$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa File: 38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa (raw, json) Hash identifier: dHtM+FVNICam8vmL+qVVQVGggzDn6KwnVVEpF+bSigo= Subject key identifier: 4C:89:8C:E6:1F:AC:C1:6E:7F:59:E9:E5:03:A3:4A:85:CF:62:0F:E7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858499294A57E338DD3825E1BD240 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 3356 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a5:7e:33:8d:d3:82:5e:1b:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=5abb2be5-40b0-4d80-b386-f3bfec4b9531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:43:8b:c6:f9:66:bc:f4:13:71:ea:7c:df:43: 71:11:8a:82:f8:08:cd:bc:90:ac:dd:16:ac:df:0c: 82:34:2d:b7:92:70:54:45:11:2f:ec:5b:d7:dc:1b: 63:4f:36:d3:77:f4:3a:cb:01:15:4e:22:9a:36:5d: ba:57:47:a7:ec:f2:f9:82:50:54:45:d0:d8:b6:9d: 52:9e:fe:06:c9:f7:63:91:78:25:5d:fd:da:af:56: 4a:ca:7f:27:9f:da:d7:41:af:a3:6e:21:7e:81:89: dc:d5:25:fb:55:3c:18:81:1a:f8:b4:90:07:3f:f7: 9c:cd:a9:d1:66:e4:a9:7a:df:67:e6:98:22:98:9e: 59:3e:e6:f7:84:8d:f5:32:2a:ed:9e:a6:69:22:2f: 7d:c4:f1:e5:0a:d0:37:30:67:9f:c2:26:dd:3c:a5: 4f:9e:de:9f:85:60:a1:10:34:b1:28:75:9e:e5:59: 4d:a3:1e:d3:fc:87:3e:d9:16:49:a2:0e:7d:ec:ad: 86:c2:f1:73:8f:55:80:4d:47:28:b3:55:87:e3:c8: 18:31:b4:17:10:5b:56:50:f3:6e:fb:ed:ec:5f:e0: f9:ea:d9:7f:f3:6a:42:17:4b:0c:f7:a8:b3:fa:42: 25:48:46:71:6a:3a:e7:45:f3:95:de:77:7f:20:4e: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:89:8C:E6:1F:AC:C1:6E:7F:59:E9:E5:03:A3:4A:85:CF:62:0F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:3b:0c:a6:15:d2:f9:91:60:99:05:b2:46:52:41:c4:5e:ce: 13:83:c2:f6:d4:77:13:ad:1f:39:3e:f9:09:76:f9:0f:12:d4: 92:ef:35:60:dd:bb:fb:e6:66:99:41:77:08:c9:3c:63:c6:9c: 82:99:43:52:69:79:29:94:bf:2f:bb:18:e2:60:ca:73:8e:41: 0f:8e:99:ec:d6:00:85:50:e9:c4:07:9f:79:9e:3b:eb:99:65: f7:9c:53:7e:0a:93:54:a8:ad:ed:7b:cf:9e:fc:d0:dc:35:87: 2d:e6:f5:b8:be:54:23:b6:29:7b:5a:d8:f6:e6:6d:40:c6:b8: 6b:9e:42:9c:68:5c:25:90:c5:31:e2:de:f7:76:16:3a:64:59: 7e:4f:15:bb:67:05:75:bf:01:9e:0f:4b:e8:1c:fd:eb:3c:18: a3:74:26:71:6e:14:68:bc:8d:1d:de:3a:0e:15:1e:ef:f0:cb: c9:be:fa:a8:1d:86:d1:48:ee:6e:81:88:8f:f4:fa:65:39:14: f4:06:21:b8:9a:db:68:a6:ba:7f:c1:f9:20:fd:74:0d:d1:22: 5e:39:16:99:af:cc:a2:d2:d0:92:8e:7e:2b:d9:ef:30:d6:4d: f6:73:f6:45:b5:73:72:10:bd:f3:78:ef:ab:3b:57:23:be:06: dd:a6:03:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKV+M43Tgl4b0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NWFiYjJiZTUtNDBiMC00ZDgwLWIzODYtZjNiZmVjNGI5NTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEOLxvlmvPQTcep830NxEYqC+AjNvJCs3Ras 3wyCNC23knBURREv7FvX3BtjTzbTd/Q6ywEVTiKaNl26V0en7PL5glBURdDYtp1S nv4GyfdjkXglXf3ar1ZKyn8nn9rXQa+jbiF+gYnc1SX7VTwYgRr4tJAHP/eczanR ZuSpet9n5pgimJ5ZPub3hI31MirtnqZpIi99xPHlCtA3MGefwibdPKVPnt6fhWCh EDSxKHWe5VlNox7T/Ic+2RZJog597K2GwvFzj1WATUcos1WH48gYMbQXEFtWUPNu ++3sX+D56tl/82pCF0sM96iz+kIlSEZxajrnRfOV3nd/IE4+CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyJjOYfrMFuf1np5QOjSoXPYg/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhhNDk4ZmYtZjZmNi0z ZDU0LTliZmEtOGY3ZmYyMjZmYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG87DKYV0vmRYJkFskZSQcRezhODwvbUdxOtHzk++Ql2+Q8S1JLvNWDd u/vmZplBdwjJPGPGnIKZQ1JpeSmUvy+7GOJgynOOQQ+OmezWAIVQ6cQHn3meO+uZ ZfecU34Kk1Sore17z5780Nw1hy3m9bi+VCO2KXta2PbmbUDGuGueQpxoXCWQxTHi 3vd2FjpkWX5PFbtnBXW/AZ4PS+gc/es8GKN0JnFuFGi8jR3eOg4VHu/wy8m++qgd htFI7m6BiI/0+mU5FPQGIbia22imun/B+SD9dA3RIl45FpmvzKLS0JKOfivZ7zDW TfZz9kW1c3IQvfN476s7VyO+Bt2mA/I= -----END CERTIFICATE-----Generated at Sat Apr 26 18:09:30 2025 by rpki-client