$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa File: 89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa (raw, json) Hash identifier: yv82BXgb602PU9PAmsPLJ73QwxCsFG8UHtdzY9SVgIM= Subject key identifier: A5:19:29:C1:0D:67:56:B0:8A:15:B0:61:90:C5:17:9A:1A:08:52:8E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858494469472DE3BA22931E4E3000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 3360 IP address blocks: 20.134.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:47:2d:e3:ba:22:93:1e:4e:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=819c2bad-a149-44e7-844a-864047d753f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:71:1c:72:b8:f1:f0:ce:74:f2:af:f6:a0: f0:02:cc:4a:1c:d5:8c:99:85:cc:d8:7e:95:8d:b2: 65:14:b6:1d:90:93:00:e7:f5:8c:c0:36:d7:08:9a: 99:10:77:89:a5:04:7d:3c:f8:b4:e2:f1:44:38:27: 7a:cf:3f:00:56:76:95:29:55:a9:c5:3f:4b:26:d3: bc:fc:7b:ff:a1:0b:76:e3:02:19:c2:9a:30:b6:6e: ec:93:c4:08:a6:ac:31:53:b1:98:e2:1e:ad:ef:9b: 51:28:16:1b:42:22:8b:88:6e:b3:45:26:17:7c:66: b9:d4:8b:74:cb:56:22:73:4b:24:f6:b3:87:6c:c1: 2a:53:da:62:40:11:55:30:82:8e:bd:01:11:76:fc: 2c:ca:5d:88:59:cd:73:28:1f:70:7b:e1:24:da:90: c1:28:d2:83:b5:5e:77:8b:36:d0:c8:0c:cc:24:02: 8f:66:3c:b8:90:d9:de:81:06:4c:12:9a:d6:f7:5a: 50:57:7b:50:a4:e1:0e:ea:12:87:1b:83:b3:03:6f: cc:98:98:26:15:7a:47:17:be:2e:ef:73:74:a5:9c: dc:91:de:1a:f0:14:6b:d4:d1:58:45:de:01:b5:75: 4a:82:9a:1e:8b:59:18:74:b6:a1:78:53:74:9b:68: 42:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:19:29:C1:0D:67:56:B0:8A:15:B0:61:90:C5:17:9A:1A:08:52:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ae:36:02:d4:3b:4b:7c:d5:2d:ba:e8:66:b8:ed:c5:8e:74: dc:b1:cf:85:44:d1:d3:d5:57:e2:ac:db:7d:6a:a5:4c:4c:85: db:3c:3e:ec:ef:35:ef:3f:87:8b:f9:05:4d:d7:9a:b4:0f:ad: 0b:fe:1b:57:6c:a1:a7:51:c1:ce:64:dc:70:ae:72:71:cb:93: cb:e5:56:d4:a5:4e:f5:f7:ad:82:e8:1c:2d:7c:5d:9a:2c:64: 69:ab:fd:1e:5b:ce:36:36:be:1d:ec:e3:4f:29:48:8f:97:96: 6e:fd:64:7b:7e:bd:2c:18:87:67:86:eb:09:f5:2b:d5:a7:eb: 9e:7c:14:6c:15:61:2d:73:d3:ef:7a:83:60:91:0e:db:9a:e6: 6e:a8:76:8d:68:55:9d:b3:78:91:9b:68:91:b7:1e:09:4a:45: f3:ac:c0:d3:e2:e9:39:74:6e:bc:50:ea:e9:6b:b5:71:aa:ef: c7:e1:5f:8e:fb:31:34:22:17:f1:d0:e9:a0:51:f4:bc:94:fe: 90:72:71:c1:1e:6c:82:d3:c8:8d:86:da:07:10:e6:5f:5b:07: f0:1b:45:20:a8:6f:7c:91:13:35:ed:43:ee:65:80:e7:de:81: 0c:e8:86:e0:f5:26:6f:20:e2:07:fc:35:84:38:29:3e:fb:d3: b9:5d:da:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUct47oikx5OMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ODE5YzJiYWQtYTE0OS00NGU3LTg0NGEtODY0MDQ3ZDc1M2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorpxHHK48fDOdPKv9qDwAsxKHNWMmYXM2H6V jbJlFLYdkJMA5/WMwDbXCJqZEHeJpQR9PPi04vFEOCd6zz8AVnaVKVWpxT9LJtO8 /Hv/oQt24wIZwpowtm7sk8QIpqwxU7GY4h6t75tRKBYbQiKLiG6zRSYXfGa51It0 y1Yic0sk9rOHbMEqU9piQBFVMIKOvQERdvwsyl2IWc1zKB9we+Ek2pDBKNKDtV53 izbQyAzMJAKPZjy4kNnegQZMEprW91pQV3tQpOEO6hKHG4OzA2/MmJgmFXpHF74u 73N0pZzckd4a8BRr1NFYRd4BtXVKgpoei1kYdLaheFN0m2hClwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUZKcENZ1awihWwYZDFF5oaCFKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODlkMzNjMmMtY2M2ZC0z ZmZkLWFiYmQtNjNmNDU5ZDQ0ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCuNgLUO0t81S266Ga47cWOdNyxz4VE0dPVV+Ks231qpUxMhds8Puzv Ne8/h4v5BU3XmrQPrQv+G1dsoadRwc5k3HCucnHLk8vlVtSlTvX3rYLoHC18XZos ZGmr/R5bzjY2vh3s408pSI+Xlm79ZHt+vSwYh2eG6wn1K9Wn6558FGwVYS1z0+96 g2CRDtua5m6odo1oVZ2zeJGbaJG3HglKRfOswNPi6Tl0brxQ6ulrtXGq78fhX477 MTQiF/HQ6aBR9LyU/pByccEebILTyI2G2gcQ5l9bB/AbRSCob3yREzXtQ+5lgOfe gQzohuD1Jm8g4gf8NYQ4KT7707ld2g4= -----END CERTIFICATE-----Generated at Fri Apr 18 02:01:28 2025 by rpki-client