$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa File: 333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa (raw, json) Hash identifier: IUr25f0L2goe4Snl0xCN3oxf4FtzSYAdab+g97XSZII= Subject key identifier: 39:88:12:52:1F:0A:0D:F9:85:FD:6B:11:B9:5A:4B:56:85:68:75:03 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849631EC511EABE3377535D7E80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 202 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c5:11:ea:be:33:77:53:5d:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=6b13b55c-ca8d-4187-9184-adb5f3a104b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:70:69:ca:fa:7a:7c:c5:4a:6b:54:b0:a8:f4: ae:6f:7a:d4:32:e7:95:20:c2:ee:05:2d:90:8e:fd: ab:26:f0:ac:ff:72:8a:a4:5f:c3:81:f0:d3:08:81: 54:be:cf:b2:ec:40:9b:4f:a1:05:e2:d7:49:65:f3: c4:d7:5a:d0:e7:e5:c3:aa:94:bd:01:bb:15:fc:32: 26:09:1f:cd:44:9e:6d:e0:01:22:17:82:9d:2b:09: c8:45:b4:76:ba:82:66:bd:6e:52:de:51:b0:ae:68: 6e:41:08:ad:c4:2c:b1:33:ee:9f:ad:c4:10:6a:5b: c5:d9:97:f0:5d:32:52:36:9c:5a:25:61:eb:17:62: 0e:87:65:25:cc:37:45:38:75:0d:3b:dd:44:a4:4a: 8b:81:fa:ee:92:93:2e:10:e4:7b:e6:62:8f:25:a1: a3:7c:a4:44:1a:ae:3d:14:e1:5f:6c:84:d2:1c:ab: 0f:e7:fb:bd:51:95:40:c6:eb:11:40:0f:8d:3b:79: 9f:09:dc:6f:e7:4f:ba:35:4d:79:75:ab:67:5d:7e: 20:62:5b:77:ba:68:c9:c6:a5:83:83:7d:76:f5:14: 10:6d:56:9c:81:2c:db:7c:e2:43:92:71:44:8e:44: 46:94:25:9d:dd:21:5f:b2:7f:d8:0b:31:bb:3e:7e: 8b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:88:12:52:1F:0A:0D:F9:85:FD:6B:11:B9:5A:4B:56:85:68:75:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:79:31:14:88:a3:b0:d1:c0:db:d0:53:bc:18:9c:06:b9:c9: b0:3e:02:7f:64:31:60:d0:12:77:ca:68:d6:f5:9d:04:8a:2f: 53:41:47:25:26:56:57:01:a4:2a:a6:cd:04:0d:7c:f8:17:9f: d5:35:7a:ab:22:1b:05:77:a5:f4:1e:18:84:e8:02:ab:6d:24: 86:f0:47:60:34:8e:29:d3:69:cb:88:5e:a0:07:c2:99:10:15: 85:25:2b:34:be:a0:6f:a2:36:e6:63:cb:7f:57:f6:95:f4:5c: 05:c0:45:51:2e:17:b9:08:3a:a3:06:ab:c2:3f:52:1e:51:57: 96:c8:d4:01:30:98:a7:4a:7d:0d:36:79:22:06:e4:92:af:43: 23:c0:f5:06:51:c9:d6:d4:7c:45:13:f1:db:4b:c6:7e:90:3f: d0:0a:5c:a6:c6:58:7c:d6:58:0e:1a:08:69:a9:f4:74:0a:32: b8:93:ae:f5:c2:8d:74:41:21:32:b3:c5:39:e8:d9:57:0f:59: 3f:7e:d1:d4:a2:aa:5e:8a:fc:ea:c8:55:4f:fc:24:8e:f6:44: 39:d0:f3:2e:93:e6:25:fb:4d:c3:5f:03:a7:7f:9a:04:a3:8d: 6f:1c:15:ed:7d:d8:28:9e:fc:fb:c4:30:b6:79:5f:30:8a:3c: d1:48:f2:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsUR6r4zd1NdfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk NmIxM2I1NWMtY2E4ZC00MTg3LTkxODQtYWRiNWYzYTEwNGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3Bpyvp6fMVKa1SwqPSub3rUMueVIMLuBS2Q jv2rJvCs/3KKpF/DgfDTCIFUvs+y7ECbT6EF4tdJZfPE11rQ5+XDqpS9AbsV/DIm CR/NRJ5t4AEiF4KdKwnIRbR2uoJmvW5S3lGwrmhuQQitxCyxM+6frcQQalvF2Zfw XTJSNpxaJWHrF2IOh2UlzDdFOHUNO91EpEqLgfrukpMuEOR75mKPJaGjfKREGq49 FOFfbITSHKsP5/u9UZVAxusRQA+NO3mfCdxv50+6NU15datnXX4gYlt3umjJxqWD g3129RQQbVacgSzbfOJDknFEjkRGlCWd3SFfsn/YCzG7Pn6L8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmIElIfCg35hf1rEblaS1aFaHUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzMzMTc0YTUtOWQ0ZS0z ZWRlLWE2NDAtMGFlNzFmNTNlN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd5MRSIo7DRwNvQU7wYnAa5ybA+An9kMWDQEnfKaNb1nQSKL1NBRyUm VlcBpCqmzQQNfPgXn9U1eqsiGwV3pfQeGIToAqttJIbwR2A0jinTacuIXqAHwpkQ FYUlKzS+oG+iNuZjy39X9pX0XAXARVEuF7kIOqMGq8I/Uh5RV5bI1AEwmKdKfQ02 eSIG5JKvQyPA9QZRydbUfEUT8dtLxn6QP9AKXKbGWHzWWA4aCGmp9HQKMriTrvXC jXRBITKzxTno2VcPWT9+0dSiql6K/OrIVU/8JI72RDnQ8y6T5iX7TcNfA6d/mgSj jW8cFe192Cie/PvEMLZ5XzCKPNFI8hM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:25:34 2025 by rpki-client