$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d99a5305-6483-3f7c-aa24-6e3e80884735.roa File: d99a5305-6483-3f7c-aa24-6e3e80884735.roa (raw, json) Hash identifier: GYAgv2R2+R0mhVsRc9ZJRLt7bOCzwRYvyhckCAy4DJw= Subject key identifier: 50:9B:1B:67:9B:18:C2:8B:92:87:E6:E8:9E:F8:57:16:BD:FD:85:A3 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D6FA4843101112EFFF750F00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d99a5305-6483-3f7c-aa24-6e3e80884735.roa Signing time: Tue 13 May 2025 13:01:02 +0000 ROA not before: Tue 13 May 2025 13:01:02 +0000 ROA not after: Mon 11 Aug 2025 13:01:02 +0000 asID: 202 IP address blocks: 20.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:fa:48:43:10:11:12:ef:ff:75:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 13 13:01:02 2025 GMT Not After : Aug 11 13:01:02 2025 GMT Subject: CN=857643ef-2a78-487b-a750-04b66dbeee2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:47:3e:74:c2:b8:45:76:af:ae:e3:e3:bd:5e: 31:da:0d:7f:a6:e0:e3:54:41:49:a3:03:f3:82:a0: b8:9e:f6:34:e7:80:6a:4a:62:d8:05:b1:99:f8:c3: ee:cd:1d:9b:82:e7:03:a4:fb:82:8e:a2:25:48:8a: 68:69:c7:9d:e0:ff:e7:ce:c5:de:b2:32:e4:be:f4: 14:dc:5a:f4:f0:67:cb:05:eb:8d:a1:7f:af:91:be: ab:e6:42:6d:38:88:2f:e0:7f:ff:76:3a:29:57:42: 97:bc:7e:99:a8:df:38:a8:a0:3d:a1:28:ec:3b:13: bd:68:db:c9:ba:92:4e:e7:6f:38:bd:00:f2:13:31: 16:fb:ce:0e:ec:f5:35:83:e9:74:9b:60:bf:27:ca: 2e:64:e8:87:c0:40:5d:0e:89:03:b5:b9:d7:d8:26: 15:57:81:81:52:b2:ac:fa:38:57:46:75:72:81:fb: c6:8f:f2:22:2e:d2:2a:4d:b7:50:63:89:ea:fd:9d: 25:ec:fd:1e:ca:66:23:96:9d:31:81:28:16:24:74: 41:c9:e6:8e:fd:e9:9b:e0:08:f5:40:6c:d6:64:a4: 18:b8:42:ca:07:84:7d:09:0e:b2:00:83:64:ad:9d: aa:cf:ca:6b:6e:21:43:da:de:ef:4a:32:85:f5:bb: dd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9B:1B:67:9B:18:C2:8B:92:87:E6:E8:9E:F8:57:16:BD:FD:85:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d99a5305-6483-3f7c-aa24-6e3e80884735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:cc:50:7f:72:86:d8:62:c0:e7:41:37:fc:15:d0:5e:cd:85: e6:c3:34:f0:57:15:df:72:b2:a0:4a:b7:db:f0:af:e1:85:03: fe:95:4c:70:99:88:b5:ad:3c:22:2d:2d:33:f4:9f:6c:36:cc: 58:13:e1:5a:82:c7:9a:a6:26:09:16:7a:ad:72:48:5f:0a:89: 64:3b:d6:8d:40:3f:0c:f8:7b:f4:62:2e:a0:b3:87:73:4b:f3: 2f:9a:ea:37:ed:43:66:e7:36:fd:2f:23:d5:e7:16:7a:77:87: a8:65:12:9d:1c:5f:cb:ea:ea:79:52:c7:ff:63:52:ea:4b:9e: d4:7a:ab:ee:6f:ea:79:84:0c:8c:dc:21:37:7c:df:39:2d:25: eb:ca:cb:23:6d:70:9d:1b:ef:1f:5a:a5:f5:02:4a:ff:81:9d: 95:63:d6:ea:f2:cf:3c:45:c3:e9:0c:26:77:04:50:57:80:68: ef:f0:ba:0e:fc:bf:13:47:67:28:61:78:16:e7:b9:98:5d:1f: 58:33:10:20:0f:d0:e8:d8:be:56:8c:76:dd:6d:76:20:55:cb: a5:79:e1:7d:b3:c3:3a:ee:f8:33:38:75:3f:5d:da:de:ad:0e: d3:bc:a0:c6:ce:f5:a2:61:7b:37:07:f8:0d:1d:d2:e1:b7:8c: 9a:27:18:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW+khDEBES7/91DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk ODU3NjQzZWYtMmE3OC00ODdiLWE3NTAtMDRiNjZkYmVlZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEc+dMK4RXavruPjvV4x2g1/puDjVEFJowPz gqC4nvY054BqSmLYBbGZ+MPuzR2bgucDpPuCjqIlSIpoaced4P/nzsXesjLkvvQU 3Fr08GfLBeuNoX+vkb6r5kJtOIgv4H//djopV0KXvH6ZqN84qKA9oSjsOxO9aNvJ upJO5284vQDyEzEW+84O7PU1g+l0m2C/J8ouZOiHwEBdDokDtbnX2CYVV4GBUrKs +jhXRnVygfvGj/IiLtIqTbdQY4nq/Z0l7P0eymYjlp0xgSgWJHRByeaO/emb4Aj1 QGzWZKQYuELKB4R9CQ6yAINkrZ2qz8prbiFD2t7vSjKF9bvd7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCbG2ebGMKLkofm6J74Vxa9/YWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDk5YTUzMDUtNjQ4My0z ZjdjLWFhMjQtNmUzZTgwODg0NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbMUH9yhthiwOdBN/wV0F7NhebDNPBXFd9ysqBKt9vwr+GFA/6VTHCZ iLWtPCItLTP0n2w2zFgT4VqCx5qmJgkWeq1ySF8KiWQ71o1APwz4e/RiLqCzh3NL 8y+a6jftQ2bnNv0vI9XnFnp3h6hlEp0cX8vq6nlSx/9jUupLntR6q+5v6nmEDIzc ITd83zktJevKyyNtcJ0b7x9apfUCSv+BnZVj1uryzzxFw+kMJncEUFeAaO/wug78 vxNHZyhheBbnuZhdH1gzECAP0OjYvlaMdt1tdiBVy6V54X2zwzru+DM4dT9d2t6t DtO8oMbO9aJhezcH+A0d0uG3jJonGJg= -----END CERTIFICATE-----Generated at Sat Jun 7 00:22:27 2025 by rpki-client