$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a47fe637-9574-3387-9479-f9a35116d96f.roa File: a47fe637-9574-3387-9479-f9a35116d96f.roa (raw, json) Hash identifier: aitkY7iWTgOYAFLVoC0tNgd/5xTw3UIdmA6UtcZLKPs= Subject key identifier: B2:28:88:89:3F:32:6C:13:47:CC:83:A6:9F:4C:2C:48:5F:B2:33:46 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE942F15828DD56B508FC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a47fe637-9574-3387-9479-f9a35116d96f.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 203 IP address blocks: 20.132.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:94:2f:15:82:8d:d5:6b:50:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a792372e-5e00-4b4b-8a1a-a52c1479300d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:69:9b:f3:f5:5a:8d:98:b4:8f:07:85:b7:fe: b2:9c:b4:5b:19:49:b1:80:61:a1:2c:e0:40:69:a4: b3:6a:fa:96:32:19:5b:d7:be:83:99:5a:30:6a:8e: 84:f3:21:14:4b:18:a3:54:92:92:d0:fd:f5:ec:2f: 2b:8f:37:c7:0c:e9:ff:1e:63:e1:15:90:a8:8a:42: a5:c3:6a:e9:ed:41:44:aa:46:e8:bf:31:e8:ec:d0: 24:fb:cc:37:68:c6:50:ab:b4:8a:69:a9:27:54:52: 92:f3:9a:9d:50:45:cd:48:36:44:2d:cb:bd:27:5a: 24:49:7c:82:03:1a:80:fd:96:c6:58:6d:f5:ef:87: 13:02:a4:e1:02:1d:6f:e5:bc:e3:03:54:e4:b4:d4: 08:a9:05:f7:c2:3e:21:cd:a5:8d:1e:c3:93:a5:8a: ae:9d:de:ef:bf:ba:5d:aa:3c:f0:4e:b1:eb:05:13: 98:fa:1f:7e:88:e6:e3:ed:d1:02:61:d2:d5:61:29: 1a:8c:ee:1b:72:f1:44:e7:50:e5:c5:32:83:e4:63: 8d:02:b9:83:00:20:15:0e:59:0a:d3:4e:f4:56:90: f9:d8:58:e2:4f:5a:c0:0d:8f:f1:f1:3f:49:8c:68: f9:d7:33:0c:e2:82:32:92:76:ce:d9:a4:02:7d:f1: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:28:88:89:3F:32:6C:13:47:CC:83:A6:9F:4C:2C:48:5F:B2:33:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a47fe637-9574-3387-9479-f9a35116d96f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:55:06:14:3a:1d:5d:b2:c7:24:c0:8b:57:2e:75:a5:3f:4f: 23:4f:63:46:ec:18:a6:bd:42:92:e7:04:3e:4d:45:94:d4:0f: f1:93:ff:ad:31:6d:25:7d:b7:97:ed:41:99:d0:af:97:88:5b: 3f:44:48:03:00:36:7c:ae:c3:c8:35:c6:10:d8:eb:a2:4e:32: 71:af:a1:04:34:29:1d:78:4e:9b:67:17:73:ca:54:26:78:66: 36:7c:0f:93:71:b9:57:31:7d:c7:da:7b:92:8b:2c:8f:ea:33: 3f:a7:bb:36:2f:7c:24:d5:2a:26:1c:af:40:b3:bd:a2:6c:8c: eb:44:7e:17:78:32:2e:34:5f:a6:a7:e3:c1:68:6d:e9:4f:a0: ed:8e:5c:43:2f:05:7f:6f:b1:f0:d6:19:4a:37:c6:50:16:24: 5b:68:fb:c0:c8:a5:18:e8:db:42:81:e8:d0:dd:a6:65:22:94: a6:37:8a:9f:59:96:aa:e7:31:b2:ac:69:0e:cd:03:84:8c:97: cc:c6:75:b1:3c:af:bf:40:8e:4a:92:4d:d1:ac:d2:17:31:6a: b3:7e:a1:cd:3c:a9:3a:58:cf:14:bd:7e:92:9a:8e:47:aa:dc: 62:bf:71:f9:ce:47:5f:25:72:e4:27:60:83:fb:ce:6d:d9:0a: 20:6f:3b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpQvFYKN1WtQj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTc5MjM3MmUtNWUwMC00YjRiLThhMWEtYTUyYzE0NzkzMDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGmb8/VajZi0jweFt/6ynLRbGUmxgGGhLOBA aaSzavqWMhlb176DmVowao6E8yEUSxijVJKS0P317C8rjzfHDOn/HmPhFZCoikKl w2rp7UFEqkbovzHo7NAk+8w3aMZQq7SKaaknVFKS85qdUEXNSDZELcu9J1okSXyC AxqA/ZbGWG3174cTAqThAh1v5bzjA1TktNQIqQX3wj4hzaWNHsOTpYqund7vv7pd qjzwTrHrBROY+h9+iObj7dECYdLVYSkajO4bcvFE51DlxTKD5GONArmDACAVDlkK 0070VpD52FjiT1rADY/x8T9JjGj51zMM4oIyknbO2aQCffFSPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIoiIk/MmwTR8yDpp9MLEhfsjNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTQ3ZmU2MzctOTU3NC0z Mzg3LTk0NzktZjlhMzUxMTZkOTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFITmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRVBhQ6HV2yxyTAi1cudaU/TyNPY0bsGKa9QpLnBD5NRZTUD/GT/60x bSV9t5ftQZnQr5eIWz9ESAMANnyuw8g1xhDY66JOMnGvoQQ0KR14TptnF3PKVCZ4 ZjZ8D5NxuVcxfcfae5KLLI/qMz+nuzYvfCTVKiYcr0CzvaJsjOtEfhd4Mi40X6an 48FobelPoO2OXEMvBX9vsfDWGUo3xlAWJFto+8DIpRjo20KB6NDdpmUilKY3ip9Z lqrnMbKsaQ7NA4SMl8zGdbE8r79AjkqSTdGs0hcxarN+oc08qTpYzxS9fpKajkeq 3GK/cfnOR18lcuQnYIP7zm3ZCiBvO1I= -----END CERTIFICATE-----Generated at Fri Apr 11 23:30:06 2025 by rpki-client