96:89:db:7e:68:b0:61: cf:7b:e8:01:68:00:b9:2b:94:c1:06:7d:d1:0e:fb: 53:7e:7b:eb:4b:94:11:34:b2:b9:17:99:14:ed:0e: db:bd:1b:e6:03:c0:b7:ae:66:5f:03:66:e8:2f:2d: c7:d6:c0:bb:4a:cf:b1:cb:1c:85:74:83:e0:cb:10: 5e:38:13:e0:e7:15:34:e8:36:5c:54:f0:37:0e:b6: bd:85:ab:64:a1:13:b4:f3:24:c8:0d:85:ad:fc:1a: db:0e:e0:10:41:bd:2d:d8:35:c9:a0:b8:17:26:4f: b4:c4:5b:72:d0:f6:ca:03:7d:3f:71:fa:0f:f1:88: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9E:AA:4F:78:6C:D2:86:29:1A:A6:BF:95:88:1A:05:D0:E2:60:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:80:ce:17:b8:86:90:49:0f:0b:a3:b1:ae:3c:74:aa:01:65: 5c:40:b2:81:ec:8b:b5:9a:3c:74:35:9d:e9:74:eb:34:a6:6b: 74:20:26:eb:e7:a7:73:81:e7:b5:65:06:a6:ac:d3:06:f4:f1: c8:51:44:53:c8:8b:f9:73:a3:ed:de:20:00:ea:6c:58:27:7b: 04:69:cd:6a:79:b5:e9:e6:28:12:fd:ba:b1:06:84:a8:39:08: df:32:16:81:f4:73:f7:d2:d8:88:33:dc:5b:3b:dd:f4:98:9c: 11:a4:11:3f:bf:65:06:f4:96:01:0b:4b:95:b9:f7:5f:6d:ac: 24:42:b0:9f:e9:67:68:0d:67:98:55:e7:e8:97:1e:d4:83:23: e9:27:68:0b:2d:12:df:69:1a:a1:0a:2a:95:f6:fe:d8:e3:ba: 54:34:2a:64:8d:87:6b:29:30:1a:52:90:77:40:0f:c0:7f:1c: 76:36:e7:f8:88:2e:1e:67:e9:35:8c:a8:91:db:3c:36:b3:7d: 4f:19:cd:26:97:64:7e:49:65:c0:cf:3a:a8:99:fb:40:ae:db: cf:87:de:9f:30:59:bd:20:5f:81:ef:1d:e6:95:2e:33:1e:4f: 2b:1f:8d:e1:4e:86:0b:f6:b9:26:4d:27:1b:31:11:9a:94:da: b8:6b:12:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3th0qifJ6bhC6MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk YTU5MGVkZGQtMTliZS00ZDdjLWE5YTktMzJjZjRhNzA5YTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiah4A3Ujy4ilRyzLytPKVCsPQDDi21JZvELq l8Ug08uBC/0509mzTBR6gCRH7Y1ButUpSX+H0YlY/xmjBLrrUL8UEX/hPb4URT4T acT79GLtWIfs5yOPCgG6ASqXJenEHa6ODr7IIXXFskygDl1zaHRgcPgyCBO/DQTV WFE8oJaJ235osGHPe+gBaAC5K5TBBn3RDvtTfnvrS5QRNLK5F5kU7Q7bvRvmA8C3 rmZfA2boLy3H1sC7Ss+xyxyFdIPgyxBeOBPg5xU06DZcVPA3Dra9hatkoRO08yTI DYWt/BrbDuAQQb0t2DXJoLgXJk+0xFty0PbKA30/cfoP8YhdQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGeqk94bNKGKRqmv5WIGgXQ4mATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjE2ZGI2YWEtM2VlYi0z MjMwLTk4MGYtMThjMGE2MGMzYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOAzhe4hpBJDwujsa48dKoBZVxAsoHsi7WaPHQ1nel06zSma3QgJuvn p3OB57VlBqas0wb08chRRFPIi/lzo+3eIADqbFgnewRpzWp5tenmKBL9urEGhKg5 CN8yFoH0c/fS2Igz3Fs73fSYnBGkET+/ZQb0lgELS5W5919trCRCsJ/pZ2gNZ5hV 5+iXHtSDI+knaAstEt9pGqEKKpX2/tjjulQ0KmSNh2spMBpSkHdAD8B/HHY25/iI Lh5n6TWMqJHbPDazfU8ZzSaXZH5JZcDPOqiZ+0Cu28+H3p8wWb0gX4HvHeaVLjMe TysfjeFOhgv2uSZNJxsxEZqU2rhrEtA= -----END CERTIFICATE-----Generated at Thu Aug 7 04:44:09 2025 by rpki-client