$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa File: 5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa (raw, json) Hash identifier: RBMuuizeFNXw9NLj44RHJ99WfPHrrmtvLOA4ekhjxes= Subject key identifier: 3E:CF:87:6D:A5:70:3E:22:9D:E9:5B:8F:91:11:C7:6C:54:67:2C:F4 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849AD1A014D02B24BA5E2EAF5B0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 203 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:01:4d:02:b2:4b:a5:e2:ea:f5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=a6c349a9-7d61-4762-82a1-52ca414d786d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:f0:67:4d:60:2d:f0:a3:68:56:5b:e5:14: 2c:67:8d:0e:63:31:09:13:27:f1:f1:d4:b3:9f:6b: 82:a7:8e:20:ef:30:d7:87:17:0f:9d:2e:66:36:4e: e1:3d:a4:e1:a7:2c:9e:9c:96:6d:4f:94:21:27:c6: 4e:56:0d:11:ab:b9:d6:d0:6f:ab:c4:f8:75:66:7b: af:c9:4b:c9:04:5c:08:45:d7:bf:d0:8d:93:f4:eb: dd:ba:70:c0:56:5b:0c:65:e3:ec:78:90:80:0b:dc: 04:8f:49:8f:7b:6c:c5:3f:43:68:e2:d9:8d:8f:e6: f4:64:6f:08:97:04:bd:7b:0a:c2:2c:47:1f:50:13: 84:2a:93:77:7c:19:f6:37:1f:1d:28:f1:10:a8:ba: 36:98:2e:ab:52:26:14:22:28:f6:4b:eb:f8:65:c2: cd:f0:5a:38:5f:43:ac:87:e8:b0:f1:cd:8c:ed:49: 4b:7b:d7:06:7d:0d:68:00:b1:86:c7:e4:32:cc:bc: 9c:4d:59:4f:ea:19:97:d4:bd:dd:f1:41:d8:e7:43: 79:bb:0e:7c:9b:74:4d:2b:f3:54:f5:c7:2e:76:61: c7:54:e9:f8:5d:97:90:e4:fb:5c:04:5e:e2:1e:75: a4:fb:23:2e:4a:b5:9c:c3:2b:dc:b0:59:41:4e:38: e4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CF:87:6D:A5:70:3E:22:9D:E9:5B:8F:91:11:C7:6C:54:67:2C:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a2a6d31-8cd0-3521-beb1-f69c046cb286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:42:98:f0:64:99:5f:12:1a:c3:fe:ce:06:a5:74:ba:2e:f1: 37:77:6c:af:64:02:46:ee:24:52:13:92:d6:88:87:31:6e:9c: da:cf:ab:75:54:d8:9d:28:2d:11:fc:7c:61:0f:fa:52:2f:a6: 76:f5:62:5d:46:cd:90:0e:64:9f:6e:da:86:9e:2e:15:84:63: 8c:d0:23:8a:ff:e9:b5:f4:25:4c:29:9e:ae:a5:82:e5:23:33: f8:0f:a0:1d:57:64:1b:7a:12:1b:18:bd:49:3c:cf:dc:af:9f: 41:07:d4:7d:d6:1b:cd:04:78:7b:a4:81:1e:18:86:2f:a6:d3: 77:7c:ee:3a:e2:e5:f3:06:3a:a0:1d:13:61:29:18:64:c9:f8: 8f:f9:82:97:fd:ae:37:60:90:19:a0:98:96:68:bb:02:d2:3f: 0e:e8:a8:72:8e:34:c0:01:62:70:56:8d:b7:b0:8d:85:cf:06: ad:9e:2f:19:ff:16:d9:3d:f2:18:4e:fd:e4:f7:55:8c:e2:30: e9:d4:be:9b:6e:de:e6:35:59:4e:42:56:d0:66:a6:f4:0a:01: af:43:09:1c:59:df:bf:40:93:fa:dc:a6:58:9f:61:22:6a:13: 88:8c:58:4f:63:7f:f8:09:06:cb:cf:56:65:4a:4a:49:66:47: b1:f1:1c:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgFNArJLpeLq9bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YTZjMzQ5YTktN2Q2MS00NzYyLTgyYTEtNTJjYTQxNGQ3ODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt7wZ01gLfCjaFZb5RQsZ40OYzEJEyfx8dSz n2uCp44g7zDXhxcPnS5mNk7hPaThpyyenJZtT5QhJ8ZOVg0Rq7nW0G+rxPh1Znuv yUvJBFwIRde/0I2T9OvdunDAVlsMZePseJCAC9wEj0mPe2zFP0No4tmNj+b0ZG8I lwS9ewrCLEcfUBOEKpN3fBn2Nx8dKPEQqLo2mC6rUiYUIij2S+v4ZcLN8Fo4X0Os h+iw8c2M7UlLe9cGfQ1oALGGx+QyzLycTVlP6hmX1L3d8UHY50N5uw58m3RNK/NU 9ccudmHHVOn4XZeQ5PtcBF7iHnWk+yMuSrWcwyvcsFlBTjjkwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7Ph22lcD4inelbj5ERx2xUZyz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWEyYTZkMzEtOGNkMC0z NTIxLWJlYjEtZjY5YzA0NmNiMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1CmPBkmV8SGsP+zgaldLou8Td3bK9kAkbuJFITktaIhzFunNrPq3VU 2J0oLRH8fGEP+lIvpnb1Yl1GzZAOZJ9u2oaeLhWEY4zQI4r/6bX0JUwpnq6lguUj M/gPoB1XZBt6EhsYvUk8z9yvn0EH1H3WG80EeHukgR4Yhi+m03d87jri5fMGOqAd E2EpGGTJ+I/5gpf9rjdgkBmgmJZouwLSPw7oqHKONMABYnBWjbewjYXPBq2eLxn/ Ftk98hhO/eT3VYziMOnUvptu3uY1WU5CVtBmpvQKAa9DCRxZ379Ak/rcplifYSJq E4iMWE9jf/gJBsvPVmVKSklmR7HxHOk= -----END CERTIFICATE-----Generated at Sat Jun 7 01:36:36 2025 by rpki-client