$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa File: 895b35f2-676a-36ad-9bd6-7860fc097fbf.roa (raw, json) Hash identifier: XxsHwqsMv6t+mCVYCPKehq4/kSeCZowL6Od5otHpdoI= Subject key identifier: CC:A4:61:EE:60:C9:95:59:EB:66:6E:3A:90:A1:04:17:45:03:30:3C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858495ABEB2942C93C1A398F97780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 203 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b2:94:2c:93:c1:a3:98:f9:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=fb9e6f32-7bca-428d-90b2-792ec5ee80d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:6d:af:d6:dd:64:7e:c2:af:be:2c:d0:e8: f1:a7:82:89:bf:a2:c6:c9:38:de:36:3d:eb:c8:5f: e8:34:95:02:72:9f:63:6d:ae:0f:97:55:5e:09:08: 4c:9c:6f:bb:f2:ed:4d:33:ac:78:f9:36:77:dd:67: 59:42:6e:79:13:da:91:75:26:e6:5c:fd:7d:c7:5f: 49:2a:8b:5b:e2:be:db:99:98:89:3e:76:13:d9:22: 0e:0e:27:dd:85:fc:9e:f4:06:b6:3c:50:56:f1:eb: 3d:b0:b7:e9:f5:86:a0:f4:2d:f1:59:ac:88:be:bf: 75:f3:52:f1:84:6c:87:f7:fe:dc:7a:ce:24:28:91: 4d:aa:09:ce:7a:54:b3:f0:ad:c1:34:a1:05:af:bd: 12:04:e1:3d:ff:ed:78:c8:e9:db:1b:4d:fc:c5:70: 62:01:26:06:5d:46:ad:38:01:ab:75:c8:7f:75:d2: eb:b4:b7:55:5a:9e:a2:46:f5:9f:08:07:92:1e:90: 1f:d4:fb:ce:68:50:b0:7c:6a:93:cc:46:3e:18:fa: bb:11:8e:d3:79:36:6c:d0:3d:53:fc:aa:6e:ed:85: e2:b1:28:dc:60:41:9a:87:c8:47:02:d5:d6:6b:59: 8e:8c:3d:76:e2:1b:c2:7f:fc:4d:62:6c:41:3a:e7: a6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A4:61:EE:60:C9:95:59:EB:66:6E:3A:90:A1:04:17:45:03:30:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:6b:87:2e:b9:e2:7b:ae:78:9a:cb:ed:3c:78:82:b1:11:24: 93:58:3e:23:37:27:10:3e:94:db:cc:9c:6a:f2:2c:94:d5:72: 8b:fb:5d:73:92:d6:d5:11:6c:44:c6:4e:4d:aa:9c:29:ad:2a: 5f:0b:23:92:87:80:19:2b:5b:b5:63:9d:41:b8:7e:60:11:02: bd:46:90:f8:73:1f:da:a3:b6:cd:29:4f:56:b7:b3:1b:3f:68: 3e:fe:d3:a6:8f:4d:6e:90:53:09:d9:8d:f5:db:69:00:6f:08: 78:35:62:df:24:b4:5b:8d:67:1f:3e:0b:82:7d:ce:a2:e4:73: fe:8d:a2:47:41:ac:c0:f5:1d:2f:54:d9:8a:e8:f3:51:83:f7: e5:81:49:fb:65:e8:7a:97:0d:09:86:35:c3:7f:dd:1a:af:ff: 93:2e:f3:5b:66:5e:0b:30:2f:71:53:7f:85:53:ab:51:1e:c4: 23:18:31:77:a1:71:13:44:4a:22:27:c1:ca:59:52:40:d3:9f: b2:0d:d7:73:30:c9:98:32:54:f3:47:17:f0:42:5a:36:26:5a: 08:71:3c:d8:aa:7f:e2:1f:09:62:b9:86:7f:2d:3f:3c:8d:73: e3:de:76:30:15:d7:8e:ff:51:3d:2b:a4:41:98:98:70:49:c4: 50:d0:1e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrKULJPBo5j5d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZmI5ZTZmMzItN2JjYS00MjhkLTkwYjItNzkyZWM1ZWU4MGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsVtr9bdZH7Cr74s0Ojxp4KJv6LGyTjeNj3r yF/oNJUCcp9jba4Pl1VeCQhMnG+78u1NM6x4+TZ33WdZQm55E9qRdSbmXP19x19J Kotb4r7bmZiJPnYT2SIODifdhfye9Aa2PFBW8es9sLfp9Yag9C3xWayIvr9181Lx hGyH9/7ces4kKJFNqgnOelSz8K3BNKEFr70SBOE9/+14yOnbG038xXBiASYGXUat OAGrdch/ddLrtLdVWp6iRvWfCAeSHpAf1PvOaFCwfGqTzEY+GPq7EY7TeTZs0D1T /Kpu7YXisSjcYEGah8hHAtXWa1mOjD124hvCf/xNYmxBOuemywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMykYe5gyZVZ62ZuOpChBBdFAzA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODk1YjM1ZjItNjc2YS0z NmFkLTliZDYtNzg2MGZjMDk3ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1rhy654nuueJrL7Tx4grERJJNYPiM3JxA+lNvMnGryLJTVcov7XXOS 1tURbETGTk2qnCmtKl8LI5KHgBkrW7VjnUG4fmARAr1GkPhzH9qjts0pT1a3sxs/ aD7+06aPTW6QUwnZjfXbaQBvCHg1Yt8ktFuNZx8+C4J9zqLkc/6NokdBrMD1HS9U 2Yro81GD9+WBSftl6HqXDQmGNcN/3Rqv/5Mu81tmXgswL3FTf4VTq1EexCMYMXeh cRNESiInwcpZUkDTn7IN13MwyZgyVPNHF/BCWjYmWghxPNiqf+IfCWK5hn8tPzyN c+PedjAV147/UT0rpEGYmHBJxFDQHl4= -----END CERTIFICATE-----Generated at Fri Apr 11 23:20:09 2025 by rpki-client