$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/196e1976-14cd-3c8e-933a-dac31649a3e1.roa File: 196e1976-14cd-3c8e-933a-dac31649a3e1.roa (raw, json) Hash identifier: CIAyBD4/RsUhEqA+BOI01VRDPB8qgV1nxZWaMQWiQCU= Subject key identifier: 76:65:97:37:AA:F1:71:47:52:39:09:CB:E4:15:EC:7D:7A:6B:3F:B6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584975445D52DC43A6250DA75100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/196e1976-14cd-3c8e-933a-dac31649a3e1.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 203 IP address blocks: 20.137.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:5d:52:dc:43:a6:25:0d:a7:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=352b0cbe-b3df-4e5f-895b-af59ae1eee1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:ba:5b:39:f9:c0:17:ae:6f:d8:73:f5:82: 01:4f:c1:6b:b0:bc:1b:bf:2c:d3:56:6c:59:16:73: 17:c5:35:98:1c:96:dd:e8:9f:82:aa:8e:b2:57:cf: d4:64:38:e6:84:5d:a3:e7:f5:b7:ea:e8:2c:db:5d: 60:42:cd:92:3a:a3:b3:48:12:85:32:01:03:57:5a: b8:66:2e:49:a8:0a:67:68:8e:42:7b:a5:ee:a5:0e: 47:3f:c1:88:f2:42:79:a0:d1:fd:15:51:72:44:84: eb:0c:87:b5:1e:d6:5e:cd:25:94:7f:7a:2e:b8:1e: e3:82:e8:41:ce:ed:aa:00:74:9e:5a:6e:73:59:62: c6:68:28:b6:88:d3:21:16:b8:bb:a5:c8:b2:cf:ca: c8:24:99:00:47:b7:25:ed:1f:c3:ef:c3:6a:2a:41: 78:cc:1a:bf:39:9d:28:34:5b:5b:80:30:70:40:a1: aa:90:52:b3:fb:59:8f:22:31:9d:25:20:17:bc:c3: 6b:10:aa:ac:3f:79:26:05:52:a0:09:60:51:58:bb: b4:1f:04:3b:61:40:60:0b:f8:7e:ee:cc:ba:e8:47: e2:dd:26:78:93:54:9a:1c:a2:36:72:65:dd:91:da: 14:5c:23:e3:ce:90:2d:92:51:80:f1:09:d2:d6:4f: 5c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:65:97:37:AA:F1:71:47:52:39:09:CB:E4:15:EC:7D:7A:6B:3F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/196e1976-14cd-3c8e-933a-dac31649a3e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:bc:3a:71:38:f4:4b:ea:8b:bd:7b:a9:b4:fd:1d:1c:73:8e: 17:cb:58:7b:47:f0:6f:35:f7:83:40:b4:1c:f8:ca:d4:f6:4d: 1c:7c:e6:9b:a0:d2:56:ed:5e:f3:55:05:7e:77:6b:37:0d:5b: 06:ab:93:75:a0:c7:23:63:e4:0a:3f:98:82:7b:8e:b7:be:49: 9d:c7:f7:54:a2:e9:03:55:c0:05:6a:1e:a0:ae:5f:7b:a3:d6: a4:ff:4b:f3:c1:08:c0:5c:8c:7a:8a:12:a9:1a:47:de:26:e3: 45:26:b2:2c:e1:1d:e3:69:90:2e:0a:72:c3:6d:d1:a4:02:ed: 07:2d:71:8a:5c:04:34:61:ca:05:d6:0e:0e:44:d4:35:60:ae: b0:1f:ff:21:9f:f8:64:38:b7:e9:ca:05:79:e6:e5:a8:29:55: af:85:4f:c1:3c:52:b5:5c:d9:71:69:3b:6b:b9:c6:c6:31:7b: 69:34:2b:80:62:f4:fb:c2:7d:c6:2d:3d:8a:76:f9:8d:15:8f: 80:b6:6e:42:50:0c:19:63:b5:79:fd:64:d5:bc:2c:c9:1a:36: 1c:52:bf:f6:f2:44:0e:7b:30:4e:11:a9:29:04:3e:cf:fd:33: a6:aa:3f:02:13:c7:9b:e7:bc:b6:ad:63:2c:ee:e8:89:3f:ce: 07:b9:15:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RF1S3EOmJQ2nUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk MzUyYjBjYmUtYjNkZi00ZTVmLTg5NWItYWY1OWFlMWVlZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOG6Wzn5wBeub9hz9YIBT8FrsLwbvyzTVmxZ FnMXxTWYHJbd6J+Cqo6yV8/UZDjmhF2j5/W36ugs211gQs2SOqOzSBKFMgEDV1q4 Zi5JqApnaI5Ce6XupQ5HP8GI8kJ5oNH9FVFyRITrDIe1HtZezSWUf3ouuB7jguhB zu2qAHSeWm5zWWLGaCi2iNMhFri7pciyz8rIJJkAR7cl7R/D78NqKkF4zBq/OZ0o NFtbgDBwQKGqkFKz+1mPIjGdJSAXvMNrEKqsP3kmBVKgCWBRWLu0HwQ7YUBgC/h+ 7sy66Efi3SZ4k1SaHKI2cmXdkdoUXCPjzpAtklGA8QnS1k9c8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZllzeq8XFHUjkJy+QV7H16az+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTk2ZTE5NzYtMTRjZC0z YzhlLTkzM2EtZGFjMzE2NDlhM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI68OnE49Evqi717qbT9HRxzjhfLWHtH8G8194NAtBz4ytT2TRx85pug 0lbtXvNVBX53azcNWwark3WgxyNj5Ao/mIJ7jre+SZ3H91Si6QNVwAVqHqCuX3uj 1qT/S/PBCMBcjHqKEqkaR94m40UmsizhHeNpkC4KcsNt0aQC7QctcYpcBDRhygXW Dg5E1DVgrrAf/yGf+GQ4t+nKBXnm5agpVa+FT8E8UrVc2XFpO2u5xsYxe2k0K4Bi 9PvCfcYtPYp2+Y0Vj4C2bkJQDBljtXn9ZNW8LMkaNhxSv/byRA57ME4RqSkEPs/9 M6aqPwITx5vnvLatYyzu6Ik/zge5FTU= -----END CERTIFICATE-----Generated at Sat Apr 26 20:28:11 2025 by rpki-client