$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa File: 3cb30814-1743-3f4c-9f2b-43e764333641.roa (raw, json) Hash identifier: brhnyZnGn+0mt7BdgsWJ6wBYLJl/8OxHBYZSN/Od79E= Subject key identifier: E7:77:A3:28:B5:83:BE:46:D2:D6:7D:9A:ED:50:CA:65:8B:23:AD:04 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D6FA44897880EB4715EAD520 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa Signing time: Tue 13 May 2025 13:01:02 +0000 ROA not before: Tue 13 May 2025 13:01:02 +0000 ROA not after: Mon 11 Aug 2025 13:01:02 +0000 asID: 202 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:fa:44:89:78:80:eb:47:15:ea:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 13 13:01:02 2025 GMT Not After : Aug 11 13:01:02 2025 GMT Subject: CN=2f70a9cc-45f8-4130-833b-5db69837daf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:a3:c0:dc:d4:95:74:8f:8c:24:1b:bf:01: 96:7a:32:ff:bd:9e:4a:a1:d8:af:11:e1:3f:ac:48: 09:b2:a8:4e:f8:ab:af:e0:c8:71:c4:60:4f:40:6a: dd:18:5b:a5:ff:c6:67:04:8e:6f:04:dc:93:07:0f: 10:9f:97:de:de:e4:3f:c2:bc:12:6c:d1:04:c1:81: 4d:0c:2f:aa:e8:57:48:56:51:47:3a:f5:8e:52:81: ea:a3:21:5f:85:19:ad:fc:a2:6d:04:78:ce:f1:ea: 0f:6f:0f:5a:84:4f:97:b5:83:c0:2e:f2:d3:96:52: ee:c8:80:46:df:f7:d9:b5:85:72:79:d9:87:95:d7: 19:38:c8:89:cb:6e:72:51:9f:22:f0:b1:c3:66:a3: 13:9e:df:23:7f:07:a5:40:d3:03:1d:65:1e:c0:98: 12:a0:96:a7:65:0e:4d:46:f4:dd:c0:6e:46:61:12: 92:ef:67:f6:73:a7:2a:74:f9:03:51:9f:f1:9e:fa: 4c:10:11:7a:80:6c:69:25:b7:c7:c3:cc:1b:67:56: 4a:1a:0d:30:89:0b:d7:9f:b5:03:31:fb:85:35:d0: c3:2a:f1:dd:f6:06:3e:f1:1a:f4:d0:0d:43:c9:ce: af:a0:66:03:cc:fa:c9:73:d0:b4:58:bc:d1:bd:cc: 34:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:77:A3:28:B5:83:BE:46:D2:D6:7D:9A:ED:50:CA:65:8B:23:AD:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ec:42:8b:78:0a:44:a0:32:e7:e2:2b:34:c3:80:c1:7b:8e: e1:4f:e0:7f:fc:76:a5:0a:c7:eb:79:e4:c3:05:28:b7:3e:dc: df:cf:2a:ce:ff:6d:34:67:82:8d:23:5a:19:d0:dd:43:27:ca: 5b:44:a1:df:8e:39:44:53:7b:1f:60:d1:5d:ab:6b:98:d5:5d: e2:dc:f8:02:f2:9d:b8:cd:80:93:50:12:ec:f5:e1:39:b5:35: de:06:29:d9:6a:24:ed:40:6a:d5:d1:6d:cd:f4:ce:8d:01:f7: 0c:bc:cb:e3:8d:2e:91:a2:87:53:e3:c5:94:8e:1f:24:94:9a: 0e:a1:aa:0c:b4:67:1b:dd:b7:eb:d9:82:ee:c5:2c:31:57:bf: 5e:fd:ca:06:71:78:c7:6a:87:2b:62:cb:ce:c3:e3:64:b2:c8: 3c:a1:be:14:5b:ab:0f:05:d6:43:0b:ad:ea:5e:e1:f1:a5:72: 31:d1:9d:de:3c:da:2d:41:53:39:66:c6:77:4a:79:49:9d:db: 3c:23:48:4c:c7:32:b7:08:0f:ed:89:8c:43:5e:b3:8a:24:5e: 25:94:a0:5e:d6:9b:d9:fe:72:cc:fe:fd:3a:6e:58:6f:be:52: 8d:02:d8:cf:63:ac:4e:27:ad:76:d5:0e:eb:ae:61:02:ee:3c: b9:88:c3:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW+kSJeIDrRxXq1SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk MmY3MGE5Y2MtNDVmOC00MTMwLTgzM2ItNWRiNjk4MzdkYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOmjwNzUlXSPjCQbvwGWejL/vZ5KodivEeE/ rEgJsqhO+Kuv4MhxxGBPQGrdGFul/8ZnBI5vBNyTBw8Qn5fe3uQ/wrwSbNEEwYFN DC+q6FdIVlFHOvWOUoHqoyFfhRmt/KJtBHjO8eoPbw9ahE+XtYPALvLTllLuyIBG 3/fZtYVyedmHldcZOMiJy25yUZ8i8LHDZqMTnt8jfwelQNMDHWUewJgSoJanZQ5N RvTdwG5GYRKS72f2c6cqdPkDUZ/xnvpMEBF6gGxpJbfHw8wbZ1ZKGg0wiQvXn7UD MfuFNdDDKvHd9gY+8Rr00A1Dyc6voGYDzPrJc9C0WLzRvcw0CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOd3oyi1g75G0tZ9mu1QymWLI60EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2NiMzA4MTQtMTc0My0z ZjRjLTlmMmItNDNlNzY0MzMzNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLsQot4CkSgMufiKzTDgMF7juFP4H/8dqUKx+t55MMFKLc+3N/PKs7/ bTRngo0jWhnQ3UMnyltEod+OOURTex9g0V2ra5jVXeLc+ALynbjNgJNQEuz14Tm1 Nd4GKdlqJO1AatXRbc30zo0B9wy8y+ONLpGih1PjxZSOHySUmg6hqgy0Zxvdt+vZ gu7FLDFXv179ygZxeMdqhytiy87D42SyyDyhvhRbqw8F1kMLrepe4fGlcjHRnd48 2i1BUzlmxndKeUmd2zwjSEzHMrcID+2JjENes4okXiWUoF7Wm9n+csz+/TpuWG++ Uo0C2M9jrE4nrXbVDuuuYQLuPLmIw/A= -----END CERTIFICATE-----Generated at Fri Jun 6 12:37:00 2025 by rpki-client