$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9f80a8b3-33a4-38ba-b464-0d1152d1e289.roa File: 9f80a8b3-33a4-38ba-b464-0d1152d1e289.roa (raw, json) Hash identifier: gxUTxIZIaDTsE/i2di/pCKbAEXYFAIhzjP7w7pPT9Ek= Subject key identifier: 3C:73:4C:5B:3C:6A:E6:21:1E:21:EC:96:87:00:51:19:1D:AC:0A:A6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584975445D24CB0C2E79E0D18C00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9f80a8b3-33a4-38ba-b464-0d1152d1e289.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 4237 IP address blocks: 20.137.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:5d:24:cb:0c:2e:79:e0:d1:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=24fdc2a5-b521-452a-bf4e-e8661d85b245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:7a:ab:52:31:03:18:6f:e6:62:b7:88:d8: 3a:cb:bc:f0:01:97:0b:b4:31:81:a7:e1:64:48:e0: 56:a7:d0:48:4f:22:c1:c5:67:9e:f6:e1:95:47:c3: 10:89:68:01:07:aa:1b:4e:5f:1a:19:c7:a6:78:b3: 06:4d:01:4c:50:34:52:f2:bc:93:4c:2d:be:45:ce: e1:47:8c:c3:e6:45:a0:25:91:aa:45:3e:8b:a9:ce: c4:c0:ab:36:8c:3b:5b:3f:4e:b2:ed:35:36:95:24: fd:59:84:31:79:66:20:2a:5a:40:62:77:95:77:03: 75:73:14:32:b1:d3:1e:b4:ea:59:08:e5:9e:1c:ca: 46:c1:86:2f:37:00:80:51:7b:ac:95:3a:51:06:c9: 3d:21:d5:1d:f9:41:2d:b0:54:3b:9f:6e:ef:7f:fa: 7b:6c:d1:54:8c:26:ea:20:90:59:32:c0:fc:c7:1b: bf:36:a9:6d:8c:28:1b:3f:f2:e3:a8:38:bc:0b:08: c2:7c:71:f9:5c:a7:eb:50:b7:2e:0f:74:ab:50:01: 45:d9:5a:b9:3b:36:d3:00:d7:7c:2c:cf:c4:81:0b: ae:96:62:cf:77:68:2d:f5:a9:0c:31:ac:eb:29:2d: 11:a1:b6:32:2d:5e:c6:a8:e0:df:25:94:98:ac:b9: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:73:4C:5B:3C:6A:E6:21:1E:21:EC:96:87:00:51:19:1D:AC:0A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9f80a8b3-33a4-38ba-b464-0d1152d1e289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:00:3c:17:ca:21:e6:c4:2c:06:4a:d8:8c:05:28:23:65:06: 6c:18:73:fd:c1:eb:5a:9b:48:b3:8f:b7:89:68:4e:b6:35:57: 66:ff:22:41:89:02:82:04:e0:b0:7f:4a:90:e3:fb:17:56:6c: 78:86:f2:09:86:ba:32:b0:12:0c:c9:5a:fb:df:a6:44:42:d8: 84:24:f2:64:56:b2:f1:5b:7c:82:65:dd:74:36:48:59:af:b6: e5:3e:02:1d:1f:6f:94:4b:ec:e5:f0:72:22:e4:96:92:6d:89: 8a:e3:70:62:66:86:a7:33:cd:5b:5a:9d:84:4b:0e:88:f0:3b: 54:46:6f:0b:5e:96:1f:54:7e:bd:1e:80:c0:35:df:5d:54:2c: e3:49:e2:b0:e9:a9:41:4e:a9:b0:c2:96:b2:fa:ed:15:8f:75: 9d:c7:ca:78:eb:48:33:3a:25:99:79:e6:6b:93:71:f6:58:d2: 9c:f7:7a:1d:79:3d:a6:07:d6:84:11:99:ec:1b:df:b0:4e:db: ef:de:0a:a4:e1:6f:b9:8a:18:e0:3f:8d:c5:dc:70:b5:8d:43: 85:a4:2a:4b:d9:fe:f2:33:3f:38:37:d7:c9:90:f6:fb:83:fd: 53:8b:54:0e:8b:1e:b9:8d:b1:21:a7:20:9a:9e:cf:38:dd:97: b9:0b:3c:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RF0kywwueeDRjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk MjRmZGMyYTUtYjUyMS00NTJhLWJmNGUtZTg2NjFkODViMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5p6q1IxAxhv5mK3iNg6y7zwAZcLtDGBp+Fk SOBWp9BITyLBxWee9uGVR8MQiWgBB6obTl8aGcemeLMGTQFMUDRS8ryTTC2+Rc7h R4zD5kWgJZGqRT6Lqc7EwKs2jDtbP06y7TU2lST9WYQxeWYgKlpAYneVdwN1cxQy sdMetOpZCOWeHMpGwYYvNwCAUXuslTpRBsk9IdUd+UEtsFQ7n27vf/p7bNFUjCbq IJBZMsD8xxu/NqltjCgbP/LjqDi8CwjCfHH5XKfrULcuD3SrUAFF2Vq5OzbTANd8 LM/EgQuulmLPd2gt9akMMazrKS0RobYyLV7GqODfJZSYrLn5CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxzTFs8auYhHiHslocAURkdrAqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWY4MGE4YjMtMzNhNC0z OGJhLWI0NjQtMGQxMTUyZDFlMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwAPBfKIebELAZK2IwFKCNlBmwYc/3B61qbSLOPt4loTrY1V2b/IkGJ AoIE4LB/SpDj+xdWbHiG8gmGujKwEgzJWvvfpkRC2IQk8mRWsvFbfIJl3XQ2SFmv tuU+Ah0fb5RL7OXwciLklpJtiYrjcGJmhqczzVtanYRLDojwO1RGbwtelh9Ufr0e gMA1311ULONJ4rDpqUFOqbDClrL67RWPdZ3HynjrSDM6JZl55muTcfZY0pz3eh15 PaYH1oQRmewb37BO2+/eCqThb7mKGOA/jcXccLWNQ4WkKkvZ/vIzPzg318mQ9vuD /VOLVA6LHrmNsSGnIJqezzjdl7kLPHA= -----END CERTIFICATE-----Generated at Fri Apr 18 02:10:30 2025 by rpki-client