$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/eb108983-8253-381c-b5b2-259768c26b5a.roa File: eb108983-8253-381c-b5b2-259768c26b5a.roa (raw, json) Hash identifier: uOV2VErhhw0DH3YR35bOXQJ85HH/OzFLkOZ72JV+7hk= Subject key identifier: CA:55:07:84:B2:3F:97:1E:5B:7D:42:19:16:7B:65:D5:B0:C4:4C:B2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE95C51D98CE76FD0CBA60 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/eb108983-8253-381c-b5b2-259768c26b5a.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 20.148.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:95:c5:1d:98:ce:76:fd:0c:ba:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f4e99a3c-70ce-4302-9786-e09c3f782825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:04:37:c9:95:f1:5c:ee:cf:65:78:6f:48:58: df:80:73:16:2b:9a:cf:9a:d9:3e:30:e8:53:ba:2d: a6:76:ce:85:66:d8:bd:17:df:c9:e6:4e:96:c9:2d: 97:ee:9b:77:f8:d3:49:eb:a8:85:32:63:7e:92:f4: 43:5a:99:a5:1a:5a:02:59:8c:12:a4:96:2c:83:14: 7c:76:90:3a:95:1e:85:f8:5d:59:7a:e2:4c:47:c5: 4b:9d:39:9d:3a:f4:ef:34:29:b6:06:e6:27:56:3c: 78:3a:55:49:2f:c2:56:01:9a:c8:31:44:12:55:73: 4b:63:3c:aa:8a:4d:0f:e6:e8:48:ba:a5:55:5e:9d: 0e:90:36:d3:f4:00:64:f0:00:1b:31:ac:14:a6:aa: af:14:42:18:9e:9a:2a:b5:48:29:33:f4:5e:c3:2e: dd:28:34:77:25:5f:32:a4:e7:ff:38:7a:27:a6:f7: 63:b1:ef:a6:be:e1:5b:80:62:eb:b9:d4:46:07:e0: 68:a2:78:7a:b2:d1:ec:30:97:12:13:34:79:3e:08: 01:71:31:21:a3:4d:79:0f:c5:60:e2:21:2a:50:3d: 58:6d:ca:b8:52:1a:f8:9f:51:1f:e8:6a:11:8e:c2: eb:7c:81:a3:9c:8a:ae:a7:1c:7f:88:9f:e9:ca:a9: 23:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:55:07:84:B2:3F:97:1E:5B:7D:42:19:16:7B:65:D5:B0:C4:4C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/eb108983-8253-381c-b5b2-259768c26b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:94:31:76:c8:27:90:9a:db:cc:ec:46:18:ca:aa:82:2c:1e: 41:52:c2:b4:0c:9b:e4:58:3c:9e:69:3f:06:0a:d3:a0:dd:a2: 3b:b5:3d:6f:50:87:f8:9f:fc:15:e0:b8:da:cc:f4:89:32:ba: 19:69:7b:76:a1:e6:05:08:82:c2:99:d6:69:03:f1:83:89:0d: 65:3f:2b:8e:99:55:48:b7:30:1d:c7:68:f8:6e:cc:81:2c:24: d3:c4:74:75:1a:3e:7f:fd:9e:d3:64:60:9b:24:55:bc:56:66: 98:8c:6e:80:04:a7:9c:c3:9c:9d:62:42:20:e1:53:ad:f3:d5: 9b:3c:d1:ba:e3:ce:54:a7:83:d3:ef:59:bd:5a:dd:6d:7a:e2: c5:fd:59:ee:cb:dc:0b:28:e0:88:de:43:70:40:05:f0:15:e4: ac:d8:7c:eb:55:47:1d:14:8a:36:34:77:64:d5:52:df:82:0c: 4b:ef:75:b2:51:f3:4f:b7:df:27:19:1c:74:67:bb:3e:06:2c: e7:b8:7b:16:dc:0b:67:09:9e:6c:81:32:df:d2:25:c7:7b:c6: c3:79:3a:3d:6b:b6:cf:53:6f:95:77:39:a0:3b:1e:a9:16:53: 21:22:10:05:6e:66:63:ef:85:ad:4c:dc:b4:09:0a:a6:aa:d6: 85:f9:cc:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpXFHZjOdv0MumAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjRlOTlhM2MtNzBjZS00MzAyLTk3ODYtZTA5YzNmNzgyODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAQ3yZXxXO7PZXhvSFjfgHMWK5rPmtk+MOhT ui2mds6FZti9F9/J5k6WyS2X7pt3+NNJ66iFMmN+kvRDWpmlGloCWYwSpJYsgxR8 dpA6lR6F+F1ZeuJMR8VLnTmdOvTvNCm2BuYnVjx4OlVJL8JWAZrIMUQSVXNLYzyq ik0P5uhIuqVVXp0OkDbT9ABk8AAbMawUpqqvFEIYnpoqtUgpM/Rewy7dKDR3JV8y pOf/OHonpvdjse+mvuFbgGLrudRGB+Boonh6stHsMJcSEzR5PggBcTEho015D8Vg 4iEqUD1Ybcq4Uhr4n1Ef6GoRjsLrfIGjnIqupxx/iJ/pyqkjQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpVB4SyP5ceW31CGRZ7ZdWwxEyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZWIxMDg5ODMtODI1My0z ODFjLWI1YjItMjU5NzY4YzI2YjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiUMXbIJ5Ca28zsRhjKqoIsHkFSwrQMm+RYPJ5pPwYK06Ddoju1PW9Q h/if/BXguNrM9Ikyuhlpe3ah5gUIgsKZ1mkD8YOJDWU/K46ZVUi3MB3HaPhuzIEs JNPEdHUaPn/9ntNkYJskVbxWZpiMboAEp5zDnJ1iQiDhU63z1Zs80brjzlSng9Pv Wb1a3W164sX9We7L3Aso4IjeQ3BABfAV5KzYfOtVRx0UijY0d2TVUt+CDEvvdbJR 80+33ycZHHRnuz4GLOe4exbcC2cJnmyBMt/SJcd7xsN5Oj1rts9Tb5V3OaA7HqkW UyEiEAVuZmPvha1M3LQJCqaq1oX5zC8= -----END CERTIFICATE-----Generated at Fri Mar 14 10:46:11 2025 by rpki-client