$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa File: 18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa (raw, json) Hash identifier: NYqX/0zdZm0wGc5vpdMB+FlMVdE7yEP2HF7jVP5j4Oo= Subject key identifier: 37:55:5F:EF:C3:45:A0:F0:12:F6:B5:2C:0A:CB:AB:24:12:4B:22:8B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849631EC4F982BB1E525E2B7AE0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 203 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c4:f9:82:bb:1e:52:5e:2b:7a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=a4ce72a7-1d82-4eab-ad17-a7fc432012cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:cb:2a:45:ff:09:8f:c6:5d:99:15:7c:64: b3:98:02:48:4e:fa:48:89:b9:48:4f:78:27:92:59: ba:85:8d:82:06:06:e4:89:23:2b:57:b9:0b:31:d2: f9:4a:ef:0e:3f:46:0d:14:76:c1:93:f7:7b:de:f4: b4:32:f3:f0:78:57:d9:43:11:9d:74:e8:b6:b1:1a: f4:74:e3:e3:94:27:17:23:34:92:4d:57:b9:96:a0: 29:12:85:cf:e2:ca:cf:a1:ba:ff:8e:8c:7d:a0:21: 17:0f:58:b5:8f:c5:e8:37:33:f1:6c:39:0b:d9:59: 1e:9f:54:db:34:b6:8f:d6:d3:43:31:c9:0a:32:8c: 73:be:d1:54:90:ef:21:01:e5:29:52:11:6e:42:04: 42:46:95:32:50:b3:f3:21:d5:0f:38:56:d1:84:90: aa:b0:65:11:2b:54:ba:86:36:81:f7:76:a2:75:22: 6d:0f:4e:69:2c:b2:4d:de:ae:95:0a:59:83:5f:3b: 03:bd:ec:6c:15:9e:23:69:f6:49:b5:15:d4:6c:ce: 40:96:3e:b8:4b:0a:5d:cf:10:db:b4:31:52:43:52: b8:e7:a9:f0:b2:f9:99:e9:5e:ec:e4:72:bf:63:41: 4c:d6:33:d3:d2:e2:9a:7e:5e:2b:5f:9d:de:82:61: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:55:5F:EF:C3:45:A0:F0:12:F6:B5:2C:0A:CB:AB:24:12:4B:22:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a0:fa:30:99:ab:d8:9b:2b:b9:7f:23:e9:fa:6d:f2:aa:50: 5f:68:2f:4d:8b:4f:d6:b0:a2:01:fd:79:bb:5b:f8:57:d2:e0: 16:81:1e:c7:8a:a8:99:cb:ad:83:6a:53:9c:6b:11:60:98:ec: 15:5f:71:70:58:43:9f:1b:6d:aa:17:c8:a2:dd:27:1a:5e:a4: b9:d1:3e:9d:77:90:21:26:6c:5b:8b:01:f6:27:8c:48:c4:f4: 26:72:d4:68:bf:1b:c9:b7:1d:dd:2b:0a:e4:6b:9b:e1:aa:e6: 7e:de:1e:d6:12:a5:05:2d:e3:dc:0e:47:b6:31:34:63:58:bd: 2e:a0:52:b6:9b:30:d7:a4:c7:af:20:06:cd:82:b0:c7:8d:82: fa:62:4b:b5:68:35:5e:52:e7:4f:c5:a5:ed:3e:27:30:85:06: 00:c8:5f:70:5c:07:a5:ba:bb:45:61:ef:8b:20:39:3b:ee:85: a3:c5:a6:10:5d:73:ec:05:db:c3:ee:c3:43:b2:1a:b1:5e:14: b4:d1:1f:ba:08:3f:89:a6:8e:63:b5:eb:61:08:c3:1a:06:31: 5f:62:f4:61:ef:47:9b:a7:0f:dd:2c:c9:fc:b2:5a:5f:fe:49: 3e:e3:de:f2:14:b5:1f:21:6a:20:76:19:24:b5:1d:2d:be:2b: 63:d0:73:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsT5grseUl4reuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk YTRjZTcyYTctMWQ4Mi00ZWFiLWFkMTctYTdmYzQzMjAxMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohDLKkX/CY/GXZkVfGSzmAJITvpIiblIT3gn klm6hY2CBgbkiSMrV7kLMdL5Su8OP0YNFHbBk/d73vS0MvPweFfZQxGddOi2sRr0 dOPjlCcXIzSSTVe5lqApEoXP4srPobr/jox9oCEXD1i1j8XoNzPxbDkL2Vken1Tb NLaP1tNDMckKMoxzvtFUkO8hAeUpUhFuQgRCRpUyULPzIdUPOFbRhJCqsGURK1S6 hjaB93aidSJtD05pLLJN3q6VClmDXzsDvexsFZ4jafZJtRXUbM5Alj64SwpdzxDb tDFSQ1K456nwsvmZ6V7s5HK/Y0FM1jPT0uKafl4rX53egmEFuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdVX+/DRaDwEva1LArLqyQSSyKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTgwNDhiM2QtOTg5MS0z N2ZkLTliM2UtYTk3Y2ZmYzg2YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHag+jCZq9ibK7l/I+n6bfKqUF9oL02LT9awogH9ebtb+FfS4BaBHseK qJnLrYNqU5xrEWCY7BVfcXBYQ58bbaoXyKLdJxpepLnRPp13kCEmbFuLAfYnjEjE 9CZy1Gi/G8m3Hd0rCuRrm+Gq5n7eHtYSpQUt49wOR7YxNGNYvS6gUrabMNekx68g Bs2CsMeNgvpiS7VoNV5S50/Fpe0+JzCFBgDIX3BcB6W6u0Vh74sgOTvuhaPFphBd c+wF28Puw0OyGrFeFLTRH7oIP4mmjmO162EIwxoGMV9i9GHvR5unD90syfyyWl/+ ST7j3vIUtR8haiB2GSS1HS2+K2PQc48= -----END CERTIFICATE-----Generated at Sat Apr 26 19:29:41 2025 by rpki-client