$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa File: 552f37d1-55ae-3591-bc00-063e37bf73cb.roa (raw, json) Hash identifier: aGimVBnQssWAPKxWSDX562bXNfL1yLn3Ut29wGUf/l0= Subject key identifier: FD:5C:59:BC:69:F3:94:97:6D:7E:55:99:02:28:80:BD:FC:91:44:3B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D42FB3980906DD05456D6640 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 203 IP address blocks: 20.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b3:98:09:06:dd:05:45:6d:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=05a06ad5-c3ac-43fc-9f8b-b84673194e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:1c:c8:a4:de:e2:77:81:73:e5:bb:4e:53: a2:f8:c6:61:d7:89:8e:e5:92:8e:56:a7:6c:07:b0: 86:9f:fd:14:0a:3e:0f:56:53:53:67:4c:c2:fc:80: f5:31:01:2a:8f:87:ba:41:06:90:82:fa:57:fc:90: 94:ac:d6:7d:b9:5b:b8:9e:32:8c:a0:bc:18:43:29: 5b:37:e0:22:e0:c3:6b:ac:91:9b:2f:37:2e:c1:9b: cd:90:c3:2c:26:87:40:28:af:e9:76:ec:9a:34:cd: 70:8e:5e:1d:fe:f6:b4:53:ee:96:ff:a4:a4:d0:be: 82:1c:ef:c5:a8:5b:14:91:6d:ea:30:ee:55:cc:38: c6:25:3e:86:ee:95:35:93:97:ad:44:7e:6c:25:61: 7f:d4:3d:ef:e9:d6:02:b3:d3:c4:d6:c3:86:bb:b8: 33:e9:c6:06:b6:5c:66:21:ea:92:27:60:45:c6:25: 14:c6:ec:98:8c:e9:0e:35:e0:2f:bc:4e:24:b0:3e: 09:84:3e:e8:a9:34:2e:27:75:78:9d:46:8a:bd:d9: b4:13:b5:f2:8c:06:9f:5d:5e:fe:56:07:60:e7:75: 20:f9:fb:bf:fd:62:d6:31:48:b1:fd:35:d6:f4:cb: 33:85:52:6d:9e:cb:1f:5e:3a:05:92:45:01:7d:98: 87:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5C:59:BC:69:F3:94:97:6D:7E:55:99:02:28:80:BD:FC:91:44:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:76:06:ec:ca:6a:d0:db:b7:b8:38:c0:d9:65:03:db:9d:b7: 90:ae:bd:9c:fa:42:9c:22:87:00:f1:02:6d:9d:85:b7:22:75: 86:7f:10:7a:16:af:03:11:a0:2d:82:7a:a0:b8:59:38:c2:51: 52:a9:a8:29:ff:29:5d:ee:72:01:17:b1:0c:93:ca:17:e2:dc: 14:3d:f3:72:3d:73:09:0a:94:76:4e:cf:df:28:4b:21:82:ec: 47:9a:ba:4b:34:ac:9a:02:01:d9:71:be:2a:4c:00:76:73:80: 10:59:81:ea:d6:4a:23:ee:d2:29:20:52:7d:92:59:f1:59:b9: 6f:01:ce:95:46:f3:8f:bb:0d:5e:ea:28:44:15:8e:50:52:fa: fe:19:9e:1a:60:a3:c8:3c:15:91:98:a2:b8:1e:90:e6:f4:10: 58:d5:a9:ce:d8:db:95:2c:57:30:94:d4:42:a8:23:c8:c1:13: ec:ea:32:0d:83:0f:42:e8:72:2b:6d:d1:db:e2:af:7d:c8:ae: cf:ae:cb:ca:23:86:7f:7f:01:ba:db:c5:06:5e:9e:d9:df:8d: 32:44:58:57:e9:d9:4d:63:64:73:cb:0e:42:29:4b:c5:ee:aa: bb:41:9e:e2:5f:b4:a2:a4:d8:65:30:32:ff:4d:31:81:7e:29: fb:fd:38:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7OYCQbdBUVtZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MDVhMDZhZDUtYzNhYy00M2ZjLTlmOGItYjg0NjczMTk0ZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS8cyKTe4neBc+W7TlOi+MZh14mO5ZKOVqds B7CGn/0UCj4PVlNTZ0zC/ID1MQEqj4e6QQaQgvpX/JCUrNZ9uVu4njKMoLwYQylb N+Ai4MNrrJGbLzcuwZvNkMMsJodAKK/pduyaNM1wjl4d/va0U+6W/6Sk0L6CHO/F qFsUkW3qMO5VzDjGJT6G7pU1k5etRH5sJWF/1D3v6dYCs9PE1sOGu7gz6cYGtlxm IeqSJ2BFxiUUxuyYjOkONeAvvE4ksD4JhD7oqTQuJ3V4nUaKvdm0E7XyjAafXV7+ Vgdg53Ug+fu//WLWMUix/TXW9MszhVJtnssfXjoFkkUBfZiHTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1cWbxp85SXbX5VmQIogL38kUQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTUyZjM3ZDEtNTVhZS0z NTkxLWJjMDAtMDYzZTM3YmY3M2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp2BuzKatDbt7g4wNllA9udt5CuvZz6QpwihwDxAm2dhbcidYZ/EHoW rwMRoC2CeqC4WTjCUVKpqCn/KV3ucgEXsQyTyhfi3BQ983I9cwkKlHZOz98oSyGC 7Eeauks0rJoCAdlxvipMAHZzgBBZgerWSiPu0ikgUn2SWfFZuW8BzpVG84+7DV7q KEQVjlBS+v4Znhpgo8g8FZGYorgekOb0EFjVqc7Y25UsVzCU1EKoI8jBE+zqMg2D D0Locitt0dvir33Irs+uy8ojhn9/AbrbxQZentnfjTJEWFfp2U1jZHPLDkIpS8Xu qrtBnuJftKKk2GUwMv9NMYF+Kfv9OCE= -----END CERTIFICATE-----Generated at Fri Jun 6 12:32:21 2025 by rpki-client