$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa File: 25c05be1-22a2-319c-ab38-889cdebd39e8.roa (raw, json) Hash identifier: MBXrU4k7cdaRMmOb/V4p4HI3S16K9fk4NuQ5Tyk14lU= Subject key identifier: C6:DD:5B:EE:EF:0B:33:20:5E:87:D3:DF:94:AF:84:F2:FD:D0:56:6B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849244E6F5805E592BA29EF6800 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 203 IP address blocks: 20.137.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:6f:58:05:e5:92:ba:29:ef:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=b012af44-de12-49b2-a9fd-a945c9ac0f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:7d:89:77:4d:36:48:d2:a9:a5:8e:92:4e: 12:27:ff:dd:fa:f7:31:00:0b:6e:1c:8c:27:1e:a9: d1:f3:6c:b8:10:13:0b:48:43:3c:6b:6b:a3:f0:17: 43:b0:e1:92:3b:c6:2a:f9:48:11:86:2a:6d:10:e7: e0:ef:0d:eb:74:8e:2c:be:88:52:05:96:ef:c1:85: d6:59:d6:91:e5:51:2e:b4:93:55:38:3b:fa:d5:a2: d3:18:cf:96:83:32:79:37:df:9d:fd:82:b2:9a:c9: 33:06:1b:36:a0:3c:d9:f9:ce:5b:cb:f4:08:e9:1b: c9:ae:1b:c8:09:ad:5a:72:98:d9:98:9a:dd:75:b6: 5e:e1:bf:06:da:9c:c2:2c:f3:08:bc:63:3b:00:0d: 6a:5b:c2:18:84:2e:7f:b1:81:a4:6a:78:ab:7d:5e: 40:d4:e5:ff:1c:58:e4:a2:9c:49:55:38:eb:5a:c8: 3d:d7:d9:e2:f2:a1:d3:f1:4b:00:9c:f2:76:4b:20: 8f:2a:40:76:78:75:c3:9d:9a:5e:03:39:71:c6:6c: 8a:74:da:49:f3:20:47:b9:42:44:75:b6:8a:dd:c7: 6e:01:86:ea:de:eb:45:f9:f7:04:5a:d1:d4:8b:f5: 0b:5b:37:87:f0:91:48:59:79:68:d3:10:4f:3b:c1: bf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DD:5B:EE:EF:0B:33:20:5E:87:D3:DF:94:AF:84:F2:FD:D0:56:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/25c05be1-22a2-319c-ab38-889cdebd39e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ac:a0:9a:55:34:e7:e4:71:02:74:23:49:4a:9b:2a:ac:3a: 1d:de:31:1d:34:5e:31:a8:82:a0:4c:6e:0a:5d:80:b5:49:29: 76:9e:ed:fa:42:38:10:67:09:14:2e:6a:01:a9:5e:4a:30:e5: bb:d9:31:ac:f5:74:4f:67:b3:01:ef:42:d0:b3:77:e9:0c:c0: e7:ec:08:68:0b:9a:ef:37:b1:13:8f:b7:39:0e:d4:9e:81:28: 1d:b1:34:e4:80:aa:eb:13:72:f1:8b:88:04:e2:ff:f8:1a:52: 68:d0:f7:8c:71:a4:b0:e0:e9:0c:43:8f:10:69:a5:d0:57:c1: 06:d9:66:b0:83:4c:73:63:6c:cc:b7:ad:e7:43:a8:8f:11:5c: e4:17:fe:d7:df:52:ed:6e:95:ec:32:95:91:85:cd:6b:fb:25: e5:6f:d9:39:e8:09:79:83:4e:24:9a:9d:0f:01:a5:2f:c0:58: ec:30:5f:7e:df:7c:80:04:3d:69:06:2b:ac:71:71:0a:6a:7e: f4:8c:7a:08:be:95:ca:01:98:8a:a7:a4:eb:85:b3:59:b3:09: ed:8c:d3:0d:44:4f:25:42:55:81:61:2a:58:6b:6a:5a:06:16: d6:1b:8b:10:5a:6d:b0:9c:4c:85:06:68:fd:16:e7:06:5e:b8: 8d:4e:70:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTm9YBeWSuinvaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YjAxMmFmNDQtZGUxMi00OWIyLWE5ZmQtYTk0NWM5YWMwZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8F9iXdNNkjSqaWOkk4SJ//d+vcxAAtuHIwn HqnR82y4EBMLSEM8a2uj8BdDsOGSO8Yq+UgRhiptEOfg7w3rdI4svohSBZbvwYXW WdaR5VEutJNVODv61aLTGM+WgzJ5N9+d/YKymskzBhs2oDzZ+c5by/QI6RvJrhvI Ca1acpjZmJrddbZe4b8G2pzCLPMIvGM7AA1qW8IYhC5/sYGkanirfV5A1OX/HFjk opxJVTjrWsg919ni8qHT8UsAnPJ2SyCPKkB2eHXDnZpeAzlxxmyKdNpJ8yBHuUJE dbaK3cduAYbq3utF+fcEWtHUi/ULWzeH8JFIWXlo0xBPO8G/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbdW+7vCzMgXofT35SvhPL90FZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjVjMDViZTEtMjJhMi0z MTljLWFiMzgtODg5Y2RlYmQzOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6soJpVNOfkcQJ0I0lKmyqsOh3eMR00XjGogqBMbgpdgLVJKXae7fpC OBBnCRQuagGpXkow5bvZMaz1dE9nswHvQtCzd+kMwOfsCGgLmu83sROPtzkO1J6B KB2xNOSAqusTcvGLiATi//gaUmjQ94xxpLDg6QxDjxBppdBXwQbZZrCDTHNjbMy3 redDqI8RXOQX/tffUu1ulewylZGFzWv7JeVv2TnoCXmDTiSanQ8BpS/AWOwwX37f fIAEPWkGK6xxcQpqfvSMegi+lcoBmIqnpOuFs1mzCe2M0w1ETyVCVYFhKlhraloG FtYbixBabbCcTIUGaP0W5wZeuI1OcFo= -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:05 2025 by rpki-client