$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa File: 0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa (raw, json) Hash identifier: KZVgY3Dt2uf17HFiDGzSfQ3gSuQypP5dk0+owQTms9k= Subject key identifier: F1:E2:0F:6E:0C:35:8F:1B:A0:B9:13:79:36:A6:99:36:87:F1:E6:11 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858499294A54543A10F3DCAD53910 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 202 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a5:45:43:a1:0f:3d:ca:d5:39:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=dfd9dc78-c93e-4aad-a613-22f103de77d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e1:53:71:03:66:e2:b7:1f:9e:5b:7f:cb:13: 56:e2:1c:61:70:55:f6:12:13:d1:18:25:39:5f:1f: 25:06:e1:e3:b0:50:1d:2c:06:e3:93:51:e8:33:06: b1:62:74:b1:06:c9:1e:65:d1:d7:7e:52:b3:82:fc: 15:64:8e:48:2e:7e:2b:f3:1a:11:d0:27:8c:85:42: 06:ce:a1:f4:47:44:ed:a0:a3:1c:ad:ef:83:f4:33: 84:2b:2e:e8:a1:19:4c:8c:33:13:da:2c:82:9f:fe: 29:5d:de:65:91:f7:d5:c1:7f:8c:93:fc:72:dd:6a: 5d:05:88:8e:31:ff:d3:2a:65:b1:66:77:49:21:72: cc:b5:03:5f:2a:9c:c0:61:d3:7a:92:3a:97:27:b0: 2c:a4:8e:a5:6f:3a:92:95:13:78:f1:98:0c:fc:29: 85:c3:7f:8d:1d:fa:ba:bb:e6:17:22:d0:10:54:28: 15:2a:37:1c:79:ad:88:70:2c:6d:fb:ee:d2:8c:dd: 08:7e:5e:8d:88:2d:b8:5b:2d:31:4b:f9:ce:e3:57: f6:52:73:98:12:8b:62:57:12:8a:ef:4f:79:1f:a3: a7:78:18:bd:1e:0b:7d:e4:e1:56:0d:8e:84:f9:d4: 34:a0:06:a2:5b:09:64:28:1d:34:78:c7:5c:fc:cf: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E2:0F:6E:0C:35:8F:1B:A0:B9:13:79:36:A6:99:36:87:F1:E6:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:24:d5:45:05:16:48:7a:5c:88:f8:ad:28:a9:4c:9a:a7:d3: 77:32:64:49:de:72:94:68:88:6e:3c:81:32:da:eb:56:ed:4c: 35:6d:80:7b:84:be:5f:30:dc:12:69:1a:d8:77:76:32:15:a1: f8:ab:7e:68:a7:3c:17:bb:7a:1b:24:16:86:2e:44:38:98:a7: 41:ff:8d:18:a4:ee:9c:b5:b4:01:05:e8:b6:78:b5:2d:c2:ce: 12:7d:43:90:3b:10:eb:ff:6f:52:e1:b1:e5:f4:35:03:df:31: 09:da:56:a1:e2:72:27:11:1f:1e:5c:13:07:f2:3f:66:e1:39: 55:1f:fa:06:26:ce:42:53:b3:ad:21:f4:39:51:41:29:62:50: 4e:ad:5f:ef:f8:4a:19:05:95:65:02:51:7c:f3:d1:89:71:46: c4:42:48:09:69:bb:65:ef:59:12:16:23:27:29:e3:33:1d:7c: 14:63:d7:c5:d0:a4:78:58:25:7a:cf:12:73:7f:92:f2:c5:7e: c1:51:51:a9:0b:ed:91:f9:5c:71:43:4f:b1:91:54:ea:a9:f4: d9:66:e0:f4:a1:34:5f:1f:f3:47:44:af:a9:f5:35:2d:f4:bf: 17:51:10:dd:b0:1c:39:e0:14:84:2f:ab:a9:82:1b:7c:44:67: b2:a1:9b:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKVFQ6EPPcrVORAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk ZGZkOWRjNzgtYzkzZS00YWFkLWE2MTMtMjJmMTAzZGU3N2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeFTcQNm4rcfnlt/yxNW4hxhcFX2EhPRGCU5 Xx8lBuHjsFAdLAbjk1HoMwaxYnSxBskeZdHXflKzgvwVZI5ILn4r8xoR0CeMhUIG zqH0R0TtoKMcre+D9DOEKy7ooRlMjDMT2iyCn/4pXd5lkffVwX+Mk/xy3WpdBYiO Mf/TKmWxZndJIXLMtQNfKpzAYdN6kjqXJ7AspI6lbzqSlRN48ZgM/CmFw3+NHfq6 u+YXItAQVCgVKjccea2IcCxt++7SjN0Ifl6NiC24Wy0xS/nO41f2UnOYEotiVxKK 7095H6OneBi9Hgt95OFWDY6E+dQ0oAaiWwlkKB00eMdc/M90IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHiD24MNY8boLkTeTammTaH8eYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGI1YjVmMDMtODFmMy0z YzgzLThiZWYtNDM1MDNkMjFjYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsk1UUFFkh6XIj4rSipTJqn03cyZEnecpRoiG48gTLa61btTDVtgHuE vl8w3BJpGth3djIVofirfminPBe7ehskFoYuRDiYp0H/jRik7py1tAEF6LZ4tS3C zhJ9Q5A7EOv/b1LhseX0NQPfMQnaVqHicicRHx5cEwfyP2bhOVUf+gYmzkJTs60h 9DlRQSliUE6tX+/4ShkFlWUCUXzz0YlxRsRCSAlpu2XvWRIWIycp4zMdfBRj18XQ pHhYJXrPEnN/kvLFfsFRUakL7ZH5XHFDT7GRVOqp9Nlm4PShNF8f80dEr6n1NS30 vxdREN2wHDngFIQvq6mCG3xEZ7Khm+4= -----END CERTIFICATE-----Generated at Sun Apr 27 05:45:12 2025 by rpki-client