$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/82635c9f-468b-3813-b9e9-4893232f7cc6.roa File: 82635c9f-468b-3813-b9e9-4893232f7cc6.roa (raw, json) Hash identifier: fMVLQhTGzAGwPegaeI0vX40PtoqSb459mZT+0SXmaaE= Subject key identifier: C3:81:51:7C:C4:9C:D0:2A:2F:FF:93:AF:B8:CA:F0:E0:5A:62:57:74 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE94FC0408E0AE4DC58400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/82635c9f-468b-3813-b9e9-4893232f7cc6.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 20.148.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:94:fc:04:08:e0:ae:4d:c5:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=c573d327-c719-472b-9b72-a35d00d11ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a9:4a:b3:f9:3d:24:28:90:72:9d:c9:69:84: 2d:fa:2b:9e:fe:f7:d6:41:9d:24:4d:5e:72:8f:8e: 82:a5:3f:c8:57:c1:a1:f5:e2:80:e4:7b:3e:a7:e2: b3:54:6e:7a:f4:9f:de:64:ff:c5:87:a3:38:ab:77: 96:ab:c2:12:ca:08:72:28:61:a3:af:c4:09:92:74: 59:a4:48:3c:21:82:0b:4d:f1:4a:13:ed:7a:1b:a1: 5a:28:88:69:28:57:2d:f6:39:2f:15:60:94:5f:98: 88:b0:61:f7:e7:f6:12:5e:8d:72:c8:2f:a4:39:90: 89:fd:2d:d7:52:72:32:2d:cd:c8:00:13:cf:b7:44: d8:f8:84:f1:60:04:06:df:71:99:91:38:79:33:74: 93:ce:e4:cb:c9:bf:ec:91:65:d5:dd:3c:37:d6:ed: 04:e0:ef:fe:3e:46:4f:74:96:7d:b2:99:21:45:ef: 39:dd:b1:46:c7:a1:01:2b:ac:c0:1f:e2:a6:d8:40: 18:d2:dc:28:f8:8a:84:88:77:1b:27:1a:e4:22:84: 79:06:88:39:d0:c3:db:31:cf:13:d3:0f:e0:ea:82: 57:70:8a:1d:c5:a4:7b:57:74:02:84:52:79:33:ec: 9e:43:e0:b2:73:54:d5:f7:2d:aa:66:f1:ad:c7:fc: a6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:81:51:7C:C4:9C:D0:2A:2F:FF:93:AF:B8:CA:F0:E0:5A:62:57:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/82635c9f-468b-3813-b9e9-4893232f7cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c2:af:23:b3:2e:18:75:10:cc:da:e0:db:e9:51:aa:64:20: 8e:0c:11:d8:34:c1:6a:ff:8b:5b:d9:83:1b:c6:4e:30:c9:9d: 96:1a:0c:ef:8d:16:eb:3d:90:84:01:69:a0:fb:0f:3b:8d:70: 84:45:89:eb:2f:b3:2c:99:c1:20:37:bf:51:0f:bf:90:33:cf: fc:57:33:26:7c:dc:92:ba:bb:5e:d9:2b:6e:22:9c:71:7a:6a: 58:98:4e:27:79:ef:3c:d9:1d:bb:ea:93:cc:05:ae:92:80:c9: 09:f9:61:d6:1e:ed:5c:7f:e3:0a:b0:f3:31:d4:a2:70:8b:c4: 85:6a:18:5d:88:45:ce:5e:43:0a:8d:3f:cd:a1:90:1a:ba:76: da:8a:c6:7a:2e:40:e2:ad:ca:70:5d:39:55:6e:9d:b5:c5:fa: 44:86:b9:16:b2:8d:61:9c:5b:04:80:11:ea:db:bb:1d:88:9a: f2:35:6e:00:70:25:5b:b4:4b:e6:93:98:78:9c:f0:89:bb:87: a8:0a:3b:0f:a2:47:3c:91:fe:b8:7c:c2:96:91:70:1c:fc:2d: 36:da:c0:b8:15:e4:e1:06:8e:7e:63:4b:d6:da:c8:66:a5:01: ea:1a:92:3d:61:41:89:ac:68:77:bb:8f:f8:33:c8:03:80:03: 1c:0b:91:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpT8BAjgrk3FhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YzU3M2QzMjctYzcxOS00NzJiLTliNzItYTM1ZDAwZDExZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKlKs/k9JCiQcp3JaYQt+iue/vfWQZ0kTV5y j46CpT/IV8Gh9eKA5Hs+p+KzVG569J/eZP/Fh6M4q3eWq8ISyghyKGGjr8QJknRZ pEg8IYILTfFKE+16G6FaKIhpKFct9jkvFWCUX5iIsGH35/YSXo1yyC+kOZCJ/S3X UnIyLc3IABPPt0TY+ITxYAQG33GZkTh5M3STzuTLyb/skWXV3Tw31u0E4O/+PkZP dJZ9spkhRe853bFGx6EBK6zAH+Km2EAY0two+IqEiHcbJxrkIoR5Bog50MPbMc8T 0w/g6oJXcIodxaR7V3QChFJ5M+yeQ+Cyc1TV9y2qZvGtx/ymcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOBUXzEnNAqL/+Tr7jK8OBaYld0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODI2MzVjOWYtNDY4Yi0z ODEzLWI5ZTktNDg5MzIzMmY3Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPCryOzLhh1EMza4NvpUapkII4MEdg0wWr/i1vZgxvGTjDJnZYaDO+N Fus9kIQBaaD7DzuNcIRFiesvsyyZwSA3v1EPv5Azz/xXMyZ83JK6u17ZK24inHF6 aliYTid57zzZHbvqk8wFrpKAyQn5YdYe7Vx/4wqw8zHUonCLxIVqGF2IRc5eQwqN P82hkBq6dtqKxnouQOKtynBdOVVunbXF+kSGuRayjWGcWwSAEerbux2ImvI1bgBw JVu0S+aTmHic8Im7h6gKOw+iRzyR/rh8wpaRcBz8LTbawLgV5OEGjn5jS9bayGal Aeoakj1hQYmsaHe7j/gzyAOAAxwLkVk= -----END CERTIFICATE-----Generated at Fri Mar 14 13:30:24 2025 by rpki-client