$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa File: d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa (raw, json) Hash identifier: xx3qdsKCKKwaSrYb6dYiJ2P/EwbcVn8QCQZKHA+F5mo= Subject key identifier: 4B:D1:53:EE:37:A4:4E:62:CE:C4:D3:FD:DE:8B:42:97:4B:63:AF:D5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE93EF2521E1F45A304D00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.132.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:93:ef:25:21:e1:f4:5a:30:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=5517b461-ef66-4851-9e87-caa2e340f186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e8:90:1b:7e:b7:07:44:22:4e:ed:a1:89:53: 59:1b:49:ad:b3:5a:78:7c:dd:36:ee:37:a2:2e:69: 2b:5f:19:68:79:8a:ae:73:1e:5a:47:a3:3f:a7:0f: 5a:9d:5c:e1:f0:c9:6d:c1:4e:49:72:48:f3:72:1e: 16:e0:6d:9d:5d:95:c1:49:df:c5:db:8f:ce:41:10: a5:0f:88:f4:28:90:ef:a4:93:e0:7e:0c:cc:f5:a5: 15:c7:45:82:19:4f:f5:b2:88:11:db:2f:03:0b:2f: 42:9a:a4:7b:be:de:07:a8:69:e8:9c:7a:c3:29:ce: 2b:07:05:5d:da:b7:0a:be:a3:2c:18:e8:77:23:df: 08:fd:6d:8d:b2:3f:bc:04:68:fd:1a:12:3a:e9:51: 6c:b4:ff:c8:82:d4:03:d5:f4:23:04:07:d8:7f:25: 3b:ed:33:0d:c5:b3:32:0b:1f:33:03:aa:dd:11:d5: e0:c8:18:1e:dd:ba:c1:f7:8a:c8:65:86:15:ef:77: 8d:91:b2:7f:e5:c5:44:15:47:2b:5b:e4:79:d8:3f: 4d:71:33:8c:6e:86:05:9d:be:a3:d1:09:31:f0:e1: 79:ca:84:19:7a:83:e7:9c:63:1e:1f:25:f8:1d:75: 87:bd:8b:03:8c:60:e6:7f:92:af:26:b7:47:04:c0: d8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D1:53:EE:37:A4:4E:62:CE:C4:D3:FD:DE:8B:42:97:4B:63:AF:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:79:d4:4e:66:d3:a8:0e:c0:32:b8:35:23:a0:3d:58:14:55: 56:27:45:23:c6:35:f6:71:54:df:b5:d8:0e:20:16:1e:60:f4: 9e:b2:24:78:91:ab:98:20:c6:5b:12:6c:6d:6a:e1:b5:60:c3: 40:fe:85:ce:f7:39:01:a6:1c:7a:e9:8a:43:5f:9c:a2:03:74: 3b:ac:13:5a:66:60:3b:8c:95:a5:b7:87:60:0b:c1:8e:e4:f4: 2c:7b:c5:35:76:67:65:6e:5b:27:9b:cf:b9:c4:0d:bc:9b:d9: 73:ff:1c:0e:db:72:e9:d5:1b:ab:5e:41:7c:f7:14:75:27:97: 3d:53:e6:46:da:fe:a7:2b:09:af:e6:4c:fa:2a:17:f4:66:26: e0:aa:ff:ad:92:60:32:fa:6e:a1:92:f1:02:b0:e8:90:cd:e1: 95:f8:7e:38:6c:21:3f:c3:63:82:63:43:82:38:04:de:84:ed: 2c:41:23:71:71:a4:ee:8c:8c:f6:b8:fc:30:c0:6d:ec:ba:4d: 80:2c:ee:b0:29:b7:da:37:44:02:b4:e8:00:a4:75:c6:17:98: 0e:8c:f7:a7:89:d3:4e:e8:f5:1a:4d:cd:8c:47:7f:bb:be:ac: 7e:38:08:36:30:22:c4:73:cb:e6:70:a8:50:17:84:ae:db:94: 28:5b:0c:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpPvJSHh9FowTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NTUxN2I0NjEtZWY2Ni00ODUxLTllODctY2FhMmUzNDBmMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguiQG363B0QiTu2hiVNZG0mts1p4fN027jei LmkrXxloeYqucx5aR6M/pw9anVzh8MltwU5Jckjzch4W4G2dXZXBSd/F24/OQRCl D4j0KJDvpJPgfgzM9aUVx0WCGU/1sogR2y8DCy9CmqR7vt4HqGnonHrDKc4rBwVd 2rcKvqMsGOh3I98I/W2Nsj+8BGj9GhI66VFstP/IgtQD1fQjBAfYfyU77TMNxbMy Cx8zA6rdEdXgyBge3brB94rIZYYV73eNkbJ/5cVEFUcrW+R52D9NcTOMboYFnb6j 0Qkx8OF5yoQZeoPnnGMeHyX4HXWHvYsDjGDmf5KvJrdHBMDY+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvRU+43pE5izsTT/d6LQpdLY6/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDU1ZTljZDEtNWU5OC0z MmQ5LTlkY2QtMzhhNGUxYTljMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFITmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ51E5m06gOwDK4NSOgPVgUVVYnRSPGNfZxVN+12A4gFh5g9J6yJHiR q5ggxlsSbG1q4bVgw0D+hc73OQGmHHrpikNfnKIDdDusE1pmYDuMlaW3h2ALwY7k 9Cx7xTV2Z2VuWyebz7nEDbyb2XP/HA7bcunVG6teQXz3FHUnlz1T5kba/qcrCa/m TPoqF/RmJuCq/62SYDL6bqGS8QKw6JDN4ZX4fjhsIT/DY4JjQ4I4BN6E7SxBI3Fx pO6MjPa4/DDAbey6TYAs7rApt9o3RAK06ACkdcYXmA6M96eJ007o9RpNzYxHf7u+ rH44CDYwIsRzy+ZwqFAXhK7blChbDOU= -----END CERTIFICATE-----Generated at Sat Apr 5 13:17:27 2025 by rpki-client