$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa File: 38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa (raw, json) Hash identifier: NCa2R8NhH/XEFTD8LjPICeXCZk4Nre+h4juJL25j83Y= Subject key identifier: 5F:8E:16:59:30:C8:55:EB:1C:A3:EC:18:CF:A0:64:D2:C9:0F:C5:13 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE93BDC89A492D1091E6E0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 3360 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:93:bd:c8:9a:49:2d:10:91:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=ffb57963-a104-42b8-b3b9-1dd9deff3064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c4:db:91:b8:99:04:f8:cf:c8:03:60:2f:95: c9:19:c9:82:4c:b6:62:39:12:d0:ae:0f:c6:f4:ee: e8:a8:cf:54:5b:99:9c:14:0a:26:36:36:2b:10:c8: 6d:1d:34:f0:cb:ee:60:86:0a:73:59:16:5d:06:7a: 43:8d:55:5c:12:85:b5:c8:e2:ba:10:50:8e:13:7a: 24:76:15:de:41:ae:24:25:60:f9:44:40:1a:83:ad: c1:77:ea:51:a1:e0:ae:5a:53:ed:ec:16:c9:32:12: 46:33:20:54:a5:ee:35:d7:b0:a3:3e:e2:95:c7:78: 00:aa:3b:48:62:60:a6:55:b8:d1:11:3c:bd:c9:b5: fe:5c:18:2c:08:85:ac:38:b8:72:cd:74:c0:5b:36: 51:93:49:f9:65:e5:ce:6a:7f:4d:3a:f2:d5:3d:72: d4:9c:c9:73:2a:fa:04:c0:0e:04:f8:d7:bd:13:b6: f9:1b:1d:d4:8e:c6:3d:05:b5:af:fc:12:47:57:94: 28:e4:01:0c:8a:5a:5b:cd:40:f6:32:f1:90:6b:7d: df:ec:a3:d4:c2:bd:0f:b1:c7:38:e8:d8:bd:28:4f: fd:95:4b:31:9d:1e:5a:5b:b0:91:4f:1a:d5:16:82: 97:f7:17:e2:d5:af:ce:b8:95:bc:16:41:71:36:ff: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8E:16:59:30:C8:55:EB:1C:A3:EC:18:CF:A0:64:D2:C9:0F:C5:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:3f:3d:43:8d:08:3b:b7:40:26:e4:05:26:71:8e:51:b7:7d: 02:79:3c:a9:c8:38:75:29:b7:ef:e5:6e:e9:87:a6:01:de:ac: ea:b7:9e:bd:a5:12:68:38:57:4b:8f:52:84:a5:e0:4f:6d:70: 16:97:9f:88:8f:4c:30:4d:82:b1:23:fc:91:da:bf:b8:1b:cc: 90:51:58:bb:cc:e8:ac:83:a8:e3:db:80:b6:05:fa:78:d3:f2: 21:30:0a:e6:1d:69:bd:98:0a:84:c9:a9:5d:b2:26:48:67:a4: 35:e3:e8:f4:eb:84:51:78:4b:28:b3:88:d8:8e:26:b1:d2:3c: ac:6f:75:75:09:ab:8e:18:82:b7:54:1e:82:89:c1:89:00:c4: 03:ce:b0:24:10:c0:54:76:97:55:bc:a8:19:a8:45:1a:d7:e5: 98:ea:a9:d3:cd:23:37:4c:2d:9a:61:8e:be:bc:b7:1d:48:29: 5b:13:7b:29:d8:b5:9c:5d:5f:ea:cb:19:4f:a8:88:64:83:7a: 5c:27:7e:2e:6a:0a:b5:40:07:a1:06:cf:84:66:9e:15:ba:bc: e0:b0:a1:0f:7a:b1:16:ce:3e:5f:4b:5d:54:ae:52:86:bc:6f: e6:49:00:a0:3b:d0:05:b8:c4:13:ec:54:30:84:56:69:de:64: 6d:ca:48:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpO9yJpJLRCR5uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZmZiNTc5NjMtYTEwNC00MmI4LWIzYjktMWRkOWRlZmYzMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MTbkbiZBPjPyANgL5XJGcmCTLZiORLQrg/G 9O7oqM9UW5mcFAomNjYrEMhtHTTwy+5ghgpzWRZdBnpDjVVcEoW1yOK6EFCOE3ok dhXeQa4kJWD5REAag63Bd+pRoeCuWlPt7BbJMhJGMyBUpe4117CjPuKVx3gAqjtI YmCmVbjRETy9ybX+XBgsCIWsOLhyzXTAWzZRk0n5ZeXOan9NOvLVPXLUnMlzKvoE wA4E+Ne9E7b5Gx3UjsY9BbWv/BJHV5Qo5AEMilpbzUD2MvGQa33f7KPUwr0Pscc4 6Ni9KE/9lUsxnR5aW7CRTxrVFoKX9xfi1a/OuJW8FkFxNv8K6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+OFlkwyFXrHKPsGM+gZNLJD8UTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhmNWYyYzQtYzFiMS0z YmU4LWFhNmYtMmVkNzg3MTNiMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEo/PUONCDu3QCbkBSZxjlG3fQJ5PKnIOHUpt+/lbumHpgHerOq3nr2l Emg4V0uPUoSl4E9tcBaXn4iPTDBNgrEj/JHav7gbzJBRWLvM6KyDqOPbgLYF+njT 8iEwCuYdab2YCoTJqV2yJkhnpDXj6PTrhFF4SyiziNiOJrHSPKxvdXUJq44YgrdU HoKJwYkAxAPOsCQQwFR2l1W8qBmoRRrX5ZjqqdPNIzdMLZphjr68tx1IKVsTeynY tZxdX+rLGU+oiGSDelwnfi5qCrVAB6EGz4RmnhW6vOCwoQ96sRbOPl9LXVSuUoa8 b+ZJAKA70AW4xBPsVDCEVmneZG3KSG4= -----END CERTIFICATE-----Generated at Sun Apr 6 07:31:10 2025 by rpki-client