$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20055f0f-2b95-320b-ae9d-738a39ad46e6.roa File: 20055f0f-2b95-320b-ae9d-738a39ad46e6.roa (raw, json) Hash identifier: XmQ1zBZRHb5EuNNeFcJB4i8gc4DxwJVdRLYElySxY6A= Subject key identifier: 0F:E8:50:BB:31:F4:6E:E7:D2:7B:84:D1:DA:8C:29:64:60:35:AE:73 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584975445D16B60B74DF5A34B480 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20055f0f-2b95-320b-ae9d-738a39ad46e6.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 203 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:5d:16:b6:0b:74:df:5a:34:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=891b89c6-268b-48dd-ba8c-a795860e85da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:c1:dc:45:8b:bd:20:49:ff:5d:60:f0:c9: 91:22:16:38:b0:1e:53:d8:cb:96:aa:9a:09:cf:9e: 24:e2:e8:cc:19:9d:b3:85:93:3e:19:1a:c5:ff:8e: 02:d1:5f:d5:82:f8:d2:c3:ab:db:86:12:2e:22:41: 15:70:c9:e8:1a:b5:06:d2:3e:3f:44:3a:95:93:43: f9:9e:3f:ce:8a:e7:14:ec:84:86:ec:9e:77:27:75: 4f:8a:c7:a9:f9:b7:cb:f9:71:b4:5c:f1:43:60:38: df:da:2e:5b:10:2a:48:61:6c:20:2e:5b:42:63:d1: cd:c7:25:6c:82:38:8c:82:98:25:2f:d2:dc:b1:7e: ff:30:2f:1f:33:ef:4e:06:d5:e0:34:64:f1:6c:cf: 59:62:5c:e4:90:5e:4e:29:94:57:00:c2:43:be:a0: 42:f6:08:9d:56:0d:e4:f5:d7:6b:41:c3:c5:82:f4: fb:37:58:a8:12:80:d1:29:90:87:53:28:9b:52:77: 51:e0:a7:5e:31:5c:40:04:c6:80:83:b8:40:83:5d: 7c:84:db:d6:e7:fa:8b:c1:74:48:a3:6c:47:14:cf: 78:ff:0c:ae:fd:d1:d3:0c:fd:74:d8:c4:8a:f8:43: 78:2a:6c:22:4b:71:94:f2:e0:db:56:c4:87:68:16: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E8:50:BB:31:F4:6E:E7:D2:7B:84:D1:DA:8C:29:64:60:35:AE:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20055f0f-2b95-320b-ae9d-738a39ad46e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:15:7a:0d:0c:60:34:83:b4:e6:e0:fb:af:71:8e:0f:e4:0f: 2b:bd:43:c4:2e:b5:1b:8c:37:40:90:b8:8e:4f:74:b4:ab:b5: 61:eb:05:12:3a:38:62:60:aa:5c:28:f1:1b:32:f8:68:8a:61: a6:cd:97:86:a1:fc:8d:e9:7a:34:7b:12:3a:3c:25:bd:a5:c5: 41:b4:91:70:d2:73:f9:6b:07:10:8f:16:c6:2a:a1:3a:26:d1: 84:a2:5f:81:85:50:2f:c7:39:de:b6:0b:b0:13:2c:72:b7:c3: e2:a1:d5:5c:87:ea:11:47:1d:57:4a:3c:fb:ff:7c:88:13:a5: 87:af:40:46:be:09:19:a2:44:91:79:a4:45:55:7b:af:6f:68: e6:f9:fb:b2:66:73:ef:fc:6f:c6:33:3c:26:a8:23:f5:38:3a: 00:13:a0:44:21:35:29:59:a8:97:37:06:82:4d:8f:32:7d:65: ec:e6:50:81:0e:90:5b:c4:e1:39:f7:c4:85:63:ac:c5:eb:7b: cb:e1:6c:f6:d2:1e:cb:a3:91:e5:5f:df:0f:32:02:e8:10:9e: ac:8e:6b:3a:14:04:b8:c9:a5:48:9e:dc:06:cf:9d:b2:ab:0c: 52:62:27:89:0b:10:74:4c:2a:48:98:5d:a6:ac:b3:49:95:d4: 30:be:58:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RF0Wtgt031o0tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk ODkxYjg5YzYtMjY4Yi00OGRkLWJhOGMtYTc5NTg2MGU4NWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWzB3EWLvSBJ/11g8MmRIhY4sB5T2MuWqpoJ z54k4ujMGZ2zhZM+GRrF/44C0V/VgvjSw6vbhhIuIkEVcMnoGrUG0j4/RDqVk0P5 nj/OiucU7ISG7J53J3VPisep+bfL+XG0XPFDYDjf2i5bECpIYWwgLltCY9HNxyVs gjiMgpglL9LcsX7/MC8fM+9OBtXgNGTxbM9ZYlzkkF5OKZRXAMJDvqBC9gidVg3k 9ddrQcPFgvT7N1ioEoDRKZCHUyibUndR4KdeMVxABMaAg7hAg118hNvW5/qLwXRI o2xHFM94/wyu/dHTDP102MSK+EN4KmwiS3GU8uDbVsSHaBZqcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/oULsx9G7n0nuE0dqMKWRgNa5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjAwNTVmMGYtMmI5NS0z MjBiLWFlOWQtNzM4YTM5YWQ0NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwVeg0MYDSDtObg+69xjg/kDyu9Q8QutRuMN0CQuI5PdLSrtWHrBRI6 OGJgqlwo8Rsy+GiKYabNl4ah/I3pejR7Ejo8Jb2lxUG0kXDSc/lrBxCPFsYqoTom 0YSiX4GFUC/HOd62C7ATLHK3w+Kh1VyH6hFHHVdKPPv/fIgTpYevQEa+CRmiRJF5 pEVVe69vaOb5+7Jmc+/8b8YzPCaoI/U4OgAToEQhNSlZqJc3BoJNjzJ9ZezmUIEO kFvE4Tn3xIVjrMXre8vhbPbSHsujkeVf3w8yAugQnqyOazoUBLjJpUie3AbPnbKr DFJiJ4kLEHRMKkiYXaass0mV1DC+WIY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:35 2025 by rpki-client