$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa File: 81b11565-f8a6-38ca-8987-5a25512a7a32.roa (raw, json) Hash identifier: f2/2HWX1MAQ/ALZR+pUlSXt6exerieMOB6zC/qfiTBw= Subject key identifier: 7E:8D:9D:04:40:B3:40:DA:D9:87:05:A5:E4:91:2F:4F:B0:24:F6:3B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858495ABEB26697663FC550A14E70 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 3356 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b2:66:97:66:3f:c5:50:a1:4e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=4d417ca7-5c9b-4006-80e6-ae9d680659d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:e9:b8:62:3e:5b:cd:a2:bb:20:87:90:6a: 01:e3:c7:2f:d0:e7:d0:8c:88:8b:68:4b:d5:25:f2: e4:d0:47:68:a0:0f:0a:57:1b:8c:a6:db:a3:55:80: 25:cc:82:eb:f4:d6:f7:d3:ef:1e:83:a1:e4:d2:ad: db:08:31:cb:b0:cc:aa:43:06:0a:bd:96:25:2e:33: f1:ed:6c:c1:7d:29:ea:4a:28:e9:0a:e3:e0:49:72: 18:32:76:24:89:c1:59:05:dc:f5:8e:61:88:d8:bb: 52:9e:f7:e5:ee:7b:03:d4:a8:8f:4f:1b:ce:57:34: d4:ea:ea:80:50:60:01:bc:06:ff:76:ff:26:b7:bb: 19:e6:7d:a6:b0:f4:60:13:40:09:25:ab:3e:ba:e7: cd:76:c6:22:93:ca:70:37:b3:a8:49:25:79:5f:fe: 29:c7:65:55:80:bf:9a:02:f2:1e:cd:8a:da:67:cb: b1:01:d4:8b:50:58:8a:53:ab:f7:f4:0f:73:ea:3b: 64:b4:a2:d5:e2:bf:ac:27:e6:67:35:29:46:83:dd: 28:ad:6f:13:14:94:4a:2d:db:68:23:dc:43:1a:be: 2b:3b:d6:eb:cf:32:3b:d1:34:35:5e:aa:cd:8d:e2: e6:2e:01:f3:3f:d0:ba:2a:f1:ca:8a:15:61:fd:29: d2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8D:9D:04:40:B3:40:DA:D9:87:05:A5:E4:91:2F:4F:B0:24:F6:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:71:63:a9:88:49:70:6f:d1:93:cf:8c:6d:d5:0b:5b:4e:bb: 06:8a:57:9d:d7:34:3f:47:be:5c:72:68:bd:fc:2b:a1:cd:3f: c5:73:89:51:da:d2:87:96:db:4c:31:c7:5d:8b:e7:83:c4:70: 2d:ed:c0:ea:b6:5d:36:35:d8:73:6d:b1:eb:ec:34:2e:25:0a: 87:d4:4c:c7:49:35:a0:55:d2:8f:94:2a:14:d9:8a:ba:7d:e8: 71:f7:3a:84:52:6f:cf:6f:eb:26:3f:17:64:18:9f:a1:87:bf: 7e:e9:f5:6c:34:fc:05:61:25:26:98:dd:b9:89:83:74:51:0a: 85:df:69:0a:58:60:b8:70:c6:0a:1f:79:72:c2:91:6f:ec:f1: f1:e6:45:32:94:39:4a:75:ab:4e:3f:3f:3d:36:71:23:e3:e2: ad:b4:2d:d2:9f:7a:14:2e:91:1e:4d:4a:39:15:62:c5:d2:7c: 8e:75:66:b0:7b:86:c7:88:8c:35:01:f1:ed:0c:2a:08:a2:4f: 92:82:24:cc:a2:92:12:1c:3b:cb:1e:17:b9:5f:3d:f6:13:cd: 0d:44:ca:0f:73:8f:3e:5f:02:8c:a6:ef:c8:e5:30:64:21:4b: ed:08:1c:a3:3e:79:54:6d:a4:cd:ef:96:6d:b5:6c:e8:e0:6c: cc:c7:29:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrJml2Y/xVChTnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NGQ0MTdjYTctNWM5Yi00MDA2LTgwZTYtYWU5ZDY4MDY1OWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01zpuGI+W82iuyCHkGoB48cv0OfQjIiLaEvV JfLk0EdooA8KVxuMptujVYAlzILr9Nb30+8eg6Hk0q3bCDHLsMyqQwYKvZYlLjPx 7WzBfSnqSijpCuPgSXIYMnYkicFZBdz1jmGI2LtSnvfl7nsD1KiPTxvOVzTU6uqA UGABvAb/dv8mt7sZ5n2msPRgE0AJJas+uufNdsYik8pwN7OoSSV5X/4px2VVgL+a AvIezYraZ8uxAdSLUFiKU6v39A9z6jtktKLV4r+sJ+ZnNSlGg90orW8TFJRKLdto I9xDGr4rO9brzzI70TQ1XqrNjeLmLgHzP9C6KvHKihVh/SnSNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6NnQRAs0Da2YcFpeSRL0+wJPY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODFiMTE1NjUtZjhhNi0z OGNhLTg5ODctNWEyNTUxMmE3YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpxY6mISXBv0ZPPjG3VC1tOuwaKV53XND9HvlxyaL38K6HNP8VziVHa 0oeW20wxx12L54PEcC3twOq2XTY12HNtsevsNC4lCofUTMdJNaBV0o+UKhTZirp9 6HH3OoRSb89v6yY/F2QYn6GHv37p9Ww0/AVhJSaY3bmJg3RRCoXfaQpYYLhwxgof eXLCkW/s8fHmRTKUOUp1q04/Pz02cSPj4q20LdKfehQukR5NSjkVYsXSfI51ZrB7 hseIjDUB8e0MKgiiT5KCJMyikhIcO8seF7lfPfYTzQ1Eyg9zjz5fAoym78jlMGQh S+0IHKM+eVRtpM3vlm21bOjgbMzHKVg= -----END CERTIFICATE-----Generated at Fri Apr 18 02:17:05 2025 by rpki-client