$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7d241db8-ecaf-3a3b-9e77-8814fc7fed64.roa File: 7d241db8-ecaf-3a3b-9e77-8814fc7fed64.roa (raw, json) Hash identifier: xxC/MgtAyhO3eUKWrZ6NsYvu4ELnaxSki3uOPnyiybI= Subject key identifier: CA:D0:36:B8:26:02:E7:2D:A0:C8:18:CC:3B:D1:82:FA:CB:D3:4B:40 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D6FA455F1534B52DB52C1B00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7d241db8-ecaf-3a3b-9e77-8814fc7fed64.roa Signing time: Tue 13 May 2025 13:01:02 +0000 ROA not before: Tue 13 May 2025 13:01:02 +0000 ROA not after: Mon 11 Aug 2025 13:01:02 +0000 asID: 202 IP address blocks: 20.134.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:fa:45:5f:15:34:b5:2d:b5:2c:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 13 13:01:02 2025 GMT Not After : Aug 11 13:01:02 2025 GMT Subject: CN=63b9a590-3901-43f9-94a5-9e9515995942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:0a:99:68:56:09:15:6d:de:dc:07:c7:f6: fe:26:b4:9c:83:9a:0c:3d:04:03:f7:96:bb:9a:42: 10:ab:d9:38:ec:fd:9b:d5:5b:06:e8:d9:05:12:4b: 3e:84:9c:e5:b2:7c:7d:d7:db:0f:04:18:75:00:fb: ba:7f:f3:9e:15:ef:dd:04:a0:72:b4:6c:ae:df:ac: 1d:7d:20:66:f4:33:70:d6:39:91:bb:10:93:84:9c: d0:c7:6f:e1:d9:b5:f6:86:65:69:e3:1e:42:0c:c6: 75:f3:89:0f:26:e6:5b:0e:5d:6c:60:cf:53:c6:b2: c8:85:c4:4d:56:87:3d:9e:b6:fb:53:80:1a:14:00: 28:c3:11:da:45:65:bb:f1:40:01:17:5a:48:ed:be: 47:20:41:4a:58:13:ee:a4:13:2b:a8:12:4a:08:24: 07:80:ce:e2:9e:ec:f1:4a:c3:d5:78:47:a5:f9:39: d0:61:cf:83:74:8f:43:f2:ce:d2:2c:a1:e0:a4:6c: 91:94:0f:ef:b7:27:4e:14:61:01:61:3f:14:e0:de: f1:6c:5f:97:c6:cb:6a:84:99:21:e3:fc:d1:f8:fe: c1:79:24:80:3d:9e:24:5a:29:8e:67:82:c8:0a:dc: 2d:86:c8:4b:a2:d4:a3:40:8a:59:41:ac:02:11:26: c9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D0:36:B8:26:02:E7:2D:A0:C8:18:CC:3B:D1:82:FA:CB:D3:4B:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7d241db8-ecaf-3a3b-9e77-8814fc7fed64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:32:af:7a:fb:0d:1e:36:19:fb:9a:14:6e:72:a8:8c:6d:76: 9a:09:0a:e2:ee:2b:8e:c1:4a:2e:c0:69:38:8d:43:f0:74:67: 02:e9:9b:2f:dd:af:53:ae:af:82:4c:e8:82:79:e1:93:60:3b: df:31:d8:e2:f6:32:39:e7:73:55:1d:10:ef:11:40:44:a0:86: 14:e6:b5:30:61:bf:81:c5:56:9d:6b:27:13:7c:25:58:3e:90: 65:13:ff:5f:df:a2:91:a0:54:0f:40:50:0a:e4:4c:77:c3:a7: f4:15:8a:c9:23:3a:e4:f0:eb:3d:d0:e3:8b:a3:10:cb:8f:dc: 8e:27:a9:d3:a1:79:d4:f3:71:28:c5:5d:6a:c1:d7:15:98:18: ef:d3:ef:4c:1d:39:5e:49:15:20:fc:87:d4:77:6c:c2:a1:62: aa:9c:fd:eb:f5:fc:52:53:78:54:7b:96:90:5a:b0:80:45:a9: 6b:21:d4:02:00:6b:50:28:4a:0b:ec:67:f5:ca:5e:64:a9:c7: 66:db:63:e9:94:81:42:d8:60:12:a6:53:6f:2d:0d:a4:ea:50: 7a:63:b0:83:1f:d6:e1:d5:b7:20:cb:28:8d:0a:27:1d:df:c9: d4:57:fe:d0:9a:a7:dc:a2:b1:f7:dd:19:b3:13:0b:15:29:dd: 45:55:5d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW+kVfFTS1LbUsGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk NjNiOWE1OTAtMzkwMS00M2Y5LTk0YTUtOWU5NTE1OTk1OTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHYKmWhWCRVt3twHx/b+JrScg5oMPQQD95a7 mkIQq9k47P2b1VsG6NkFEks+hJzlsnx919sPBBh1APu6f/OeFe/dBKBytGyu36wd fSBm9DNw1jmRuxCThJzQx2/h2bX2hmVp4x5CDMZ184kPJuZbDl1sYM9TxrLIhcRN Voc9nrb7U4AaFAAowxHaRWW78UABF1pI7b5HIEFKWBPupBMrqBJKCCQHgM7inuzx SsPVeEel+TnQYc+DdI9D8s7SLKHgpGyRlA/vtydOFGEBYT8U4N7xbF+XxstqhJkh 4/zR+P7BeSSAPZ4kWimOZ4LICtwthshLotSjQIpZQawCESbJwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrQNrgmAuctoMgYzDvRgvrL00tAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2QyNDFkYjgtZWNhZi0z YTNiLTllNzctODgxNGZjN2ZlZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8yr3r7DR42GfuaFG5yqIxtdpoJCuLuK47BSi7AaTiNQ/B0ZwLpmy/d r1Our4JM6IJ54ZNgO98x2OL2Mjnnc1UdEO8RQESghhTmtTBhv4HFVp1rJxN8JVg+ kGUT/1/fopGgVA9AUArkTHfDp/QViskjOuTw6z3Q44ujEMuP3I4nqdOhedTzcSjF XWrB1xWYGO/T70wdOV5JFSD8h9R3bMKhYqqc/ev1/FJTeFR7lpBasIBFqWsh1AIA a1AoSgvsZ/XKXmSpx2bbY+mUgULYYBKmU28tDaTqUHpjsIMf1uHVtyDLKI0KJx3f ydRX/tCap9yisffdGbMTCxUp3UVVXaU= -----END CERTIFICATE-----Generated at Thu Jul 10 06:43:58 2025 by rpki-client