$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/466bf24b-ea61-3af0-af6c-375c6412d1c1.roa File: 466bf24b-ea61-3af0-af6c-375c6412d1c1.roa (raw, json) Hash identifier: Ws58vHDLg9DZOTzBSBWZjHC+QJoiwWrxyd72tsv8OyE= Subject key identifier: E4:A2:18:93:24:34:0D:8F:3F:12:47:DF:E9:A0:E3:EE:47:A9:EE:B5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE9479ED1D16574B80A980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/466bf24b-ea61-3af0-af6c-375c6412d1c1.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 203 IP address blocks: 20.132.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:94:79:ed:1d:16:57:4b:80:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a04cd471-7c87-4991-be5a-fb36910be4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1d:62:46:ff:17:e5:3b:25:d0:a8:49:9c:e8: 5c:42:82:0b:8c:78:23:72:77:36:60:34:82:74:41: 7b:89:20:8e:8e:2e:8a:98:f6:a4:3a:7c:37:a5:cd: 8a:05:2c:d9:3d:02:2e:eb:6e:55:cd:c2:df:a0:21: 73:e6:d7:da:54:d4:0d:9d:33:1c:b6:aa:7c:b0:95: f8:6c:d2:02:09:9d:a9:65:e7:9d:97:41:3e:96:85: ac:eb:49:c8:a4:ad:8d:eb:f0:82:c2:f1:c2:97:2a: 6a:d6:43:3f:5a:a9:4b:ca:8f:2b:e7:6b:ae:5c:43: 59:c9:9b:75:9b:16:d1:c5:54:a1:ae:53:2b:a1:94: 0f:fa:55:67:ce:99:74:a1:4d:32:6a:db:5f:93:b3: 75:d5:d0:c4:d8:50:42:e0:91:72:6c:d8:85:9a:85: 63:f3:19:20:c0:81:ea:aa:00:3b:ab:9e:a5:6d:22: 0f:3f:bb:b4:72:66:83:f4:96:ea:10:6f:8a:f3:6b: e0:c0:cb:67:e0:c7:df:47:a8:bd:29:96:93:6c:6d: dc:ed:c1:25:06:87:78:2a:eb:1b:7f:b5:78:b7:88: 05:d5:54:94:3b:92:aa:82:02:64:dd:4b:da:e2:67: 26:e5:d1:7f:a7:f9:7f:48:e9:f7:b7:37:a0:89:61: 99:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A2:18:93:24:34:0D:8F:3F:12:47:DF:E9:A0:E3:EE:47:A9:EE:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/466bf24b-ea61-3af0-af6c-375c6412d1c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8d:c2:0f:62:af:68:42:de:f3:7b:d1:23:ca:74:78:28:bf: e5:f1:45:d5:a9:18:cf:b5:63:78:53:ba:dd:57:03:9b:bb:7b: 91:8f:64:9c:86:ba:ae:9c:ec:b4:5f:df:57:5c:b1:b1:8d:39: 12:b1:4b:56:11:60:a9:1c:23:59:52:45:58:71:7c:c2:b8:d2: 77:39:bb:ab:66:dd:61:77:a2:ef:67:3c:6a:f2:43:2f:47:fc: 79:5c:9d:b1:2d:64:69:48:c1:97:5f:41:a0:d9:45:b1:05:80: fe:5e:06:2a:8d:82:31:a1:15:33:28:e7:ab:8f:8d:77:68:80: 8c:fc:67:48:38:04:c2:23:33:fc:86:4b:b6:45:ae:8f:6c:99: 7c:80:e0:c1:bd:b3:8f:45:a1:e6:ee:50:82:c8:2d:97:38:ac: 0b:28:22:47:61:1b:e4:60:5d:b8:85:e1:03:bc:bc:72:e8:66: 9a:6d:b4:48:10:16:52:6d:ee:c2:bd:2b:63:ce:a4:7a:8c:eb: 16:68:eb:7e:38:6e:73:e3:a6:ba:7d:e4:f6:23:fd:16:30:2c: 3b:37:0f:e7:b2:32:1c:06:9c:3f:2d:17:cb:5b:54:8f:18:72: 09:90:54:50:4f:4d:46:85:73:56:f0:03:5d:74:9f:12:5f:37: 56:e3:b1:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpR57R0WV0uAqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTA0Y2Q0NzEtN2M4Ny00OTkxLWJlNWEtZmIzNjkxMGJlNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR1iRv8X5Tsl0KhJnOhcQoILjHgjcnc2YDSC dEF7iSCOji6KmPakOnw3pc2KBSzZPQIu625VzcLfoCFz5tfaVNQNnTMctqp8sJX4 bNICCZ2pZeedl0E+loWs60nIpK2N6/CCwvHClypq1kM/WqlLyo8r52uuXENZyZt1 mxbRxVShrlMroZQP+lVnzpl0oU0yattfk7N11dDE2FBC4JFybNiFmoVj8xkgwIHq qgA7q56lbSIPP7u0cmaD9JbqEG+K82vgwMtn4MffR6i9KZaTbG3c7cElBod4Kusb f7V4t4gF1VSUO5KqggJk3Uva4mcm5dF/p/l/SOn3tzegiWGZ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSiGJMkNA2PPxJH3+mg4+5Hqe61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDY2YmYyNGItZWE2MS0z YWYwLWFmNmMtMzc1YzY0MTJkMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiNwg9ir2hC3vN70SPKdHgov+XxRdWpGM+1Y3hTut1XA5u7e5GPZJyG uq6c7LRf31dcsbGNORKxS1YRYKkcI1lSRVhxfMK40nc5u6tm3WF3ou9nPGryQy9H /HlcnbEtZGlIwZdfQaDZRbEFgP5eBiqNgjGhFTMo56uPjXdogIz8Z0g4BMIjM/yG S7ZFro9smXyA4MG9s49FoebuUILILZc4rAsoIkdhG+RgXbiF4QO8vHLoZppttEgQ FlJt7sK9K2POpHqM6xZo6344bnPjprp95PYj/RYwLDs3D+eyMhwGnD8tF8tbVI8Y cgmQVFBPTUaFc1bwA110nxJfN1bjsTg= -----END CERTIFICATE-----Generated at Fri Mar 14 10:16:37 2025 by rpki-client