$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18f19b2b-7308-3927-99da-a7932c313c1a.roa File: 18f19b2b-7308-3927-99da-a7932c313c1a.roa (raw, json) Hash identifier: RUOPj982FxwbgxZDpdx6wSqPb8nl0D7sKTvThLJ3qBk= Subject key identifier: 6D:E5:7A:57:56:36:51:0C:45:1B:42:87:30:AC:4E:BA:8C:56:EB:46 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D6FA48B8A74F304F80627B97 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18f19b2b-7308-3927-99da-a7932c313c1a.roa Signing time: Tue 13 May 2025 13:01:02 +0000 ROA not before: Tue 13 May 2025 13:01:02 +0000 ROA not after: Mon 11 Aug 2025 13:01:02 +0000 asID: 202 IP address blocks: 20.139.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:fa:48:b8:a7:4f:30:4f:80:62:7b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 13 13:01:02 2025 GMT Not After : Aug 11 13:01:02 2025 GMT Subject: CN=31717797-2a72-443c-a895-8e545f4bc977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:c9:d4:5e:72:2a:e3:b5:c2:a7:c4:65:a3: ea:c9:c9:93:db:ec:6e:b0:7d:56:8a:6d:55:45:01: fd:b3:05:a1:8c:e0:a2:b4:2e:0d:6d:01:d7:39:06: 3e:bf:e1:20:00:34:78:6c:34:85:5a:d6:cc:b8:76: 8f:81:b3:69:10:f3:1a:69:7e:71:1a:c0:23:ed:cc: 70:cc:15:0b:69:14:de:2e:30:75:7e:b5:45:4f:63: 1e:a3:f4:cc:f8:ce:12:cf:8c:44:ef:47:ba:31:5f: e5:bb:dd:10:c1:8f:15:fd:66:3f:53:dd:ce:00:7f: 16:9d:37:57:3c:d1:2f:51:e1:18:41:a2:ed:3a:42: 55:bc:b3:60:5d:cf:71:64:eb:5b:3d:04:46:68:d4: 69:9e:a0:bd:d1:04:c9:d3:6f:1e:84:06:e3:49:fe: 1c:c0:cc:cc:5f:3a:ff:4d:08:be:73:1e:b0:12:26: 9c:9c:5e:1a:67:6b:1a:d6:a4:6f:46:43:41:da:2b: b9:5b:42:2f:a3:e9:70:23:a0:a6:7a:46:93:a0:4c: 9f:4e:a5:2b:12:40:74:89:14:db:76:42:4b:00:25: 7d:26:81:04:05:88:b2:83:f1:f7:22:b3:eb:a0:73: d7:17:4b:d7:2e:55:13:af:20:cf:43:6c:c3:30:05: 0d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E5:7A:57:56:36:51:0C:45:1B:42:87:30:AC:4E:BA:8C:56:EB:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18f19b2b-7308-3927-99da-a7932c313c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:da:99:eb:bf:d2:ac:fa:6c:5e:e0:5e:1d:7e:e0:e3:2c:c0: ca:ba:5c:5a:7a:cb:82:40:99:fa:62:3c:b3:b3:2f:a5:7a:da: 12:72:7e:5f:d4:ed:2c:32:da:11:dc:81:1b:f0:d9:f0:ba:6b: 0f:7a:cc:52:a5:83:c0:eb:0e:6b:cc:2c:b9:97:cd:8d:40:ea: 69:3f:52:83:6a:97:f5:97:97:8b:b7:08:6c:e8:52:b6:68:8d: 5c:5a:09:aa:97:38:0a:b2:ba:8a:0a:da:82:1f:4e:9a:f8:fe: e3:ab:4b:d3:b1:00:e7:d2:0e:70:58:03:49:77:29:02:58:0c: 91:24:88:84:fa:89:a2:91:15:eb:90:e6:5d:86:0e:63:49:b4: ea:47:8f:5c:54:72:44:c7:10:b7:b9:16:72:be:06:b5:d8:76: 4d:5c:09:27:ce:d6:60:aa:80:de:30:3a:97:ec:13:0e:ab:68: b1:22:2c:01:f0:11:1d:89:31:8f:cc:57:17:d8:64:45:d9:e3: 25:97:23:6e:9c:88:91:be:b9:c2:e1:f3:8e:46:f5:a9:9d:ee: 9a:d9:78:64:76:ac:44:53:fe:9a:23:e1:ae:f3:4b:14:90:4e: f2:d1:e2:c7:7f:0a:b9:71:f4:3c:e3:32:7b:09:bd:b4:29:2a: ab:4d:ab:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW+ki4p08wT4Bie5cwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk MzE3MTc3OTctMmE3Mi00NDNjLWE4OTUtOGU1NDVmNGJjOTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlTJ1F5yKuO1wqfEZaPqycmT2+xusH1Wim1V RQH9swWhjOCitC4NbQHXOQY+v+EgADR4bDSFWtbMuHaPgbNpEPMaaX5xGsAj7cxw zBULaRTeLjB1frVFT2Meo/TM+M4Sz4xE70e6MV/lu90QwY8V/WY/U93OAH8WnTdX PNEvUeEYQaLtOkJVvLNgXc9xZOtbPQRGaNRpnqC90QTJ028ehAbjSf4cwMzMXzr/ TQi+cx6wEiacnF4aZ2sa1qRvRkNB2iu5W0Ivo+lwI6CmekaToEyfTqUrEkB0iRTb dkJLACV9JoEEBYiyg/H3IrProHPXF0vXLlUTryDPQ2zDMAUNCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3leldWNlEMRRtChzCsTrqMVutGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMThmMTliMmItNzMwOC0z OTI3LTk5ZGEtYTc5MzJjMzEzYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvameu/0qz6bF7gXh1+4OMswMq6XFp6y4JAmfpiPLOzL6V62hJyfl/U 7Swy2hHcgRvw2fC6aw96zFKlg8DrDmvMLLmXzY1A6mk/UoNql/WXl4u3CGzoUrZo jVxaCaqXOAqyuooK2oIfTpr4/uOrS9OxAOfSDnBYA0l3KQJYDJEkiIT6iaKRFeuQ 5l2GDmNJtOpHj1xUckTHELe5FnK+BrXYdk1cCSfO1mCqgN4wOpfsEw6raLEiLAHw ER2JMY/MVxfYZEXZ4yWXI26ciJG+ucLh845G9amd7prZeGR2rERT/poj4a7zSxSQ TvLR4sd/Crlx9DzjMnsJvbQpKqtNq7s= -----END CERTIFICATE-----Generated at Sat Jun 7 00:30:49 2025 by rpki-client