$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c00a48d0-53f7-3c34-a123-70fbf7b25125.roa File: c00a48d0-53f7-3c34-a123-70fbf7b25125.roa (raw, json) Hash identifier: mzby9rpNWjKHfZKWAC3dXTZtM3Vbgk/m4ngCOKd3NlM= Subject key identifier: 4A:11:36:7E:E6:B4:E2:B6:6E:EB:06:50:4C:CB:4A:8F:44:AF:80:66 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D42FB3E8CE663F36048814C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c00a48d0-53f7-3c34-a123-70fbf7b25125.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 3360 IP address blocks: 20.134.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b3:e8:ce:66:3f:36:04:88:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=c3ad5920-a3bc-4b65-a19a-a88a6f3ba547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:60:a0:d8:55:66:ca:a2:52:53:ea:82:a6: 9d:cc:fd:69:13:09:e1:66:19:70:61:14:c1:95:68: 62:fd:e8:0c:d0:9a:c0:b7:a8:78:82:9e:7b:d9:61: 61:34:04:55:e6:ee:fd:54:b3:0e:99:08:39:c7:f5: 08:90:14:15:61:7e:bd:45:97:7a:ba:b1:dd:14:33: 52:da:7f:32:e3:46:fb:06:39:c8:d9:c4:9d:be:9c: 33:ea:dd:84:83:6b:86:4c:f2:45:7a:6c:69:c8:21: bc:7a:36:93:87:1c:b3:3c:97:77:2b:6c:3f:82:46: fd:3d:26:f0:6c:44:ee:40:2f:a8:a1:e5:0d:c6:b3: 9b:24:df:78:e2:e0:bf:7d:e8:f3:80:71:34:61:55: 2f:69:9a:ec:1e:48:9f:d4:ee:fa:7d:99:68:d6:ac: ed:a1:ae:b3:aa:a8:a0:c4:b1:6e:d0:49:69:44:11: c0:90:9a:07:8f:5a:21:05:98:40:89:bd:13:9e:01: ab:fc:b7:1c:99:b8:27:ae:02:99:e0:ad:83:3f:81: 19:9a:54:0c:42:17:04:98:f0:c9:be:bf:3a:98:c2: b3:26:b1:3c:5a:ba:e7:18:bf:16:a0:b8:0e:e3:90: 60:ed:8f:a2:fb:2f:bb:0a:2b:43:bc:97:4f:46:f6: 3d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:11:36:7E:E6:B4:E2:B6:6E:EB:06:50:4C:CB:4A:8F:44:AF:80:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c00a48d0-53f7-3c34-a123-70fbf7b25125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3f:b4:9d:c1:7e:19:01:3e:6a:a5:63:18:1d:d3:6b:0d:aa: e8:bf:d1:29:cd:68:43:b9:92:7c:89:2c:00:5d:26:7f:80:15: 59:a5:20:5c:a5:0e:13:67:82:2b:b1:97:71:5b:ef:39:bb:e9: 59:a6:a9:ad:ca:3e:58:f5:83:f0:08:db:44:ba:db:b8:9c:ea: 79:98:fb:73:92:cc:7c:84:1b:96:e5:4e:a0:8b:ac:21:94:c7: 95:17:8b:02:62:d3:3d:92:61:53:04:83:64:2c:94:bc:25:00: 9a:a4:97:25:d7:2e:44:d1:67:fc:fe:5f:f7:a9:98:7c:07:60: 63:0b:da:c6:87:38:5c:75:96:fc:f9:16:1d:cc:ca:72:ef:37: 7e:f4:a7:c2:e7:f2:a9:b8:c4:75:35:a1:8c:a2:fb:96:1a:b5: e6:a5:22:e7:33:56:a5:c4:a2:cd:70:84:87:32:01:1e:6e:bc: c3:2b:1f:61:ae:fa:6d:77:35:fe:35:b1:1a:df:db:eb:03:7e: fd:ea:b2:36:ae:f4:04:98:a9:f1:64:f9:2a:2e:db:8c:31:01: 80:1d:1f:e0:0a:7a:cb:4b:fe:9c:1f:3c:c9:8f:0f:d1:73:07: 65:c8:c3:1d:2e:22:02:70:6f:e4:b2:a7:d1:28:10:1d:3a:d2: b5:8a:de:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7PozmY/NgSIFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzNhZDU5MjAtYTNiYy00YjY1LWExOWEtYTg4YTZmM2JhNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArItgoNhVZsqiUlPqgqadzP1pEwnhZhlwYRTB lWhi/egM0JrAt6h4gp572WFhNARV5u79VLMOmQg5x/UIkBQVYX69RZd6urHdFDNS 2n8y40b7BjnI2cSdvpwz6t2Eg2uGTPJFemxpyCG8ejaThxyzPJd3K2w/gkb9PSbw bETuQC+ooeUNxrObJN944uC/fejzgHE0YVUvaZrsHkif1O76fZlo1qztoa6zqqig xLFu0ElpRBHAkJoHj1ohBZhAib0TngGr/LccmbgnrgKZ4K2DP4EZmlQMQhcEmPDJ vr86mMKzJrE8WrrnGL8WoLgO45Bg7Y+i+y+7CitDvJdPRvY95wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoRNn7mtOK2busGUEzLSo9Er4BmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzAwYTQ4ZDAtNTNmNy0z YzM0LWExMjMtNzBmYmY3YjI1MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY/tJ3BfhkBPmqlYxgd02sNqui/0SnNaEO5knyJLABdJn+AFVmlIFyl DhNngiuxl3Fb7zm76Vmmqa3KPlj1g/AI20S627ic6nmY+3OSzHyEG5blTqCLrCGU x5UXiwJi0z2SYVMEg2QslLwlAJqklyXXLkTRZ/z+X/epmHwHYGML2saHOFx1lvz5 Fh3MynLvN370p8Ln8qm4xHU1oYyi+5YatealIuczVqXEos1whIcyAR5uvMMrH2Gu +m13Nf41sRrf2+sDfv3qsjau9ASYqfFk+Sou24wxAYAdH+AKestL/pwfPMmPD9Fz B2XIwx0uIgJwb+Syp9EoEB060rWK3m4= -----END CERTIFICATE-----Generated at Sat Jun 7 15:27:06 2025 by rpki-client