$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa File: f934d4a4-fde5-3e78-b53a-cc71da69f923.roa (raw, json) Hash identifier: 1isz45VNXKdgVjq1DDU9dAu/fp2x9zkDb3VMXfFaf0M= Subject key identifier: EA:FE:B1:C6:CC:DB:CC:48:E4:72:6C:C0:62:33:9E:5B:C4:A6:EF:D0 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849631EC4E9432129D7E1BDCF00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 203 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c4:e9:43:21:29:d7:e1:bd:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=91bd0aaf-70eb-4bf5-be71-eef6d7c7487c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:e1:c1:93:55:59:bb:56:78:f6:f5:a4:6f: 42:93:8e:78:8d:70:2f:ed:c2:bd:e5:c8:98:b2:b3: 40:e4:b1:c9:6d:c7:d8:7f:11:e6:a5:40:ab:e6:f1: e8:d1:3c:48:21:a8:d1:7f:62:21:b1:92:ae:f9:b0: 04:03:e3:81:f2:c1:3a:90:0f:bd:d8:49:90:d1:46: 00:7e:0b:01:5f:b1:11:34:ad:f1:ec:f8:40:2f:6d: 22:81:2d:78:9a:15:2f:d0:f0:d3:cc:db:0a:93:47: 27:ca:92:e6:4d:5c:d6:aa:21:46:60:21:67:22:3e: 6c:0b:8e:3c:5a:f5:5a:55:7e:68:8f:c0:63:0e:a7: 73:aa:75:4b:f4:c8:6f:53:4f:db:30:86:92:e7:28: ba:75:1d:61:3b:ca:23:dd:f8:af:1b:9b:1f:7c:9a: 16:b7:01:f3:a6:b0:01:6b:2b:a8:9b:17:00:16:0e: 33:18:2a:e3:40:7a:28:3b:58:70:9e:d8:6f:4c:58: e4:78:43:53:2d:d6:31:10:ca:94:9d:b7:de:a5:ab: 5f:15:1d:9f:54:7c:19:82:e2:43:73:d3:14:b4:54: 0c:6a:70:07:bc:7d:d8:e9:25:e0:cf:d2:a2:aa:15: b4:69:2f:4f:39:40:50:3d:a5:f6:73:8a:94:4e:41: 55:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FE:B1:C6:CC:DB:CC:48:E4:72:6C:C0:62:33:9E:5B:C4:A6:EF:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:63:d1:1a:80:d4:95:b7:ff:77:2c:c1:3c:be:73:1d:ce:da: c5:ed:21:88:49:a8:5f:5f:54:d7:f2:7f:89:dd:5a:54:a8:65: 9a:ab:48:aa:01:02:6e:7c:a6:9d:08:44:06:90:b0:51:d1:f9: a1:8f:03:17:3f:54:75:0d:d8:ba:ed:6e:93:3d:c7:8e:25:92: dd:40:77:b2:12:a6:7b:9b:2f:89:ef:0d:7f:e1:cd:61:8d:89: 18:55:d0:ff:27:bd:25:80:00:6b:e5:4e:55:9e:e0:d4:f0:97: 66:39:a9:2f:47:9d:70:89:c5:08:b0:16:9a:9c:f8:63:8c:f0: 68:17:c9:24:e1:f9:f2:4e:51:7b:d8:5b:f0:b8:ad:6b:ac:4b: 2b:be:7e:61:54:97:6b:4b:e0:8c:25:61:82:62:95:ec:34:e5: a4:88:93:bc:a7:6d:49:7d:6d:68:97:d7:9d:4c:5a:b1:4c:fb: 1b:22:2d:29:3b:27:ad:6d:07:2e:4b:8c:cb:46:0a:59:54:45: 1b:a6:89:ca:d8:56:5e:8d:9a:8c:75:37:ea:a4:0c:ea:98:ab: 86:bc:10:64:0d:3c:62:82:44:a6:3e:29:38:0a:57:24:69:40: eb:6c:4c:29:0e:37:02:0e:19:3f:40:67:9a:9e:74:d9:c2:18: 6b:a3:59:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsTpQyEp1+G9zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk OTFiZDBhYWYtNzBlYi00YmY1LWJlNzEtZWVmNmQ3Yzc0ODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGnhwZNVWbtWePb1pG9Ck454jXAv7cK95ciY srNA5LHJbcfYfxHmpUCr5vHo0TxIIajRf2IhsZKu+bAEA+OB8sE6kA+92EmQ0UYA fgsBX7ERNK3x7PhAL20igS14mhUv0PDTzNsKk0cnypLmTVzWqiFGYCFnIj5sC448 WvVaVX5oj8BjDqdzqnVL9MhvU0/bMIaS5yi6dR1hO8oj3fivG5sffJoWtwHzprAB ayuomxcAFg4zGCrjQHooO1hwnthvTFjkeENTLdYxEMqUnbfepatfFR2fVHwZguJD c9MUtFQManAHvH3Y6SXgz9KiqhW0aS9POUBQPaX2c4qUTkFVIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOr+scbM28xI5HJswGIznlvEpu/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjkzNGQ0YTQtZmRlNS0z ZTc4LWI1M2EtY2M3MWRhNjlmOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5j0RqA1JW3/3cswTy+cx3O2sXtIYhJqF9fVNfyf4ndWlSoZZqrSKoB Am58pp0IRAaQsFHR+aGPAxc/VHUN2LrtbpM9x44lkt1Ad7ISpnubL4nvDX/hzWGN iRhV0P8nvSWAAGvlTlWe4NTwl2Y5qS9HnXCJxQiwFpqc+GOM8GgXySTh+fJOUXvY W/C4rWusSyu+fmFUl2tL4IwlYYJilew05aSIk7ynbUl9bWiX151MWrFM+xsiLSk7 J61tBy5LjMtGCllURRumicrYVl6Nmox1N+qkDOqYq4a8EGQNPGKCRKY+KTgKVyRp QOtsTCkONwIOGT9AZ5qedNnCGGujWRQ= -----END CERTIFICATE-----Generated at Sat Apr 12 00:14:49 2025 by rpki-client