$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf26bf23-9642-3aae-be69-73e2d9498a25.roa File: cf26bf23-9642-3aae-be69-73e2d9498a25.roa (raw, json) Hash identifier: p3uMg+UWFGQbbbF9cGnDucOej9P/7rW1B2HWVqeYtoI= Subject key identifier: 3D:0D:89:05:B0:86:13:45:14:00:8A:34:BB:C0:C4:5B:21:59:CE:21 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849244E6F47C629A615ADD88F80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf26bf23-9642-3aae-be69-73e2d9498a25.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 20.137.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:6f:47:c6:29:a6:15:ad:d8:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=0152f66e-7690-44ed-83c6-7fdb1e146851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a0:90:f2:7c:2e:75:d9:0f:70:7f:36:e6:e2: 6d:c1:91:00:31:f2:d2:f0:8f:0f:2b:2c:6a:33:53: 61:22:20:aa:f9:8b:80:fc:02:42:04:a0:b3:30:c3: 1b:7a:dc:4c:06:93:2d:f6:8e:b7:de:ac:63:78:6d: b8:de:86:35:2f:5e:40:65:52:34:0f:45:b9:18:5b: 30:68:d1:62:f3:b9:be:5a:a6:06:68:eb:84:bf:62: 75:e9:3d:11:1f:55:ec:1d:73:16:8e:6a:d5:ea:92: 1e:ab:f8:5b:55:c8:f8:20:15:e1:54:1d:f4:52:0b: ea:c8:81:22:98:b5:5d:e3:6b:3d:1d:17:5b:2b:3a: f6:45:4e:28:da:23:40:ea:0c:72:83:04:18:7d:71: c4:29:7a:56:05:90:bc:63:18:a7:28:be:19:db:2f: f6:a2:70:94:82:88:6f:9b:35:70:9c:a9:26:24:33: 9b:2c:0f:8c:8b:1d:e3:25:6b:de:8a:f3:e2:74:02: a3:76:c5:81:42:51:f8:12:6d:c2:80:0a:e9:d3:34: 75:d3:ae:59:ef:fb:92:e2:e7:8d:f9:a4:e9:21:7a: ff:d3:c8:c0:75:33:32:ee:ec:0d:9c:ca:aa:08:63: 52:ae:55:c3:3b:54:41:bc:f6:1a:40:d0:da:ed:56: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0D:89:05:B0:86:13:45:14:00:8A:34:BB:C0:C4:5B:21:59:CE:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf26bf23-9642-3aae-be69-73e2d9498a25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:46:2c:9b:dd:27:cb:08:e1:64:b8:b2:70:31:e0:13:71:42: 57:f7:c2:ae:12:3d:d0:21:11:42:8e:65:55:a0:0d:41:07:5c: f1:7f:05:9c:ad:67:da:0c:fe:17:cd:c2:6e:b4:e0:10:f1:08: bc:09:7c:11:3b:5f:34:1c:11:49:8e:ec:e6:ee:ae:17:0f:09: d0:22:68:d7:ff:52:b6:c7:41:d5:db:00:23:b6:6a:dd:37:3c: 69:d9:a5:24:6d:5f:bd:31:85:9d:b4:5f:34:cd:ed:01:6a:89: 2b:77:22:3c:dd:5b:94:5a:33:05:b3:b1:c9:6f:6d:64:e3:b0: 92:8d:ed:aa:cb:a4:50:ef:53:a6:0b:b5:e7:cf:25:08:e7:07: cd:4d:3b:bf:f5:b8:83:8a:ce:99:7b:a1:4a:a4:b2:a2:95:85: f1:cd:97:97:0e:b9:06:25:6d:d6:49:05:75:81:7c:04:b1:1b: e2:8b:1a:51:ba:5d:1b:dc:f3:88:6f:cd:8c:82:be:e8:e6:a0: 18:56:c6:9b:70:d9:47:56:eb:6a:ca:58:3b:14:68:ad:9e:dc: 9d:21:6f:83:e2:59:d5:22:01:ca:46:f5:e8:91:fc:0b:13:bc: 3b:89:e0:1e:34:ef:69:6d:43:ae:4a:fe:f1:52:35:4c:8e:32: a2:67:10:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTm9HximmFa3Yj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MDE1MmY2NmUtNzY5MC00NGVkLTgzYzYtN2ZkYjFlMTQ2ODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KCQ8nwuddkPcH825uJtwZEAMfLS8I8PKyxq M1NhIiCq+YuA/AJCBKCzMMMbetxMBpMt9o633qxjeG243oY1L15AZVI0D0W5GFsw aNFi87m+WqYGaOuEv2J16T0RH1XsHXMWjmrV6pIeq/hbVcj4IBXhVB30UgvqyIEi mLVd42s9HRdbKzr2RU4o2iNA6gxygwQYfXHEKXpWBZC8YxinKL4Z2y/2onCUgohv mzVwnKkmJDObLA+Mix3jJWveivPidAKjdsWBQlH4Em3CgArp0zR1065Z7/uS4ueN +aTpIXr/08jAdTMy7uwNnMqqCGNSrlXDO1RBvPYaQNDa7VaPvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0NiQWwhhNFFACKNLvAxFshWc4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvY2YyNmJmMjMtOTY0Mi0z YWFlLWJlNjktNzNlMmQ5NDk4YTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlGLJvdJ8sI4WS4snAx4BNxQlf3wq4SPdAhEUKOZVWgDUEHXPF/BZyt Z9oM/hfNwm604BDxCLwJfBE7XzQcEUmO7OburhcPCdAiaNf/UrbHQdXbACO2at03 PGnZpSRtX70xhZ20XzTN7QFqiSt3IjzdW5RaMwWzsclvbWTjsJKN7arLpFDvU6YL tefPJQjnB81NO7/1uIOKzpl7oUqksqKVhfHNl5cOuQYlbdZJBXWBfASxG+KLGlG6 XRvc84hvzYyCvujmoBhWxptw2UdW62rKWDsUaK2e3J0hb4PiWdUiAcpG9eiR/AsT vDuJ4B4072ltQ65K/vFSNUyOMqJnELo= -----END CERTIFICATE-----Generated at Fri Mar 14 13:42:39 2025 by rpki-client