$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/560f799e-8ea8-33ff-96ae-aa71fa989d09.roa File: 560f799e-8ea8-33ff-96ae-aa71fa989d09.roa (raw, json) Hash identifier: RFvS8Zl5yCUkHa+dMjqZfcfAVDzcMrUMZ/DwEMTyg+w= Subject key identifier: 0B:B6:99:7E:71:1F:98:81:92:37:0A:60:34:F6:0A:B2:23:C8:21:02 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858494469474EFBE5F9497A890800 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/560f799e-8ea8-33ff-96ae-aa71fa989d09.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 20.134.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:47:4e:fb:e5:f9:49:7a:89:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=62c5de22-fada-4b11-a8a6-0ddfc1d672c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:97:d5:5a:a8:76:34:bf:4b:e8:dc:f8:ec:16: 0b:69:e7:83:e7:e0:f0:72:94:13:cc:a4:08:25:64: 2b:54:6b:ab:26:f5:ea:ac:1e:20:60:56:07:15:6e: ad:b0:46:a8:29:d1:18:f2:e7:6f:ed:0d:1e:53:9b: 27:b7:b9:e9:ec:43:ab:e4:c7:af:b5:48:98:67:bb: bc:be:89:4e:6c:e5:bf:93:a4:35:d2:fd:e7:bb:81: 2f:d3:80:af:31:f8:ca:fa:52:65:81:58:10:4e:ad: 4c:be:d6:e6:f3:5e:9d:63:2d:74:11:ef:64:3c:91: 08:e0:90:71:97:b8:69:b6:e9:f9:a1:c6:0f:db:12: ad:b3:d8:dc:4b:a3:aa:e6:0b:cf:89:23:2d:10:c8: 8f:cd:f1:d5:7f:b6:1b:73:33:0c:97:bb:ff:38:3b: 65:36:a4:ce:aa:1c:ef:54:f3:10:ba:b2:76:cc:a7: 4b:60:2a:9f:d7:f0:20:46:87:af:e4:c1:eb:c4:db: 04:dc:0e:44:b7:83:60:61:94:9e:21:74:c3:fc:52: b9:24:6d:13:bf:78:d9:8a:d0:dc:6c:47:db:bb:d5: 86:10:ad:3e:03:84:48:d7:99:f2:af:b5:c8:e9:63: 74:68:7f:d8:5e:8b:59:f0:02:10:cb:f1:bd:e8:14: 97:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B6:99:7E:71:1F:98:81:92:37:0A:60:34:F6:0A:B2:23:C8:21:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/560f799e-8ea8-33ff-96ae-aa71fa989d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e9:c0:32:d7:f3:54:40:7b:d8:f4:7a:71:3e:6d:80:16:5e: 9a:5d:db:6b:43:49:75:de:f9:89:ad:d4:60:84:85:f8:05:b1: 3c:a3:75:01:92:4e:6f:18:2d:02:aa:81:82:93:6a:0f:a6:bd: e5:e5:e9:9c:67:d8:33:60:ad:af:76:7f:c1:ab:a4:51:a0:8a: 10:0f:10:1d:c6:1b:dd:da:14:04:64:97:9b:a5:9b:fa:af:f8: a0:9a:6d:da:20:a1:30:99:cf:c1:79:fe:26:92:f8:33:00:35: 67:80:79:59:99:2d:59:16:06:81:06:f5:20:b0:f1:1c:0d:33: fd:f5:11:5f:cc:ef:0a:b0:69:e8:40:80:b1:fc:42:29:74:98: ea:46:89:cf:7c:b1:80:fd:94:55:16:35:fa:d6:8a:28:1b:6a: 9c:bc:25:1a:2e:11:d6:67:2b:6e:bf:ae:b0:fc:dd:d4:5f:43: 4a:e1:0e:aa:f0:49:f1:02:0f:f0:c1:35:d1:07:6a:e0:7e:a1: e5:8f:95:77:cb:b9:dd:17:0b:0a:3f:9d:8b:e1:4d:b1:4b:c7: 9e:8b:29:3d:91:22:ac:f4:aa:6e:9c:04:7d:c6:b1:9b:4f:fd: ee:e5:d0:31:a4:6c:48:0f:12:cb:b8:43:76:b3:03:a0:3c:dd: 02:d4:7c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUdO++X5SXqJCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NjJjNWRlMjItZmFkYS00YjExLWE4YTYtMGRkZmMxZDY3MmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZfVWqh2NL9L6Nz47BYLaeeD5+DwcpQTzKQI JWQrVGurJvXqrB4gYFYHFW6tsEaoKdEY8udv7Q0eU5snt7np7EOr5MevtUiYZ7u8 volObOW/k6Q10v3nu4Ev04CvMfjK+lJlgVgQTq1Mvtbm816dYy10Ee9kPJEI4JBx l7hptun5ocYP2xKts9jcS6Oq5gvPiSMtEMiPzfHVf7YbczMMl7v/ODtlNqTOqhzv VPMQurJ2zKdLYCqf1/AgRoev5MHrxNsE3A5Et4NgYZSeIXTD/FK5JG0Tv3jZitDc bEfbu9WGEK0+A4RI15nyr7XI6WN0aH/YXotZ8AIQy/G96BSX8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAu2mX5xH5iBkjcKYDT2CrIjyCECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTYwZjc5OWUtOGVhOC0z M2ZmLTk2YWUtYWE3MWZhOTg5ZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3pwDLX81RAe9j0enE+bYAWXppd22tDSXXe+Ymt1GCEhfgFsTyjdQGS Tm8YLQKqgYKTag+mveXl6Zxn2DNgra92f8GrpFGgihAPEB3GG93aFARkl5ulm/qv +KCabdogoTCZz8F5/iaS+DMANWeAeVmZLVkWBoEG9SCw8RwNM/31EV/M7wqwaehA gLH8Qil0mOpGic98sYD9lFUWNfrWiigbapy8JRouEdZnK26/rrD83dRfQ0rhDqrw SfECD/DBNdEHauB+oeWPlXfLud0XCwo/nYvhTbFLx56LKT2RIqz0qm6cBH3GsZtP /e7l0DGkbEgPEsu4Q3azA6A83QLUfFc= -----END CERTIFICATE-----Generated at Sat Apr 26 18:13:47 2025 by rpki-client