$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c00a48d0-53f7-3c34-a123-70fbf7b25125.roa File: c00a48d0-53f7-3c34-a123-70fbf7b25125.roa (raw, json) Hash identifier: ZpfAA2uKF3Q3U2nEDK8bfbai4ILG0/HranAFEcJr/F4= Subject key identifier: 54:2A:9C:88:E4:F1:AC:41:1A:D3:DC:AD:B2:1C:10:4E:C7:00:E1:7B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB4EB7D5A6FF9C474D23FF000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c00a48d0-53f7-3c34-a123-70fbf7b25125.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 3360 IP address blocks: 20.134.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:7d:5a:6f:f9:c4:74:d2:3f:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=5b7ba609-a802-454f-81f3-c69622c4f3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:29:6c:73:a9:18:d7:74:6e:24:a2:76:48:60: f2:49:a2:96:31:8d:0d:60:c9:17:bd:2c:9a:1a:99: 33:9f:fe:fb:a4:4f:01:55:c9:30:05:fb:eb:0a:92: 43:73:da:5b:f7:46:82:a5:a0:af:00:ee:b4:cf:91: 6a:36:0e:36:df:5c:3d:fb:93:1c:17:fa:c1:d1:ff: 54:ea:ca:d1:5d:8f:64:96:12:c8:a9:0d:60:dc:e0: fb:44:44:94:00:67:66:cb:5c:d6:ae:df:89:d7:cd: 53:df:28:e2:d8:6a:a4:e0:b8:05:4f:1d:ed:6c:ff: 98:2e:f1:38:f0:56:51:aa:2a:ce:a6:02:72:5f:de: 27:80:9b:7b:e6:b9:35:c1:8c:72:ef:2b:a0:8d:07: 9b:c4:c8:a5:35:aa:d3:fa:f4:69:57:29:0c:a2:ec: 7a:d1:fd:8d:ff:98:60:51:ac:b6:4e:41:67:e8:5b: 90:cf:60:5a:56:6f:7c:90:d4:08:9a:3a:a2:99:e0: ea:89:17:dc:bb:61:eb:54:c5:bd:6f:df:68:82:db: 21:36:93:5e:57:f7:17:15:14:e1:9d:26:c9:fa:a3: d6:08:ed:a1:a3:ee:0d:94:31:2f:90:e2:2d:71:1c: 62:17:b8:2c:8d:d0:35:00:2d:0d:57:0e:94:3e:1f: 55:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2A:9C:88:E4:F1:AC:41:1A:D3:DC:AD:B2:1C:10:4E:C7:00:E1:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c00a48d0-53f7-3c34-a123-70fbf7b25125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:37:ed:5a:98:60:de:a6:a3:50:52:63:91:49:dd:9c:d0:f9: 5c:9f:c2:64:87:b9:79:2b:d9:1a:a7:9d:dc:ea:25:fa:44:39: 2e:3c:98:04:76:dd:e3:c6:f9:08:00:aa:cf:1d:9e:3d:13:cc: c9:19:18:02:08:ce:7f:22:b6:bb:f9:cd:08:51:cb:49:1e:b9: b5:c9:f5:51:6c:1e:8d:21:13:b9:51:8c:27:a0:25:47:dc:10: 40:35:71:e6:47:e7:ab:86:ad:4e:f2:3d:6f:5d:9a:13:d5:5d: e2:48:40:66:56:c4:06:f1:8a:51:a6:35:75:a2:e4:fa:67:23: 2d:9f:c5:5f:40:51:d1:7c:86:b0:78:a1:81:35:d7:59:56:00: 82:5d:cf:ac:f6:d8:a0:04:dd:b0:c3:3f:ff:a1:ec:50:38:4a: 93:af:25:ae:d1:ee:13:bf:0c:1d:30:e7:5f:de:ad:a0:48:75: 4e:e5:f4:e3:94:7e:cf:5c:25:76:a2:eb:ee:ce:b4:94:7f:e7: cf:eb:f1:76:d3:9b:47:5e:ed:83:96:e1:9f:b5:5f:0a:38:5a: 20:34:31:d1:6f:cb:f9:5f:0d:5d:01:9c:da:f3:a8:e5:d3:35: dc:43:29:b8:84:43:02:9e:2e:31:0d:23:05:db:eb:20:bd:c2: 38:cc:db:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0631ab/nEdNI/8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NWI3YmE2MDktYTgwMi00NTRmLTgxZjMtYzY5NjIyYzRmM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiylsc6kY13RuJKJ2SGDySaKWMY0NYMkXvSya Gpkzn/77pE8BVckwBfvrCpJDc9pb90aCpaCvAO60z5FqNg4231w9+5McF/rB0f9U 6srRXY9klhLIqQ1g3OD7RESUAGdmy1zWrt+J181T3yji2Gqk4LgFTx3tbP+YLvE4 8FZRqirOpgJyX94ngJt75rk1wYxy7yugjQebxMilNarT+vRpVykMoux60f2N/5hg Uay2TkFn6FuQz2BaVm98kNQImjqimeDqiRfcu2HrVMW9b99ogtshNpNeV/cXFRTh nSbJ+qPWCO2ho+4NlDEvkOItcRxiF7gsjdA1AC0NVw6UPh9VaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQqnIjk8axBGtPcrbIcEE7HAOF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzAwYTQ4ZDAtNTNmNy0z YzM0LWExMjMtNzBmYmY3YjI1MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI37VqYYN6mo1BSY5FJ3ZzQ+VyfwmSHuXkr2RqnndzqJfpEOS48mAR2 3ePG+QgAqs8dnj0TzMkZGAIIzn8itrv5zQhRy0keubXJ9VFsHo0hE7lRjCegJUfc EEA1ceZH56uGrU7yPW9dmhPVXeJIQGZWxAbxilGmNXWi5PpnIy2fxV9AUdF8hrB4 oYE111lWAIJdz6z22KAE3bDDP/+h7FA4SpOvJa7R7hO/DB0w51/eraBIdU7l9OOU fs9cJXai6+7OtJR/58/r8XbTm0de7YOW4Z+1Xwo4WiA0MdFvy/lfDV0BnNrzqOXT NdxDKbiEQwKeLjENIwXb6yC9wjjM27U= -----END CERTIFICATE-----Generated at Thu Aug 7 00:43:31 2025 by rpki-client