$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa File: 480a876e-f9de-3a86-b420-40e0c9062435.roa (raw, json) Hash identifier: 9Bc/ajJPAmv8U7lByJ21iK0jlc21tKTgctd3ciPtRQU= Subject key identifier: 3C:0C:41:65:21:D1:96:29:4F:8E:5E:38:66:A9:36:F3:47:DA:38:36 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D6FA45999A5A9656CD6AB720 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa Signing time: Tue 13 May 2025 13:01:02 +0000 ROA not before: Tue 13 May 2025 13:01:02 +0000 ROA not after: Mon 11 Aug 2025 13:01:02 +0000 asID: 203 IP address blocks: 20.134.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:fa:45:99:9a:5a:96:56:cd:6a:b7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 13 13:01:02 2025 GMT Not After : Aug 11 13:01:02 2025 GMT Subject: CN=99d74f62-2c02-44e4-9520-df37b1448dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ab:42:33:5d:b8:76:c4:4d:f2:4a:78:48:2c: 41:0c:da:57:9a:c1:76:47:38:cd:0b:53:4b:ed:60: 0d:5f:c6:96:37:77:7f:d7:59:b7:55:b8:30:79:e8: 1f:53:e0:e9:f0:f0:21:5a:3c:90:34:bf:1b:27:03: 80:24:7c:6c:71:f1:6a:94:4f:9d:fb:77:04:70:8e: 9e:a1:56:e2:de:74:09:fa:87:e7:ec:00:dc:b8:c3: 8b:e4:bb:6f:df:55:d5:d8:e2:87:6d:fc:14:6c:9c: 56:e1:d2:c1:f7:0d:6b:21:39:b2:a6:de:e8:f6:c3: 59:0d:73:1b:01:ad:f0:4a:f9:ad:cb:03:83:ac:3c: 64:f9:7e:f6:f3:c3:b3:ce:10:dc:ec:49:3b:50:46: 90:66:1d:23:9e:91:d1:e0:e1:be:d0:90:4f:ca:af: 5e:e5:a3:07:73:43:fd:9f:23:b8:f0:81:c5:9f:c5: 55:e0:e1:0a:57:0a:35:36:00:16:51:26:3e:d7:ed: fa:98:d8:07:1f:d4:d2:6f:5e:1a:e9:2e:4d:bd:68: 67:6b:bf:12:2e:43:ad:8d:81:3a:fa:a5:9d:6c:86: b8:b2:39:8b:a7:e9:6f:2f:11:84:e7:07:f2:c4:31: e0:4e:04:3a:b6:5c:7f:ff:8c:8b:d9:0a:61:24:8d: 90:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0C:41:65:21:D1:96:29:4F:8E:5E:38:66:A9:36:F3:47:DA:38:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:32:93:75:d9:c0:03:e5:3c:bd:50:12:57:c1:51:15:77:97: ae:f6:a5:3c:cc:00:ab:13:1d:50:fa:70:a4:ae:96:93:30:3a: 40:f8:09:77:f8:2f:59:64:6f:1c:63:c9:2b:ab:a0:ab:c3:6a: 6c:a4:3a:46:7f:49:da:c0:c2:4c:ea:95:ca:ed:c0:5b:c6:2c: 35:38:94:30:b0:9d:19:d7:45:b3:9e:54:da:31:bb:0f:ac:58: 96:90:58:c3:b6:a4:bb:75:7d:fb:84:e8:f3:6d:9f:71:a4:dc: 38:a4:a8:69:b5:de:0e:fe:e8:76:00:2e:73:e1:42:2e:2b:26: 2f:bb:a0:7e:41:42:93:16:50:60:c3:ac:bf:37:57:5f:7b:aa: bf:52:77:6d:76:37:91:72:ee:26:46:3b:0d:37:6c:6e:cc:9e: cd:ef:21:56:09:0b:fb:22:d1:96:67:9c:7f:d9:16:0d:1f:f7: 3d:56:d1:f6:e2:6e:df:0d:46:0d:75:8e:da:0a:dd:8a:af:bb: b2:57:9d:79:56:d2:a1:eb:6a:69:2b:14:bb:85:52:96:4d:d2: 0d:21:55:b1:cd:65:16:91:26:6e:0c:27:8d:50:0a:63:68:d3: 1d:4f:71:ac:13:a4:15:fc:a9:7f:68:9d:97:cc:7d:02:7b:64: b5:79:6c:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW+kWZmlqWVs1qtyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk OTlkNzRmNjItMmMwMi00NGU0LTk1MjAtZGYzN2IxNDQ4ZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06tCM124dsRN8kp4SCxBDNpXmsF2RzjNC1NL 7WANX8aWN3d/11m3VbgweegfU+Dp8PAhWjyQNL8bJwOAJHxscfFqlE+d+3cEcI6e oVbi3nQJ+ofn7ADcuMOL5Ltv31XV2OKHbfwUbJxW4dLB9w1rITmypt7o9sNZDXMb Aa3wSvmtywODrDxk+X7288OzzhDc7Ek7UEaQZh0jnpHR4OG+0JBPyq9e5aMHc0P9 nyO48IHFn8VV4OEKVwo1NgAWUSY+1+36mNgHH9TSb14a6S5NvWhna78SLkOtjYE6 +qWdbIa4sjmLp+lvLxGE5wfyxDHgTgQ6tlx//4yL2QphJI2Q+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwMQWUh0ZYpT45eOGapNvNH2jg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDgwYTg3NmUtZjlkZS0z YTg2LWI0MjAtNDBlMGM5MDYyNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIyk3XZwAPlPL1QElfBURV3l672pTzMAKsTHVD6cKSulpMwOkD4CXf4 L1lkbxxjySuroKvDamykOkZ/SdrAwkzqlcrtwFvGLDU4lDCwnRnXRbOeVNoxuw+s WJaQWMO2pLt1ffuE6PNtn3Gk3DikqGm13g7+6HYALnPhQi4rJi+7oH5BQpMWUGDD rL83V197qr9Sd212N5Fy7iZGOw03bG7Mns3vIVYJC/si0ZZnnH/ZFg0f9z1W0fbi bt8NRg11jtoK3Yqvu7JXnXlW0qHramkrFLuFUpZN0g0hVbHNZRaRJm4MJ41QCmNo 0x1PcawTpBX8qX9onZfMfQJ7ZLV5bOc= -----END CERTIFICATE-----Generated at Fri Jun 6 12:26:54 2025 by rpki-client