$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa File: 5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa (raw, json) Hash identifier: pxUxjFR/HVNZ5fwj61sr65rnlCXgLSLJGJMMl1xET/s= Subject key identifier: 89:B4:5F:9A:3F:F2:2C:02:46:CF:96:5F:0F:5A:CE:A3:C9:D1:71:A7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D42FB3C8CD473583FD91ED30 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 3356 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b3:c8:cd:47:35:83:fd:91:ed:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=03b25268-83db-44ad-8e10-d26e19f3f8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f2:32:9a:96:c6:a4:88:28:64:ad:24:67:3d: e6:e7:10:42:b2:1a:be:12:6f:1c:71:22:c2:d0:53: 92:00:df:54:6c:5f:3b:25:05:e3:59:bf:d4:bc:28: 4d:d1:c9:17:d0:d4:c7:78:1e:10:46:3e:c7:43:4c: 66:e4:dc:b8:a8:e1:84:bd:3f:97:fb:8b:e5:e8:29: 93:72:48:da:e3:16:9e:16:83:5f:74:6d:44:03:80: 29:65:0e:e9:cb:43:b5:ee:68:32:fa:39:b9:6b:6c: 01:35:fb:52:94:12:c6:5e:80:9c:ba:3d:6f:7a:b3: 07:dd:ee:db:52:4d:26:b4:88:f8:a4:47:07:8a:f6: d0:87:69:db:22:7b:1b:31:a5:24:e7:1e:72:37:d8: 77:5d:42:54:20:cd:7a:d7:20:9d:68:20:4d:0c:53: 8b:6e:73:92:83:ec:0c:f7:00:92:a0:8b:d9:41:1a: 15:e1:02:c7:79:cf:7b:d2:03:52:ed:fd:a2:70:4e: b4:2e:cc:06:08:c4:e7:66:07:7d:e9:4d:7f:ae:67: cd:e8:f6:af:81:71:76:e9:04:e0:39:62:6f:92:25: b2:65:ee:2f:2d:9a:d3:cf:f8:ea:71:aa:36:25:53: 2b:f9:34:38:9b:ae:3b:48:25:03:10:27:5b:dd:fa: d8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B4:5F:9A:3F:F2:2C:02:46:CF:96:5F:0F:5A:CE:A3:C9:D1:71:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:9b:86:06:5b:7e:69:c0:c8:41:b3:f0:c0:79:34:00:92:c4: e9:b9:7f:05:13:ff:b3:ea:63:52:aa:ed:b3:d8:f2:b8:3b:79: 9d:e6:30:bd:5d:e3:b1:7a:1c:60:8d:8c:e5:ab:70:89:28:c9: 3e:61:c6:37:c0:cd:9d:0a:44:70:99:92:f0:79:6f:6e:ee:87: f5:89:e4:6d:60:f9:8c:9d:da:4b:b2:07:00:1d:d6:ac:98:29: 67:99:3e:3c:45:53:fb:10:57:bb:95:dd:63:9b:8c:87:ee:c2: 43:51:42:3a:e2:4c:9a:6f:1a:e7:4b:ec:10:f5:d4:4c:a6:54: 58:e3:8f:a6:3c:1a:d2:23:5e:0b:28:4b:c7:d8:4a:99:54:2f: 7e:6b:06:71:f1:c5:38:3f:c3:39:89:6a:b8:08:e2:f6:9f:01: 50:25:25:84:6c:11:f5:8a:5e:ff:5f:31:61:2f:17:fb:98:31: d5:1d:27:58:5b:d4:15:f7:3d:fd:6b:a2:4d:58:0b:8f:bc:3b: 93:c4:40:da:d8:3c:c8:41:b7:33:a6:e0:76:5b:da:a6:b3:31: 45:10:4a:9b:0e:bc:94:d8:33:56:c6:2a:9a:43:a5:ea:0d:8a: ab:13:e6:da:b3:8f:fa:65:7e:b2:26:ec:37:e1:27:f9:a1:96: 7e:53:d6:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7PIzUc1g/2R7TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MDNiMjUyNjgtODNkYi00NGFkLThlMTAtZDI2ZTE5ZjNmOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/IympbGpIgoZK0kZz3m5xBCshq+Em8ccSLC 0FOSAN9UbF87JQXjWb/UvChN0ckX0NTHeB4QRj7HQ0xm5Ny4qOGEvT+X+4vl6CmT ckja4xaeFoNfdG1EA4ApZQ7py0O17mgy+jm5a2wBNftSlBLGXoCcuj1verMH3e7b Uk0mtIj4pEcHivbQh2nbInsbMaUk5x5yN9h3XUJUIM161yCdaCBNDFOLbnOSg+wM 9wCSoIvZQRoV4QLHec970gNS7f2icE60LswGCMTnZgd96U1/rmfN6PavgXF26QTg OWJvkiWyZe4vLZrTz/jqcao2JVMr+TQ4m647SCUDECdb3frYmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm0X5o/8iwCRs+WXw9azqPJ0XGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWE3NWI1NGMtNzFiZC0z MjQzLTgwZDgtN2Q3OWQyNDY1YThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCbhgZbfmnAyEGz8MB5NACSxOm5fwUT/7PqY1Kq7bPY8rg7eZ3mML1d 47F6HGCNjOWrcIkoyT5hxjfAzZ0KRHCZkvB5b27uh/WJ5G1g+Yyd2kuyBwAd1qyY KWeZPjxFU/sQV7uV3WObjIfuwkNRQjriTJpvGudL7BD11EymVFjjj6Y8GtIjXgso S8fYSplUL35rBnHxxTg/wzmJargI4vafAVAlJYRsEfWKXv9fMWEvF/uYMdUdJ1hb 1BX3Pf1rok1YC4+8O5PEQNrYPMhBtzOm4HZb2qazMUUQSpsOvJTYM1bGKppDpeoN iqsT5tqzj/plfrIm7DfhJ/mhln5T1k4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:33:20 2025 by rpki-client