$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3e7f0249-a1cb-3df7-bb1e-e9cbf78f1371.roa File: 3e7f0249-a1cb-3df7-bb1e-e9cbf78f1371.roa (raw, json) Hash identifier: wjptYbctzpYCChXAGPpV8FSHF+ZFy5hToQNyEk6w6m4= Subject key identifier: EE:60:B4:EE:62:8F:3D:0A:C7:36:9D:3E:39:56:D0:D3:21:F1:DD:04 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D6FA490265200E3CA9FA3F00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3e7f0249-a1cb-3df7-bb1e-e9cbf78f1371.roa Signing time: Tue 13 May 2025 13:01:02 +0000 ROA not before: Tue 13 May 2025 13:01:02 +0000 ROA not after: Mon 11 Aug 2025 13:01:02 +0000 asID: 3356 IP address blocks: 20.154.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:fa:49:02:65:20:0e:3c:a9:fa:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 13 13:01:02 2025 GMT Not After : Aug 11 13:01:02 2025 GMT Subject: CN=220b3eea-0488-4564-806b-bb82d66c0a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e7:c6:df:7d:ce:5e:1d:c8:52:be:17:26:ad: dd:13:8d:df:6d:bf:ea:79:09:d9:22:4a:52:df:42: 0f:46:60:6f:5b:9a:3d:52:87:05:a2:d6:b8:bb:3f: e2:23:f6:0e:e2:eb:c7:12:01:d0:98:ea:ef:fc:f6: 05:e4:4e:06:e3:69:d5:23:9c:cf:fb:26:d1:55:b2: a2:e4:5b:97:e2:3e:a9:64:de:9d:94:47:c0:a4:d5: ec:43:09:be:45:62:5b:20:c9:00:bb:74:44:ba:eb: ea:7b:03:11:02:2e:ea:ba:eb:ac:f9:4a:27:11:a1: e8:cf:3f:ce:ef:1c:2b:a7:d6:b6:e4:4f:d7:d3:85: ea:42:16:76:46:3c:14:52:6f:39:ee:8f:69:ab:85: e0:26:38:b6:d0:3c:7f:23:24:08:8d:1a:10:7c:1d: 2d:7a:04:e7:7b:f9:9b:91:29:88:0b:0e:73:7c:c5: 99:da:78:b3:a8:5a:58:ac:ae:a6:c6:0b:42:15:cc: fd:3f:62:35:b0:c7:e9:22:8a:e4:61:3e:7b:4c:86: 1b:11:3f:dc:5b:1d:6b:cb:5f:d2:52:2f:4c:a1:b9: 1d:39:ca:7f:65:55:94:c7:37:e1:16:01:19:67:c5: 0f:56:62:55:5a:24:17:93:5c:1e:16:63:bc:c6:27: c4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:60:B4:EE:62:8F:3D:0A:C7:36:9D:3E:39:56:D0:D3:21:F1:DD:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3e7f0249-a1cb-3df7-bb1e-e9cbf78f1371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.154.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b0:67:00:43:f4:56:22:b6:6f:08:03:f5:b0:b9:94:e1:ae: 60:31:8a:74:1a:cf:5a:26:3a:95:e3:f7:4c:09:fa:42:51:d4: 3a:08:53:5c:17:e6:c6:b0:2c:bd:ee:e0:09:0d:05:4e:7c:55: 46:55:a1:12:82:a8:be:90:db:d1:c5:ea:51:c9:fd:a2:c7:44: a9:79:b3:4b:ca:07:cf:31:af:fa:be:f1:0e:43:97:f0:c5:df: da:71:0f:ea:bb:bb:2a:0b:2b:cd:5f:6a:40:1e:33:34:bb:3f: 90:fa:9e:5f:24:a3:e0:e3:6d:2b:32:3a:9f:91:22:6d:25:99: 5b:3f:72:42:69:b4:f1:21:31:29:37:36:0f:ff:96:db:30:c4: fa:66:e7:e8:37:8d:d7:22:50:04:d8:8e:63:20:37:4d:35:49: 5e:41:c2:e0:89:89:cb:39:e4:44:ec:11:b8:35:c2:43:84:85: 07:b1:19:51:56:0e:5b:1f:32:59:ab:83:b8:82:37:3d:2e:8e: 9b:c3:cb:56:f6:b3:3a:4e:c2:1a:7d:c3:96:4a:f1:62:bc:7c: 92:b9:fa:86:94:56:3d:20:73:08:cb:da:b7:68:65:6a:1a:65: 3a:ec:6b:66:f7:8a:77:77:ec:ae:05:68:54:f4:0c:9a:98:fa: d9:13:cd:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW+kkCZSAOPKn6PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk MjIwYjNlZWEtMDQ4OC00NTY0LTgwNmItYmI4MmQ2NmMwYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkefG333OXh3IUr4XJq3dE43fbb/qeQnZIkpS 30IPRmBvW5o9UocFota4uz/iI/YO4uvHEgHQmOrv/PYF5E4G42nVI5zP+ybRVbKi 5FuX4j6pZN6dlEfApNXsQwm+RWJbIMkAu3REuuvqewMRAi7quuus+UonEaHozz/O 7xwrp9a25E/X04XqQhZ2RjwUUm857o9pq4XgJji20Dx/IyQIjRoQfB0tegTne/mb kSmICw5zfMWZ2nizqFpYrK6mxgtCFcz9P2I1sMfpIorkYT57TIYbET/cWx1ry1/S Ui9MobkdOcp/ZVWUxzfhFgEZZ8UPVmJVWiQXk1weFmO8xifEuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5gtO5ijz0KxzadPjlW0NMh8d0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2U3ZjAyNDktYTFjYi0z ZGY3LWJiMWUtZTljYmY3OGYxMzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJpaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmwZwBD9FYitm8IA/WwuZThrmAxinQaz1omOpXj90wJ+kJR1DoIU1wX 5sawLL3u4AkNBU58VUZVoRKCqL6Q29HF6lHJ/aLHRKl5s0vKB88xr/q+8Q5Dl/DF 39pxD+q7uyoLK81fakAeMzS7P5D6nl8ko+DjbSsyOp+RIm0lmVs/ckJptPEhMSk3 Ng//ltswxPpm5+g3jdciUATYjmMgN001SV5BwuCJics55ETsEbg1wkOEhQexGVFW DlsfMlmrg7iCNz0ujpvDy1b2szpOwhp9w5ZK8WK8fJK5+oaUVj0gcwjL2rdoZWoa ZTrsa2b3ind37K4FaFT0DJqY+tkTzVk= -----END CERTIFICATE-----Generated at Sun Jun 15 19:10:02 2025 by rpki-client