$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa File: 3cb30814-1743-3f4c-9f2b-43e764333641.roa (raw, json) Hash identifier: A2F9mo8QwxUOEyekQxZYEmZJSBXjwdIB0iCm+OYqxUo= Subject key identifier: E6:AD:D4:D1:39:41:17:C3:A0:F4:E7:12:E2:74:11:A6:53:6C:0E:DF Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584AB7B61CB4DE357AF4CDE407B0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 202 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1c:b4:de:35:7a:f4:cd:e4:07:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=0ec497e2-5a61-40e0-a02a-11340e9b17c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4b:8c:bb:85:b7:a9:3c:29:b7:bf:e5:5d:ac: be:38:8b:a9:3d:97:9e:36:a8:c2:f7:1c:d2:cd:95: 32:12:77:87:40:f4:24:55:e9:b4:20:75:b9:e0:6c: 53:1a:fb:72:64:9c:18:6d:e7:36:16:8b:51:ce:e6: c2:30:e1:9f:11:5a:81:2c:e0:78:bf:93:27:b0:41: f8:f1:d4:15:b7:fd:ae:ac:51:ae:9d:be:04:11:06: 80:68:72:4b:21:c7:80:ac:aa:38:09:1c:f4:df:43: 36:eb:22:59:9e:4c:21:d0:64:42:40:44:c7:30:6b: 85:b7:14:f1:c6:ee:65:63:c3:9c:04:90:cd:70:77: 88:ce:92:2a:f6:61:51:ce:db:63:79:e9:93:68:ae: f3:55:79:39:5b:ce:9c:e2:56:05:cb:ac:44:3e:ab: de:ae:8b:46:de:6f:95:f1:68:94:40:e7:6d:92:ec: f3:ee:10:dd:48:30:f4:c7:16:36:43:e1:e0:0d:e7: 17:eb:c2:51:d9:44:9c:7e:25:0d:b5:73:a5:fb:21: 0b:56:27:6d:ed:0e:48:52:05:ca:76:7a:e0:cd:4e: 16:da:d1:29:df:c6:a0:e3:09:7e:e4:2c:3e:08:be: 70:b1:fe:fd:c7:10:d5:ab:9d:07:3d:c2:1d:04:d9: 4b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AD:D4:D1:39:41:17:C3:A0:F4:E7:12:E2:74:11:A6:53:6C:0E:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b8:30:c4:f7:9f:c2:32:24:7c:01:6e:05:b9:a4:2d:12:4c: 53:4a:b4:0a:e8:53:60:52:5a:28:f0:ee:4c:4b:a6:9b:93:bb: 74:6b:37:15:2c:01:c4:ab:10:80:03:0c:ab:63:5e:81:d7:68: 7b:35:11:dd:25:1e:ff:61:db:ea:7c:4f:bd:a0:bb:56:29:fa: d6:49:70:07:bc:91:7b:c8:ec:0c:49:a8:de:79:12:5f:4b:c4: e8:28:74:31:34:02:e0:47:ee:30:f1:eb:8a:d8:2b:c2:d2:a6: 89:13:a9:ca:2b:2d:30:29:70:90:62:92:0c:1c:1f:ed:07:77: 3c:89:33:18:a3:7e:a8:9c:21:bf:b2:68:d9:ee:71:c4:f0:2f: f6:90:72:38:a9:ea:ad:01:d9:28:7a:a0:ef:9a:9b:62:ad:57: 27:f0:ca:0d:b1:44:23:fe:ad:04:d3:24:38:0e:b2:92:48:f3: 28:ec:89:4b:e0:0c:d6:6f:28:75:a0:52:9d:93:95:f7:f0:a5: 03:e9:6d:3b:16:10:93:28:ba:0a:9c:29:8d:a9:ab:88:51:01: 5d:64:00:05:8e:94:eb:9e:80:ba:48:c7:22:31:82:b5:96:02: ba:f3:44:b3:7d:1f:81:e2:2e:de:86:e3:ae:1c:36:b5:e0:9b: d6:99:ee:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3thy03jV69M3kB7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk MGVjNDk3ZTItNWE2MS00MGUwLWEwMmEtMTEzNDBlOWIxN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkuMu4W3qTwpt7/lXay+OIupPZeeNqjC9xzS zZUyEneHQPQkVem0IHW54GxTGvtyZJwYbec2FotRzubCMOGfEVqBLOB4v5MnsEH4 8dQVt/2urFGunb4EEQaAaHJLIceArKo4CRz030M26yJZnkwh0GRCQETHMGuFtxTx xu5lY8OcBJDNcHeIzpIq9mFRzttjeemTaK7zVXk5W86c4lYFy6xEPqverotG3m+V 8WiUQOdtkuzz7hDdSDD0xxY2Q+HgDecX68JR2UScfiUNtXOl+yELVidt7Q5IUgXK dnrgzU4W2tEp38ag4wl+5Cw+CL5wsf79xxDVq50HPcIdBNlLCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOat1NE5QRfDoPTnEuJ0EaZTbA7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2NiMzA4MTQtMTc0My0z ZjRjLTlmMmItNDNlNzY0MzMzNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe4MMT3n8IyJHwBbgW5pC0STFNKtAroU2BSWijw7kxLppuTu3RrNxUs AcSrEIADDKtjXoHXaHs1Ed0lHv9h2+p8T72gu1Yp+tZJcAe8kXvI7AxJqN55El9L xOgodDE0AuBH7jDx64rYK8LSpokTqcorLTApcJBikgwcH+0HdzyJMxijfqicIb+y aNnuccTwL/aQcjip6q0B2Sh6oO+am2KtVyfwyg2xRCP+rQTTJDgOspJI8yjsiUvg DNZvKHWgUp2TlffwpQPpbTsWEJMougqcKY2pq4hRAV1kAAWOlOuegLpIxyIxgrWW ArrzRLN9H4HiLt6G464cNrXgm9aZ7ps= -----END CERTIFICATE-----Generated at Wed Aug 20 20:21:59 2025 by rpki-client