$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa File: 4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa (raw, json) Hash identifier: L0ZO/0Z9RKx3pCXfW/8v9Yt4JPY3jQYXR0q5IKO+W54= Subject key identifier: C9:42:B1:25:E1:6D:3F:A6:B3:E4:47:C3:67:FE:9A:6C:27:1E:9D:FA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849631EC5363CB47750708A3B40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 3360 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c5:36:3c:b4:77:50:70:8a:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=7308868f-5519-437d-9ec8-ddd7a17db922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:26:ec:97:bb:bf:b6:91:e2:93:74:0f:cd:c2: da:2f:48:ae:06:ce:d9:12:3c:2e:6c:81:ea:fc:88: d7:58:58:9c:fb:e0:96:74:18:b7:a1:4b:a8:28:b8: 71:8b:a9:83:9c:0e:09:92:30:a6:b0:61:90:10:c5: c6:ea:18:8e:fc:66:e6:d6:38:b7:5b:5d:3f:b1:d9: dd:66:c2:9e:dc:45:87:86:4a:68:28:c4:3f:b8:41: 3a:68:f6:8d:f6:1e:95:50:9e:26:8a:d6:d8:2f:1f: 94:63:50:ff:b0:d6:6c:58:8a:69:a3:63:67:7d:85: 96:1e:26:a7:ac:5d:a3:1c:14:0d:4f:7d:0e:85:61: c5:f3:93:f7:ee:34:72:91:0e:c1:13:11:a7:40:e9: 3b:e7:c6:dd:b0:1a:51:5e:e1:69:4d:c4:57:e1:2a: e5:05:45:8d:df:f1:7e:fd:19:de:ee:1c:f2:b8:6d: 5a:0d:b9:4c:5a:f8:90:c0:64:46:a4:d1:90:a8:12: a4:cb:8a:5f:db:98:40:42:4e:6b:b8:4b:3d:de:f1: 8d:a6:5b:7d:35:a6:b3:cf:b7:99:97:d7:8a:ad:65: 7b:47:81:78:06:b1:8e:43:ff:aa:c8:8a:ee:73:a0: dd:2d:0f:af:6c:de:7b:e4:db:ed:8e:c9:12:a7:79: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:42:B1:25:E1:6D:3F:A6:B3:E4:47:C3:67:FE:9A:6C:27:1E:9D:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bb:4c:12:b1:9d:7c:bb:8c:4d:b5:a7:62:56:83:ab:48:b8: 18:0f:25:5d:12:6d:35:4e:22:43:c2:fb:c0:0d:76:44:84:b0: 41:09:21:d4:8d:3e:ca:02:0a:61:98:8c:7f:53:85:06:c9:db: ed:61:26:98:ab:8a:cc:0b:33:27:d0:17:05:21:82:0d:c3:da: ba:3d:90:25:28:0b:64:e2:85:a3:c0:4e:51:df:26:9b:f0:67: 1e:7c:2e:f2:fb:6e:20:56:f4:d4:b2:b3:86:06:60:58:a1:1c: 68:16:53:50:d8:12:b6:ba:1f:cd:fa:4d:62:ea:ca:59:87:1b: e0:0e:1c:93:32:01:13:80:b3:36:a0:96:ce:09:77:da:e0:fc: bd:5e:c8:d6:a3:f5:43:71:e8:cc:9c:e4:ad:43:64:83:54:67: 13:a0:3b:c6:2e:dd:99:c8:92:a1:1c:e7:70:d1:d9:fd:5a:cc: 8c:49:e8:2c:68:67:50:3c:8d:79:36:ec:5e:70:02:89:64:bf: 1d:9f:db:5f:7f:dc:12:c3:4b:d9:dd:17:e2:0a:7b:21:16:a2: ba:c5:b1:bb:58:0d:ae:bb:4d:a1:aa:46:58:95:b5:5d:f5:55: 43:90:ad:94:28:b9:a2:5a:c8:dc:e8:f0:91:d2:ac:e1:d2:f4: b0:e9:3d:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsU2PLR3UHCKO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk NzMwODg2OGYtNTUxOS00MzdkLTllYzgtZGRkN2ExN2RiOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiybsl7u/tpHik3QPzcLaL0iuBs7ZEjwubIHq /IjXWFic++CWdBi3oUuoKLhxi6mDnA4JkjCmsGGQEMXG6hiO/Gbm1ji3W10/sdnd ZsKe3EWHhkpoKMQ/uEE6aPaN9h6VUJ4mitbYLx+UY1D/sNZsWIppo2NnfYWWHian rF2jHBQNT30OhWHF85P37jRykQ7BExGnQOk758bdsBpRXuFpTcRX4SrlBUWN3/F+ /Rne7hzyuG1aDblMWviQwGRGpNGQqBKky4pf25hAQk5ruEs93vGNplt9Naazz7eZ l9eKrWV7R4F4BrGOQ/+qyIruc6DdLQ+vbN575NvtjskSp3lrLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlCsSXhbT+ms+RHw2f+mmwnHp36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNGMwOWQ1ZGYtN2FjZC0z NGVjLWFlMTEtMDYyNzI1ZWU3YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG27TBKxnXy7jE21p2JWg6tIuBgPJV0SbTVOIkPC+8ANdkSEsEEJIdSN PsoCCmGYjH9ThQbJ2+1hJpiriswLMyfQFwUhgg3D2ro9kCUoC2TihaPATlHfJpvw Zx58LvL7biBW9NSys4YGYFihHGgWU1DYEra6H836TWLqylmHG+AOHJMyAROAszag ls4Jd9rg/L1eyNaj9UNx6Myc5K1DZINUZxOgO8Yu3ZnIkqEc53DR2f1azIxJ6Cxo Z1A8jXk27F5wAolkvx2f219/3BLDS9ndF+IKeyEWorrFsbtYDa67TaGqRliVtV31 VUOQrZQouaJayNzo8JHSrOHS9LDpPaE= -----END CERTIFICATE-----Generated at Fri Apr 18 02:06:33 2025 by rpki-client