$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa File: 32054d0b-077d-3e96-8773-c1690e50a953.roa (raw, json) Hash identifier: suu/yiuTE9+W9yWx2Hy6ef59iaoCmnLMDj6vEj+iWuk= Subject key identifier: BB:8E:35:43:AE:65:4D:6F:C8:4A:1F:24:58:65:5C:97:29:F7:20:01 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D944E322599FAF6B746C3120 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa Signing time: Tue 11 Feb 2025 15:56:06 +0000 ROA not before: Tue 11 Feb 2025 15:56:06 +0000 ROA not after: Mon 12 May 2025 14:56:06 +0000 asID: 202 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:44:e3:22:59:9f:af:6b:74:6c:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 15:56:06 2025 GMT Not After : May 12 14:56:06 2025 GMT Subject: CN=4b9a72a4-38b3-45a2-91f6-d97b2419f625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:65:8a:ce:bc:21:47:63:f9:7a:ed:b7:f7:d1: cc:25:53:75:7d:cf:1d:ff:a7:a2:8e:a9:f3:51:9d: 9e:e3:77:5c:9b:ad:35:92:1a:2d:ad:af:90:c6:2a: 90:91:66:6e:d5:23:cb:65:06:09:28:de:f5:72:2e: 85:5b:88:81:07:1d:4f:84:31:57:cd:4e:ff:5d:25: 52:7a:c7:f6:8b:4f:37:fc:1c:b7:fd:64:8d:2a:9c: c1:2c:9a:bd:c5:f8:88:9d:94:1d:d7:91:ee:12:69: 55:2b:2c:53:ce:aa:ed:14:3a:3a:4c:80:f4:c9:d9: 63:ab:d6:6d:f7:f8:45:65:92:f8:1c:71:68:2b:43: 6b:52:09:e9:b8:8a:3b:76:da:c3:bc:dc:07:e0:ba: 72:7c:e3:61:7b:64:ed:a6:47:42:d2:db:45:a9:96: af:10:3a:d7:c7:2e:42:81:af:56:84:32:b6:fd:aa: 6c:bb:3d:dd:cd:5e:cb:4d:6a:d9:1b:59:8b:3a:3a: 93:8d:4a:02:b5:12:a0:8c:00:2c:f9:c9:5e:11:9e: 93:17:bc:03:fc:ff:48:96:14:29:b9:9e:2c:2e:1e: b8:64:07:34:4a:88:df:7c:3a:3b:ac:a9:28:01:0d: f5:c2:b4:a3:0d:11:ce:d8:46:14:36:75:bd:64:71: 27:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8E:35:43:AE:65:4D:6F:C8:4A:1F:24:58:65:5C:97:29:F7:20:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:08:b6:52:96:c3:1b:ac:51:4a:1c:e3:05:2c:48:6f:86:41: 6e:05:22:a5:10:5a:18:06:18:94:1e:2f:e6:f5:30:1e:80:7a: a6:8a:eb:7a:d8:e3:9d:87:f4:cb:4a:d0:fe:d8:11:47:4b:3d: 75:a0:c7:69:87:e8:ca:7f:2a:c2:cd:84:21:85:52:8d:c2:ba: 9b:89:d8:23:c7:04:54:0b:d1:6f:0e:e7:e5:91:29:fc:37:b3: d0:c6:f5:96:25:31:2f:dd:d3:d6:33:d6:8a:15:86:f7:02:ae: 1c:ea:09:b3:68:3c:63:80:92:24:6e:0e:5b:2c:a0:03:a7:8c: 20:3b:ce:f1:bb:06:b0:37:9a:e9:73:3f:98:c7:78:3e:30:93: 69:93:77:a5:f6:46:99:51:c1:4b:55:bb:9c:23:5b:13:a6:3d: ae:8b:16:8e:13:d2:6a:1f:5b:a7:cf:a9:ae:d0:4e:95:27:9c: 0d:65:80:10:52:8b:b8:c1:74:da:7d:38:af:b9:69:ff:45:26: 13:b5:48:55:cd:68:c7:58:74:95:4d:f9:36:df:db:e4:89:a7: b6:8e:f0:33:69:29:ca:ad:7e:00:05:6e:6f:00:e0:31:1c:2d: 7c:42:af:b7:93:42:a9:90:28:d0:9d:b0:42:ce:3c:05:7b:32: c9:de:3d:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZROMiWZ+va3RsMSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE1NTYwNloXDTI1MDUxMjE0NTYwNlowLzEtMCsGA1UEAxMk NGI5YTcyYTQtMzhiMy00NWEyLTkxZjYtZDk3YjI0MTlmNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGWKzrwhR2P5eu2399HMJVN1fc8d/6eijqnz UZ2e43dcm601khotra+QxiqQkWZu1SPLZQYJKN71ci6FW4iBBx1PhDFXzU7/XSVS esf2i083/By3/WSNKpzBLJq9xfiInZQd15HuEmlVKyxTzqrtFDo6TID0ydljq9Zt 9/hFZZL4HHFoK0NrUgnpuIo7dtrDvNwH4LpyfONhe2TtpkdC0ttFqZavEDrXxy5C ga9WhDK2/apsuz3dzV7LTWrZG1mLOjqTjUoCtRKgjAAs+cleEZ6TF7wD/P9IlhQp uZ4sLh64ZAc0SojffDo7rKkoAQ31wrSjDRHO2EYUNnW9ZHEnzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuONUOuZU1vyEofJFhlXJcp9yABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzIwNTRkMGItMDc3ZC0z ZTk2LTg3NzMtYzE2OTBlNTBhOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUItlKWwxusUUoc4wUsSG+GQW4FIqUQWhgGGJQeL+b1MB6AeqaK63rY 452H9MtK0P7YEUdLPXWgx2mH6Mp/KsLNhCGFUo3CupuJ2CPHBFQL0W8O5+WRKfw3 s9DG9ZYlMS/d09Yz1ooVhvcCrhzqCbNoPGOAkiRuDlssoAOnjCA7zvG7BrA3mulz P5jHeD4wk2mTd6X2RplRwUtVu5wjWxOmPa6LFo4T0mofW6fPqa7QTpUnnA1lgBBS i7jBdNp9OK+5af9FJhO1SFXNaMdYdJVN+Tbf2+SJp7aO8DNpKcqtfgAFbm8A4DEc LXxCr7eTQqmQKNCdsELOPAV7MsnePSg= -----END CERTIFICATE-----Generated at Sat Apr 26 20:26:58 2025 by rpki-client