$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa File: 1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa (raw, json) Hash identifier: 979++94GBxA1JBnUJTUlfY6axDR67FSLWj7hrRwYVFo= Subject key identifier: 9E:FF:FE:45:EC:DB:9C:CD:E5:7E:53:3A:1E:1F:84:98:5E:03:E9:40 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849631EC525722A4BBAC9910F80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 3356 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c5:25:72:2a:4b:ba:c9:91:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=2267d305-f123-4771-a5be-213e2ea50017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:99:64:1f:c2:39:76:3b:88:a8:e4:7e:23:8b: ec:a2:af:6a:6e:95:47:93:9b:a2:9f:ae:88:60:fc: d1:f9:91:cf:f3:dc:47:1a:4c:1f:83:8a:95:e5:a8: 30:a7:93:ba:d1:01:2b:21:8d:45:6b:e8:7c:17:76: 82:af:83:70:e9:e9:11:b4:51:32:99:17:63:87:48: fe:bf:53:00:f6:c5:25:c5:4d:53:23:35:04:77:c3: d7:c3:25:a1:25:91:b1:4f:ca:f5:14:c5:cc:77:02: af:05:8a:25:69:7d:05:0d:c3:4d:72:18:5c:00:f7: da:1f:c9:92:0a:e2:3c:30:5c:f8:d0:bb:a1:69:44: 2d:ee:7c:44:c2:ad:a0:03:2e:31:6c:84:bb:9c:04: bc:dd:80:cd:b1:17:22:58:67:c9:6e:0a:75:94:6e: a3:b7:96:81:fa:30:84:c2:c6:8c:da:cf:7f:3d:70: d0:74:31:c2:c8:b0:92:fa:9e:73:4e:70:5e:63:b4: b3:ba:cd:70:89:59:9d:93:4f:9a:14:10:5e:9a:ac: 75:49:3c:01:89:d1:26:04:a1:00:f6:8a:7b:c6:cb: 9d:de:7b:7e:17:8a:f3:de:bb:f6:57:8e:7b:ef:e2: af:c5:b0:c9:d5:dd:21:52:b0:f7:9b:d4:65:5d:6a: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FF:FE:45:EC:DB:9C:CD:E5:7E:53:3A:1E:1F:84:98:5E:03:E9:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d4:65:dc:36:d2:8d:90:54:3e:6c:f6:53:5f:74:5e:62:16: 3f:06:5a:1f:5f:ee:5a:1f:36:b3:3f:7a:03:7b:51:e9:54:88: e9:4c:41:c8:05:68:7f:b4:5a:44:2c:99:97:50:41:01:26:d0: a1:f2:c3:31:c2:22:9e:62:50:65:09:b8:f8:0d:cd:3d:6b:d6: 7d:3c:e6:ef:b3:3f:e8:38:42:4d:74:53:51:fd:18:f1:af:e6: f7:bb:a5:c2:2a:fc:d0:ae:96:c5:d3:76:61:a1:8d:bd:30:39: 17:cb:0f:68:60:d7:4b:11:24:09:b1:9a:03:24:2c:eb:9e:47: 70:b4:7e:ef:bc:42:e6:10:56:a4:e0:4d:b8:b7:17:23:20:08: 87:b1:45:77:7c:ea:0b:77:76:b3:d4:d7:a8:05:0c:a9:7c:72: c0:41:43:af:49:2a:4e:9d:f3:7d:02:11:c9:05:b3:9d:eb:eb: 02:bf:2a:70:11:13:fe:5d:dc:db:5c:c6:12:53:08:75:b2:ea: 60:ca:7f:69:a5:82:8c:d1:18:b6:01:d3:04:53:ea:cc:cc:f4: 4c:3f:c9:16:ec:b2:1c:a0:c5:d3:d5:47:2c:94:57:85:0a:1a: a3:84:55:4c:7a:22:ed:ee:59:48:13:e6:04:ec:d1:04:82:7a: 34:ac:a9:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsUlcipLusmRD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk MjI2N2QzMDUtZjEyMy00NzcxLWE1YmUtMjEzZTJlYTUwMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5lkH8I5djuIqOR+I4vsoq9qbpVHk5uin66I YPzR+ZHP89xHGkwfg4qV5agwp5O60QErIY1Fa+h8F3aCr4Nw6ekRtFEymRdjh0j+ v1MA9sUlxU1TIzUEd8PXwyWhJZGxT8r1FMXMdwKvBYolaX0FDcNNchhcAPfaH8mS CuI8MFz40LuhaUQt7nxEwq2gAy4xbIS7nAS83YDNsRciWGfJbgp1lG6jt5aB+jCE wsaM2s9/PXDQdDHCyLCS+p5zTnBeY7Szus1wiVmdk0+aFBBemqx1STwBidEmBKEA 9op7xsud3nt+F4rz3rv2V4577+KvxbDJ1d0hUrD3m9RlXWoobwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7//kXs25zN5X5TOh4fhJheA+lAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMWE1NDRhMjEtZjljZC0z MjQ3LWFiMWQtMDI4ZDEzM2MzZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbUZdw20o2QVD5s9lNfdF5iFj8GWh9f7lofNrM/egN7UelUiOlMQcgF aH+0WkQsmZdQQQEm0KHywzHCIp5iUGUJuPgNzT1r1n085u+zP+g4Qk10U1H9GPGv 5ve7pcIq/NCulsXTdmGhjb0wORfLD2hg10sRJAmxmgMkLOueR3C0fu+8QuYQVqTg Tbi3FyMgCIexRXd86gt3drPU16gFDKl8csBBQ69JKk6d830CEckFs53r6wK/KnAR E/5d3NtcxhJTCHWy6mDKf2mlgozRGLYB0wRT6szM9Ew/yRbsshygxdPVRyyUV4UK GqOEVUx6Iu3uWUgT5gTs0QSCejSsqU4= -----END CERTIFICATE-----Generated at Sat Apr 26 20:25:36 2025 by rpki-client