$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa File: 4f87b28e-b073-3165-93da-edbf13ef0a9d.roa (raw, json) Hash identifier: 1v1mzBG5Eei3cIAwdh9M2NN+RKfC+jldUTY/nJYXQcQ= Subject key identifier: E8:42:A2:78:AC:5A:DD:F4:4C:A7:91:68:1F:AA:D8:8B:DA:CD:A2:A7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D6FA44F6FF68352416218780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa Signing time: Tue 13 May 2025 13:01:02 +0000 ROA not before: Tue 13 May 2025 13:01:02 +0000 ROA not after: Mon 11 Aug 2025 13:01:02 +0000 asID: 202 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:fa:44:f6:ff:68:35:24:16:21:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 13 13:01:02 2025 GMT Not After : Aug 11 13:01:02 2025 GMT Subject: CN=692495ec-1562-41cb-b73c-934f034493aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:9f:29:93:79:80:2a:7c:64:0d:01:32:14: 92:f2:5b:a0:21:c5:ed:69:84:31:eb:9d:22:11:17: 89:37:1c:cc:bc:11:82:f9:97:1e:10:ca:f5:8a:b2: 40:64:e3:43:31:27:70:6e:0c:a5:85:ab:b9:cd:a1: ce:2b:5a:74:23:63:6a:d6:a3:c8:75:33:1c:3a:58: 4f:36:8d:d3:dd:12:87:35:1c:f4:f9:38:d0:cb:33: b8:a0:4b:f8:67:5a:2e:d4:c6:76:35:bc:e2:0c:de: 78:7a:13:0d:5f:3b:d5:34:df:99:5e:f1:af:ed:8d: a4:25:6f:fc:8e:67:1a:95:77:0b:45:4b:8e:df:6b: 23:f0:22:e7:d7:98:27:2f:27:db:fa:b6:c1:eb:81: 4f:3f:09:74:29:4d:74:f6:d4:3f:32:97:05:e7:14: 13:54:4c:f6:37:21:33:59:d7:01:af:a1:84:7a:4e: e4:2c:e7:2e:de:24:5f:e8:71:c3:b1:17:2c:9a:44: 4d:d8:f2:ea:ef:66:b7:62:0e:6c:17:08:fe:8b:3c: 32:86:d0:84:5c:b1:49:7e:6f:54:d1:48:f7:55:17: ab:ce:db:54:59:e1:e6:49:04:fc:2b:5f:dc:2a:a3: 05:10:f8:68:4f:82:fe:1d:e6:c9:d8:68:2e:dc:84: 35:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:42:A2:78:AC:5A:DD:F4:4C:A7:91:68:1F:AA:D8:8B:DA:CD:A2:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4f87b28e-b073-3165-93da-edbf13ef0a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:22:b7:ba:75:7f:64:43:9e:f7:4a:0b:19:66:b1:42:c7:6b: 62:0c:22:b9:94:15:5d:df:b2:b0:c0:38:49:db:08:f9:e0:77: 48:72:c2:03:84:0d:25:ca:89:57:d1:64:15:f5:76:47:b7:69: 76:98:b8:c4:55:d7:56:8c:9d:16:a5:77:c6:91:05:53:f8:b4: ca:67:5c:28:a9:ce:cc:54:31:2f:03:06:ff:69:84:80:a1:71: d5:ed:c5:ba:95:dc:61:3a:da:6f:18:b2:89:ee:30:f5:30:b8: d0:35:3f:1b:58:7d:13:d4:32:e7:39:84:32:eb:c6:b0:3b:0f: 9f:f7:a7:aa:82:79:4b:32:a1:4d:8c:97:14:eb:bb:69:97:73: fd:f4:6d:50:de:cd:a8:89:54:84:84:69:ed:ba:b2:18:5f:5c: c5:1a:46:c3:84:6d:87:ed:54:86:b5:ec:c9:10:be:f2:98:6e: 06:82:d4:40:7f:96:75:6d:35:14:93:d5:64:d0:6d:87:14:64: 9c:6e:43:c9:40:7a:cb:57:60:8e:83:7c:9c:38:3e:88:47:56: 60:9a:cf:53:7c:b5:dd:69:6e:a6:db:fd:66:84:b9:12:4f:a4: f4:94:09:a0:13:01:e2:8f:80:f3:88:94:06:7e:0c:a2:50:5e: 34:f5:be:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW+kT2/2g1JBYhh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk NjkyNDk1ZWMtMTU2Mi00MWNiLWI3M2MtOTM0ZjAzNDQ5M2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KSfKZN5gCp8ZA0BMhSS8lugIcXtaYQx650i EReJNxzMvBGC+ZceEMr1irJAZONDMSdwbgylhau5zaHOK1p0I2Nq1qPIdTMcOlhP No3T3RKHNRz0+TjQyzO4oEv4Z1ou1MZ2NbziDN54ehMNXzvVNN+ZXvGv7Y2kJW/8 jmcalXcLRUuO32sj8CLn15gnLyfb+rbB64FPPwl0KU109tQ/MpcF5xQTVEz2NyEz WdcBr6GEek7kLOcu3iRf6HHDsRcsmkRN2PLq72a3Yg5sFwj+izwyhtCEXLFJfm9U 0Uj3VRerzttUWeHmSQT8K1/cKqMFEPhoT4L+HebJ2Ggu3IQ1gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhConisWt30TKeRaB+q2IvazaKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNGY4N2IyOGUtYjA3My0z MTY1LTkzZGEtZWRiZjEzZWYwYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUit7p1f2RDnvdKCxlmsULHa2IMIrmUFV3fsrDAOEnbCPngd0hywgOE DSXKiVfRZBX1dke3aXaYuMRV11aMnRald8aRBVP4tMpnXCipzsxUMS8DBv9phICh cdXtxbqV3GE62m8YsonuMPUwuNA1PxtYfRPUMuc5hDLrxrA7D5/3p6qCeUsyoU2M lxTru2mXc/30bVDezaiJVISEae26shhfXMUaRsOEbYftVIa17MkQvvKYbgaC1EB/ lnVtNRST1WTQbYcUZJxuQ8lAestXYI6DfJw4PohHVmCaz1N8td1pbqbb/WaEuRJP pPSUCaATAeKPgPOIlAZ+DKJQXjT1vu8= -----END CERTIFICATE-----Generated at Mon Jun 16 07:47:17 2025 by rpki-client