$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa File: 21be8a54-9d15-3bcf-b328-06e1c263d460.roa (raw, json) Hash identifier: 5+Lh8ACOH1doKgXF/nAhnMupkQuAYdf/VstzU33jSlk= Subject key identifier: EE:E2:AD:33:D9:63:8F:BD:24:8C:96:1B:C4:3F:79:46:BB:67:BE:1F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858499294A53958884F405BF2E740 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 3356 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a5:39:58:88:4f:40:5b:f2:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=e9000a88-3f7b-4b10-8bcc-58a4d72f8876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:19:33:4b:3e:d3:b3:d2:6b:ce:c2:94:f2: 6f:d1:5f:c4:98:28:02:df:4f:c8:e0:b6:cc:5c:8d: 28:fc:a3:99:b4:aa:ee:95:a7:ec:27:7b:c7:96:ba: 30:08:4a:77:82:26:b4:cb:dc:70:9f:e6:b9:de:aa: 89:33:82:4f:1e:21:b5:ce:5d:7c:49:b3:3d:ed:89: d5:e0:bb:4c:00:9f:b4:05:1f:b0:43:c1:c6:b0:a6: 7d:8c:4e:c9:dd:b4:f4:84:70:cb:52:e9:ae:e7:12: b0:cf:9d:ab:d9:6a:6c:89:d2:46:03:47:0a:57:32: e7:cb:5d:96:46:03:ed:d8:6b:8e:c9:33:c0:9c:9f: 9e:ad:2c:84:a4:9b:aa:6f:7e:de:73:f7:bb:5b:59: 81:5c:0a:0b:51:4e:71:bf:cd:96:e0:46:58:d3:68: 4e:fa:61:8e:0f:83:ec:c4:10:bd:40:75:eb:15:92: 54:5e:33:91:8c:f9:90:d6:27:6f:6a:84:18:7d:6f: 89:62:3b:59:49:0d:ad:08:2e:43:78:02:ca:81:f9: 6c:2f:b5:07:ef:58:ff:3b:ee:71:84:82:15:4e:07: 45:7e:0c:71:8f:31:e7:9f:db:bf:98:00:be:31:5a: 28:a0:a3:02:92:79:3c:3f:cf:71:5f:80:52:8c:47: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E2:AD:33:D9:63:8F:BD:24:8C:96:1B:C4:3F:79:46:BB:67:BE:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:08:23:de:80:8d:38:d3:ba:fd:50:a9:fb:2a:a4:6a:77:37: 52:94:68:b8:8e:4d:cf:1a:af:b6:85:3b:60:bb:ca:70:40:99: 1d:4d:6b:29:21:28:a8:0a:d4:4a:4e:c7:3e:e6:bd:cb:42:39: 37:4f:81:f1:24:c5:2b:41:c8:4e:62:c3:82:07:47:82:e4:50: 39:15:b3:ed:36:87:73:cd:12:1c:8f:2d:b0:29:69:c9:5c:d2: 8e:60:b8:79:8c:e9:ab:25:6c:42:ce:5b:3f:92:be:0d:d0:3b: ac:cd:a2:89:a9:1b:67:3f:7f:a5:b3:56:6d:5a:cf:0a:77:8f: d2:25:cc:15:d2:41:00:d1:f5:4c:43:99:a5:bc:16:48:7a:5f: 1a:49:da:68:b2:0c:0d:d0:02:f5:a0:3b:63:43:d2:db:2e:f4: d7:7c:2f:2f:73:ca:c3:07:f4:cc:74:87:c6:82:c6:a6:d7:59: 2f:f1:19:07:8d:9f:c6:35:04:34:e3:29:33:79:ad:bd:09:7e: a2:ea:52:9e:6e:81:7f:e6:91:ed:0f:e9:21:b9:f3:5b:a5:99: f8:1c:c5:78:48:05:55:ce:ec:0a:a8:13:b1:cf:e4:74:56:88: dd:5e:21:67:0d:55:00:0b:1e:5c:3c:b1:a8:27:5f:aa:04:af: d6:19:24:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKU5WIhPQFvy50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk ZTkwMDBhODgtM2Y3Yi00YjEwLThiY2MtNThhNGQ3MmY4ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCQZM0s+07PSa87ClPJv0V/EmCgC30/I4LbM XI0o/KOZtKrulafsJ3vHlrowCEp3gia0y9xwn+a53qqJM4JPHiG1zl18SbM97YnV 4LtMAJ+0BR+wQ8HGsKZ9jE7J3bT0hHDLUumu5xKwz52r2WpsidJGA0cKVzLny12W RgPt2GuOyTPAnJ+erSyEpJuqb37ec/e7W1mBXAoLUU5xv82W4EZY02hO+mGOD4Ps xBC9QHXrFZJUXjORjPmQ1idvaoQYfW+JYjtZSQ2tCC5DeALKgflsL7UH71j/O+5x hIIVTgdFfgxxjzHnn9u/mAC+MVoooKMCknk8P89xX4BSjEfm+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7irTPZY4+9JIyWG8Q/eUa7Z74fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjFiZThhNTQtOWQxNS0z YmNmLWIzMjgtMDZlMWMyNjNkNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcII96AjTjTuv1QqfsqpGp3N1KUaLiOTc8ar7aFO2C7ynBAmR1Naykh KKgK1EpOxz7mvctCOTdPgfEkxStByE5iw4IHR4LkUDkVs+02h3PNEhyPLbApaclc 0o5guHmM6aslbELOWz+Svg3QO6zNoompG2c/f6WzVm1azwp3j9IlzBXSQQDR9UxD maW8Fkh6XxpJ2miyDA3QAvWgO2ND0tsu9Nd8Ly9zysMH9Mx0h8aCxqbXWS/xGQeN n8Y1BDTjKTN5rb0JfqLqUp5ugX/mke0P6SG581ulmfgcxXhIBVXO7AqoE7HP5HRW iN1eIWcNVQALHlw8sagnX6oEr9YZJAk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:31:09 2025 by rpki-client