$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa File: 5237c2a4-4861-320a-8193-cd92a08fc31f.roa (raw, json) Hash identifier: rJrPEUvKn+dFLuIOKSUb7Y/w0GnuoftT8CdqGMFC0AE= Subject key identifier: 85:23:F6:CB:95:8D:97:64:71:A0:64:AE:A5:A4:C7:30:C7:4E:79:A0 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858499294A570AB1DB158BB452D00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 3360 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a5:70:ab:1d:b1:58:bb:45:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=333c3883-66f5-494f-92b8-c0b9ca8d7a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8b:87:bb:cc:73:c4:37:d5:f2:86:06:fb:99: c7:be:de:04:7f:2e:ea:0a:49:59:db:94:53:73:93: 3f:86:32:1d:c0:82:44:69:5a:99:b3:9a:f9:30:80: d3:d6:f1:36:72:ed:b4:cb:4b:e0:6b:ff:c5:57:aa: 40:eb:48:4e:f7:c4:e7:0b:2a:f1:9a:91:c2:65:b2: c7:67:c4:20:c1:a2:86:d7:ca:0f:85:3d:07:e0:9d: 8d:0e:93:cc:27:24:c1:71:f9:a5:ff:59:1b:7d:e2: 08:e0:40:12:ed:c3:6c:94:da:e8:8f:4f:93:4a:78: 58:d2:8f:c2:8a:8d:a9:96:f6:51:99:34:6b:98:7f: 44:2b:19:ca:31:95:ef:b3:f8:b6:7b:55:17:b7:83: db:73:dd:e0:83:8d:7c:76:fd:f8:96:7b:d7:ca:d6: 73:cb:54:d8:30:0e:02:09:29:ff:7b:a4:52:8f:be: 70:47:ad:e4:d1:2c:d6:91:68:d7:06:00:f1:8c:a0: 24:a1:c2:22:56:90:a0:30:ce:e9:19:71:84:dc:1d: a7:cb:b4:aa:5e:78:66:9f:02:ab:86:8c:fd:e5:e6: 6b:47:1d:53:45:80:4d:e4:27:58:0e:bb:65:08:91: bf:5a:8e:92:41:f6:3e:17:1b:56:4e:0d:50:56:3f: f7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:23:F6:CB:95:8D:97:64:71:A0:64:AE:A5:A4:C7:30:C7:4E:79:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:98:d6:99:4a:bb:ab:84:0a:a2:d6:62:cf:c8:34:f8:bd:1a: e7:78:0b:9a:e3:b5:6d:aa:20:db:9d:e5:64:3b:22:ec:fc:6e: aa:bf:2d:45:3c:20:b6:c0:ea:0a:5c:93:3f:64:03:ef:f8:27: a1:74:2d:31:94:e2:b9:c0:c9:4d:e7:84:8c:3f:43:dd:67:1d: 24:52:a6:37:19:29:c9:99:41:20:bc:b8:3d:15:ac:e5:a8:7c: 68:df:b1:f1:25:df:0a:d1:70:6c:3f:90:6a:3d:cf:4c:82:6e: a3:99:c4:06:04:d8:5c:86:d4:e7:ca:10:0f:05:38:e6:47:83: ed:db:93:4b:c6:95:82:d2:6f:0c:c0:79:51:c4:d2:87:7e:a7: 7e:bf:eb:5a:d9:a5:58:7d:21:a7:3f:b0:8e:9b:58:d0:39:c0: 2b:13:51:91:98:5a:df:f6:46:34:af:02:fa:82:8c:c4:ad:a2: 8a:4c:5f:1a:e1:18:68:11:fa:97:fa:3c:b1:31:56:c1:6e:6e: dc:d5:e0:50:59:c9:83:4a:8d:b8:f5:55:cf:54:a9:39:49:9b: d0:24:2f:8a:98:93:c6:a0:54:db:dd:fe:91:56:bd:72:a2:5b: c5:9e:9b:1f:bd:24:ae:e7:08:24:15:df:84:ab:98:e8:b0:c7: b0:3e:e8:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKVwqx2xWLtFLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MzMzYzM4ODMtNjZmNS00OTRmLTkyYjgtYzBiOWNhOGQ3YTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYuHu8xzxDfV8oYG+5nHvt4Efy7qCklZ25RT c5M/hjIdwIJEaVqZs5r5MIDT1vE2cu20y0vga//FV6pA60hO98TnCyrxmpHCZbLH Z8QgwaKG18oPhT0H4J2NDpPMJyTBcfml/1kbfeII4EAS7cNslNroj0+TSnhY0o/C io2plvZRmTRrmH9EKxnKMZXvs/i2e1UXt4Pbc93gg418dv34lnvXytZzy1TYMA4C CSn/e6RSj75wR63k0SzWkWjXBgDxjKAkocIiVpCgMM7pGXGE3B2ny7SqXnhmnwKr hoz95eZrRx1TRYBN5CdYDrtlCJG/Wo6SQfY+FxtWTg1QVj/3PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUj9suVjZdkcaBkrqWkxzDHTnmgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTIzN2MyYTQtNDg2MS0z MjBhLTgxOTMtY2Q5MmEwOGZjMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaY1plKu6uECqLWYs/INPi9Gud4C5rjtW2qINud5WQ7Iuz8bqq/LUU8 ILbA6gpckz9kA+/4J6F0LTGU4rnAyU3nhIw/Q91nHSRSpjcZKcmZQSC8uD0VrOWo fGjfsfEl3wrRcGw/kGo9z0yCbqOZxAYE2FyG1OfKEA8FOOZHg+3bk0vGlYLSbwzA eVHE0od+p36/61rZpVh9Iac/sI6bWNA5wCsTUZGYWt/2RjSvAvqCjMStoopMXxrh GGgR+pf6PLExVsFubtzV4FBZyYNKjbj1Vc9UqTlJm9AkL4qYk8agVNvd/pFWvXKi W8Wemx+9JK7nCCQV34SrmOiwx7A+6Bs= -----END CERTIFICATE-----Generated at Sun Apr 20 15:33:32 2025 by rpki-client