$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa File: 552f37d1-55ae-3591-bc00-063e37bf73cb.roa (raw, json) Hash identifier: EPamqKTD7ijiVrGl+A/SaHVkjSPAOlrvYgmJCek8LFk= Subject key identifier: 20:00:0C:AD:A5:D1:AF:87:D0:4B:3C:36:A9:F9:24:86:DB:FC:89:DB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F4F6A4564E5EF897E2945E00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 203 IP address blocks: 20.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a4:56:4e:5e:f8:97:e2:94:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=5348e25b-f7fd-4acc-83b3-5e028a54c371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:47:62:22:94:cc:a9:d9:3c:f1:0f:78:3a: ef:bc:f0:cb:56:42:e8:61:e8:bc:9d:93:14:3f:0e: 95:96:4e:d6:db:e6:75:e8:1f:7e:0d:a0:d0:dc:8a: b7:8d:4f:26:e5:0f:fa:24:d7:66:06:06:02:f2:37: 5d:fd:35:72:cb:f7:f2:58:10:06:55:94:c2:06:11: f2:b1:1a:91:ec:9b:0a:7e:40:5d:2e:87:ec:ce:e4: 91:e8:23:4c:91:2a:cf:8c:04:06:a9:cb:35:a0:b9: fc:d6:1c:6a:63:a0:12:b9:1a:98:2b:18:d8:40:0c: 01:13:f1:44:dc:6b:4a:9a:1f:9a:7a:9b:3e:39:44: d3:ef:77:94:fd:c3:ac:83:a0:12:cb:3e:18:f7:1b: 7a:36:8b:9f:40:6f:65:34:ad:81:a9:ef:4e:34:ad: 1d:89:90:ea:e9:8d:70:64:06:56:19:25:b5:fc:a4: ad:d4:4f:f7:ae:61:53:0b:74:b9:77:e5:fa:fa:60: 3f:59:3b:ae:ef:5a:b9:d8:4f:c0:ce:bc:f8:7e:47: 19:18:9b:57:c8:d2:39:26:c2:ae:68:6a:2c:25:a9: d7:f2:10:2b:aa:46:8c:d3:9d:26:7c:c0:f8:da:25: 08:d3:29:4a:04:de:b6:7d:d0:13:60:0b:b9:04:8b: 40:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:00:0C:AD:A5:D1:AF:87:D0:4B:3C:36:A9:F9:24:86:DB:FC:89:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c5:b2:3f:b6:d3:e6:93:81:20:b4:da:8b:30:71:80:87:b1: bf:09:36:99:db:f8:9f:91:98:32:73:7b:25:7a:1b:c7:f7:d1: e7:4e:79:07:fc:62:3d:dc:61:f8:ef:ae:e2:67:f9:c6:59:85: 60:86:19:72:91:3f:cb:f9:f3:a6:e7:74:2e:da:b6:71:ae:11: d2:42:62:20:3c:d1:2a:ff:0c:73:e6:81:33:b2:4a:3e:db:8f: b2:e9:ef:b5:73:ca:6e:55:f0:62:0f:08:9e:2a:35:ff:ec:20: 2a:6e:64:56:6b:c7:63:26:ba:6d:5f:a2:b7:86:0d:87:ca:89: ca:9e:25:79:ce:e1:01:f8:81:47:3b:4c:30:43:d2:ec:87:87: ee:59:dd:4c:b1:c0:96:1d:63:af:bf:77:20:39:f3:c3:41:5e: 4f:a0:ed:c9:25:36:02:78:06:19:2b:b8:41:4e:5d:bc:26:ce: a1:81:21:10:9e:88:86:83:f0:90:65:51:35:93:ad:90:17:5b: 78:27:0a:89:62:6f:7f:58:ee:df:52:26:b4:c9:07:d6:07:0c: 90:b3:84:a9:4a:c6:d0:f8:88:63:55:c6:b9:fc:c4:c5:bb:35: 0d:35:6d:65:76:ef:3b:f7:37:63:c5:75:04:cf:a5:a8:10:95: 2b:f0:da:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qRWTl74l+KUXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NTM0OGUyNWItZjdmZC00YWNjLTgzYjMtNWUwMjhhNTRjMzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVFHYiKUzKnZPPEPeDrvvPDLVkLoYei8nZMU Pw6Vlk7W2+Z16B9+DaDQ3Iq3jU8m5Q/6JNdmBgYC8jdd/TVyy/fyWBAGVZTCBhHy sRqR7JsKfkBdLofszuSR6CNMkSrPjAQGqcs1oLn81hxqY6ASuRqYKxjYQAwBE/FE 3GtKmh+aeps+OUTT73eU/cOsg6ASyz4Y9xt6NoufQG9lNK2Bqe9ONK0diZDq6Y1w ZAZWGSW1/KSt1E/3rmFTC3S5d+X6+mA/WTuu71q52E/Azrz4fkcZGJtXyNI5JsKu aGosJanX8hArqkaM050mfMD42iUI0ylKBN62fdATYAu5BItAQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAADK2l0a+H0Es8Nqn5JIbb/InbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTUyZjM3ZDEtNTVhZS0z NTkxLWJjMDAtMDYzZTM3YmY3M2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjFsj+20+aTgSC02oswcYCHsb8JNpnb+J+RmDJzeyV6G8f30edOeQf8 Yj3cYfjvruJn+cZZhWCGGXKRP8v586bndC7atnGuEdJCYiA80Sr/DHPmgTOySj7b j7Lp77Vzym5V8GIPCJ4qNf/sICpuZFZrx2Mmum1foreGDYfKicqeJXnO4QH4gUc7 TDBD0uyHh+5Z3UyxwJYdY6+/dyA588NBXk+g7cklNgJ4BhkruEFOXbwmzqGBIRCe iIaD8JBlUTWTrZAXW3gnColib39Y7t9SJrTJB9YHDJCzhKlKxtD4iGNVxrn8xMW7 NQ01bWV27zv3N2PFdQTPpagQlSvw2qc= -----END CERTIFICATE-----Generated at Fri Apr 11 23:17:31 2025 by rpki-client