$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5e73b702-9d2e-3bcd-a26e-c8a27e8c515b.roa File: 5e73b702-9d2e-3bcd-a26e-c8a27e8c515b.roa (raw, json) Hash identifier: AQHDGYyXnJ0a1FG9jsIxAdHPwzD0AHqsO7CV7/WHSpk= Subject key identifier: 62:1F:04:CD:39:F4:C9:DC:EC:9E:97:AA:58:79:6D:79:46:77:B7:F5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE95A74ED6B8752FBA7F40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5e73b702-9d2e-3bcd-a26e-c8a27e8c515b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 20.148.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:95:a7:4e:d6:b8:75:2f:ba:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=2f8a65f8-d704-4fe8-84b5-388029c25949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:f7:9f:ed:ab:e2:ae:b5:6f:76:45:dc:28: 6c:56:f4:9c:9d:3b:ad:88:ac:d5:a0:7a:99:bf:6d: 5f:cb:28:90:3b:9f:23:24:e2:eb:37:02:92:f2:13: ad:ef:ba:b9:7f:76:ca:23:b1:be:23:45:7a:7d:dc: bd:91:f5:54:7b:4e:a5:ff:44:c1:21:b5:a8:bc:b7: a9:0a:0e:17:e6:09:0d:ed:55:7b:71:6c:9f:e0:24: 05:cd:00:8c:ad:66:3d:76:00:fe:ae:00:8b:d5:8b: 93:9c:b9:8e:1b:d5:f8:87:91:2b:f7:c9:aa:27:b1: 23:a3:4c:a1:98:8a:5a:89:44:e6:0a:2a:fc:36:d2: ce:a1:61:9c:d6:bd:7f:fa:2c:6c:79:30:f6:89:3e: f1:a3:6d:85:85:f8:09:7a:26:97:3e:98:73:6a:8b: af:13:88:5f:22:e9:53:50:d3:5c:bc:a8:68:9e:91: 39:33:2e:45:80:4c:f0:fd:9d:17:6b:9b:6e:cb:b3: f0:9f:9a:f8:5d:32:a0:13:05:8b:3d:85:6e:cf:74: eb:15:8c:63:06:4f:91:1e:e7:a4:30:bc:97:fa:79: 33:b6:05:fa:3f:f7:32:ef:af:ed:7d:7e:48:ea:bc: 6b:ab:3c:94:dc:24:ad:72:f3:66:7b:e8:6e:10:a4: 83:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1F:04:CD:39:F4:C9:DC:EC:9E:97:AA:58:79:6D:79:46:77:B7:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5e73b702-9d2e-3bcd-a26e-c8a27e8c515b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3d:14:31:27:4e:d6:a2:f1:c0:06:94:cf:2b:c6:5f:2d:55: ee:43:cc:11:d8:ed:a5:82:2f:2a:1b:e2:e4:36:06:45:b0:a9: 33:b0:41:d1:23:ae:62:26:67:6c:41:31:1e:03:e0:7f:05:f9: d6:38:28:cc:3e:7d:8c:84:86:5a:3a:35:67:5f:c9:5f:96:f1: 49:01:e3:ee:53:bf:63:14:2a:23:b0:4d:8b:8e:23:cb:d6:41: 2e:cb:5d:80:8d:96:63:34:41:3b:b3:1a:7b:67:ff:4b:ea:30: 99:65:5c:c3:22:4b:78:ea:78:4a:06:7a:b4:5d:96:63:32:86: ae:b9:e6:2a:53:e9:4b:27:d7:da:2b:e7:c1:14:4d:b1:07:2b: a7:41:1b:df:84:76:af:1b:6e:ad:41:90:f9:6b:fe:e3:01:c1: a9:75:67:bf:82:16:94:d8:0f:95:88:c2:97:27:26:22:2c:d9: 97:68:e8:d3:f2:b1:5a:09:95:60:58:03:ac:c5:b1:85:b3:43: 06:31:27:19:2b:4d:f4:b4:68:92:9c:fc:e1:a2:08:37:7e:ec: fc:87:79:af:ae:10:f5:b2:34:6f:9e:78:02:21:d2:3b:aa:7b: a4:d7:b4:96:33:94:0c:7f:d3:53:ba:c6:e7:17:b7:3f:04:c3: 5f:66:c8:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpWnTta4dS+6f0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MmY4YTY1ZjgtZDcwNC00ZmU4LTg0YjUtMzg4MDI5YzI1OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9j3n+2r4q61b3ZF3ChsVvScnTutiKzVoHqZ v21fyyiQO58jJOLrNwKS8hOt77q5f3bKI7G+I0V6fdy9kfVUe06l/0TBIbWovLep Cg4X5gkN7VV7cWyf4CQFzQCMrWY9dgD+rgCL1YuTnLmOG9X4h5Er98mqJ7Ejo0yh mIpaiUTmCir8NtLOoWGc1r1/+ixseTD2iT7xo22FhfgJeiaXPphzaouvE4hfIulT UNNcvKhonpE5My5FgEzw/Z0Xa5tuy7Pwn5r4XTKgEwWLPYVuz3TrFYxjBk+RHuek MLyX+nkztgX6P/cy76/tfX5I6rxrqzyU3CStcvNme+huEKSDLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIfBM059Mnc7J6Xqlh5bXlGd7f1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWU3M2I3MDItOWQyZS0z YmNkLWEyNmUtYzhhMjdlOGM1MTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ9FDEnTtai8cAGlM8rxl8tVe5DzBHY7aWCLyob4uQ2BkWwqTOwQdEj rmImZ2xBMR4D4H8F+dY4KMw+fYyEhlo6NWdfyV+W8UkB4+5Tv2MUKiOwTYuOI8vW QS7LXYCNlmM0QTuzGntn/0vqMJllXMMiS3jqeEoGerRdlmMyhq655ipT6Usn19or 58EUTbEHK6dBG9+Edq8bbq1BkPlr/uMBwal1Z7+CFpTYD5WIwpcnJiIs2Zdo6NPy sVoJlWBYA6zFsYWzQwYxJxkrTfS0aJKc/OGiCDd+7PyHea+uEPWyNG+eeAIh0juq e6TXtJYzlAx/01O6xucXtz8Ew19myEk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:14 2025 by rpki-client