$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/54b784cf-056e-32e3-992f-a4eed480d314.roa File: 54b784cf-056e-32e3-992f-a4eed480d314.roa (raw, json) Hash identifier: orYrKs0SMN+7cS9if1yNwDjUOVD+6p1R/a7tLRmmhv0= Subject key identifier: 53:11:39:C7:1E:A3:C6:F4:2B:70:6F:2F:6F:D9:64:E1:0E:68:D7:41 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584975445CE55FE61ECE30F466C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/54b784cf-056e-32e3-992f-a4eed480d314.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 4237 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:5c:e5:5f:e6:1e:ce:30:f4:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=8abaf289-c5da-4c30-af0e-f45914a3479c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:be:2f:6e:60:de:52:85:57:66:19:7a:cc: d5:1e:47:4b:b9:89:38:37:94:cb:e8:24:a4:41:0b: 91:24:46:f4:10:ce:cc:93:09:0d:14:bf:54:0a:e5: bd:ca:6a:de:4b:5e:07:6f:79:5a:83:1f:b3:15:46: b8:8d:6a:75:1a:4c:30:c3:47:24:53:30:c1:a4:5b: 92:c8:fe:b4:28:a6:7f:44:b6:23:4c:d5:46:08:c3: 70:91:ff:a5:64:73:b1:37:3a:07:f6:a5:99:6d:36: ae:b0:4e:fc:76:4a:2c:74:4e:4f:02:de:ce:32:2b: 61:bb:e9:67:aa:bb:15:91:6e:f9:21:01:b4:f1:1c: 07:b0:5d:20:bb:d5:ba:15:50:11:1c:48:21:d6:6b: 93:0d:d8:3c:23:71:7d:93:90:b4:1c:9f:60:b8:29: 4d:c7:86:2f:62:dc:f7:a6:2f:b4:3c:08:c0:bf:39: a7:77:5a:58:43:af:90:b2:1a:36:b0:36:ea:c0:98: ba:20:38:a5:d8:33:0f:fb:61:77:05:a0:3c:4a:07: 1c:f9:97:25:0e:34:d8:02:0d:00:41:86:c9:34:a2: c8:95:23:f4:6c:7d:20:7e:0f:bc:4d:14:6f:8b:ed: d6:d8:b5:6e:3a:3b:22:70:3f:2c:ce:5c:9e:99:a0: b0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:11:39:C7:1E:A3:C6:F4:2B:70:6F:2F:6F:D9:64:E1:0E:68:D7:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/54b784cf-056e-32e3-992f-a4eed480d314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b5:b8:93:f9:65:71:0a:3b:3d:fe:86:e3:59:6d:9e:51:fd: 8e:9f:9e:16:7d:ef:38:4a:43:0a:93:51:06:9b:49:fe:04:11: 5b:35:6d:e5:ae:42:56:4b:d4:56:c2:ce:ad:bb:ce:05:72:4a: cd:ab:57:f0:08:18:23:84:7b:c9:84:59:f6:1e:1c:85:c9:a3: a2:dc:cf:6d:a0:b3:6d:a4:ee:6b:5e:61:de:61:bf:36:84:b8: 53:26:03:70:28:eb:29:6e:17:48:79:3a:a9:e9:16:e7:4d:68: 2e:df:36:81:f9:5c:f4:79:ff:54:fc:c1:7c:0d:be:3d:5a:36: 63:d3:aa:59:2c:8b:1d:ee:e4:d8:c1:4e:d3:c0:c9:43:30:d6: d9:b4:b4:05:10:1d:33:5d:6b:ae:a1:0f:ba:d5:91:a0:51:3e: 7e:25:b9:43:22:cf:65:9f:74:aa:f1:46:00:a8:ed:b2:0b:5a: 0f:70:87:dc:cd:07:84:3f:93:84:43:eb:0f:ba:ad:7c:19:60: 5a:c9:cd:7a:bd:73:71:35:be:cb:38:bc:6d:90:84:51:4e:90: 99:72:68:ee:0a:5f:5b:44:9b:69:37:18:c3:09:2b:a0:a3:cd: 4a:8a:25:45:7e:45:c2:af:3b:0b:ce:1d:22:38:c6:40:6b:96: 9b:64:50:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RFzlX+YezjD0ZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk OGFiYWYyODktYzVkYS00YzMwLWFmMGUtZjQ1OTE0YTM0NzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplm+L25g3lKFV2YZeszVHkdLuYk4N5TL6CSk QQuRJEb0EM7MkwkNFL9UCuW9ymreS14Hb3lagx+zFUa4jWp1Gkwww0ckUzDBpFuS yP60KKZ/RLYjTNVGCMNwkf+lZHOxNzoH9qWZbTausE78dkosdE5PAt7OMithu+ln qrsVkW75IQG08RwHsF0gu9W6FVARHEgh1muTDdg8I3F9k5C0HJ9guClNx4YvYtz3 pi+0PAjAvzmnd1pYQ6+Qsho2sDbqwJi6IDil2DMP+2F3BaA8Sgcc+ZclDjTYAg0A QYbJNKLIlSP0bH0gfg+8TRRvi+3W2LVuOjsicD8szlyemaCwyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMROcceo8b0K3BvL2/ZZOEOaNdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTRiNzg0Y2YtMDU2ZS0z MmUzLTk5MmYtYTRlZWQ0ODBkMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe1uJP5ZXEKOz3+huNZbZ5R/Y6fnhZ97zhKQwqTUQabSf4EEVs1beWu QlZL1FbCzq27zgVySs2rV/AIGCOEe8mEWfYeHIXJo6Lcz22gs22k7mteYd5hvzaE uFMmA3Ao6yluF0h5OqnpFudNaC7fNoH5XPR5/1T8wXwNvj1aNmPTqlksix3u5NjB TtPAyUMw1tm0tAUQHTNda66hD7rVkaBRPn4luUMiz2WfdKrxRgCo7bILWg9wh9zN B4Q/k4RD6w+6rXwZYFrJzXq9c3E1vss4vG2QhFFOkJlyaO4KX1tEm2k3GMMJK6Cj zUqKJUV+RcKvOwvOHSI4xkBrlptkUOY= -----END CERTIFICATE-----Generated at Fri Apr 18 02:00:40 2025 by rpki-client