$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/560f799e-8ea8-33ff-96ae-aa71fa989d09.roa File: 560f799e-8ea8-33ff-96ae-aa71fa989d09.roa (raw, json) Hash identifier: hwsAiXTSrIZMw3DVU5eR2mzKvn5tju4DSbEe/VJXkpI= Subject key identifier: 8E:08:7E:1F:10:1C:F3:82:70:82:47:28:8A:11:18:2F:71:7C:08:97 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A23C011701ECBF9CDFED5CA80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/560f799e-8ea8-33ff-96ae-aa71fa989d09.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 202 IP address blocks: 20.134.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:11:70:1e:cb:f9:cd:fe:d5:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=491db5f3-1c9a-44b1-9739-3bb078b02f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:06:4e:f6:a9:77:40:2a:65:43:01:0a:8a: 37:2e:65:a2:6b:4d:da:10:7f:85:cc:f6:3d:cf:8f: c0:d4:a5:bb:f1:08:49:2a:a5:3d:81:e6:35:97:4d: 05:be:4f:19:31:c6:d6:50:22:79:37:58:f9:9d:c0: 08:9e:52:cf:52:47:78:0c:75:0e:5e:00:2d:77:4c: a8:c8:a1:2c:a1:9f:b7:03:6b:59:f7:36:a1:79:5f: f0:cf:c7:84:1d:78:06:1c:8b:4d:f0:b8:56:f8:c2: b9:87:c7:6e:26:6c:a5:64:c7:63:96:a0:43:ea:13: e6:3b:20:ac:20:be:25:e0:4a:11:38:9b:a0:c0:2b: b7:73:8f:6d:cb:95:ab:82:44:5b:09:26:51:6d:b7: d4:a2:ac:a1:c9:05:86:a2:78:94:85:55:63:98:bc: 5b:2e:e2:0f:e8:88:ee:8d:ab:6a:0b:5b:72:ce:29: 77:23:1d:03:9c:d7:99:71:40:f7:22:59:0a:ac:30: 17:2b:8b:dc:28:6c:2b:d9:66:6a:aa:56:7d:9b:68: a5:12:ae:0a:69:c8:95:a9:32:b1:cb:94:41:b9:ca: 5d:76:99:70:ed:71:40:f1:ac:fc:9e:3f:cc:f8:00: 8c:e7:ff:0b:90:97:26:83:09:4e:c0:29:01:60:02: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:08:7E:1F:10:1C:F3:82:70:82:47:28:8A:11:18:2F:71:7C:08:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/560f799e-8ea8-33ff-96ae-aa71fa989d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:cc:e6:9f:64:4d:04:90:21:8f:62:25:ce:ac:7d:a6:1c:c3: 2c:aa:0e:87:5e:95:b5:35:52:28:a9:be:fc:51:a7:16:1c:c7: 4d:de:75:d1:be:6d:1a:a1:11:54:41:7b:36:b1:06:92:c9:4a: f9:f8:ed:11:78:62:5b:cf:bd:6b:ed:3f:23:f1:c2:88:6c:7d: 78:0a:a7:4e:10:f1:ac:a3:dc:27:41:55:9b:a2:c5:cd:6b:fd: 07:07:a6:f1:88:4b:db:68:da:40:8d:9d:d8:d6:bf:9e:66:ab: fe:a1:15:86:52:cb:87:5a:24:68:c9:14:9f:90:c9:42:ec:64: 2f:22:51:d3:3c:1a:63:ee:06:fd:17:91:7d:dc:ed:e5:50:ee: 16:2a:c7:d5:3e:48:66:09:20:d2:10:fb:47:93:df:25:b1:0a: f5:c5:e2:b4:b8:a7:d9:e5:4e:ff:e0:e6:8c:81:15:3d:b3:b2: ed:72:57:e5:39:86:05:77:ab:a9:57:1d:70:70:13:e6:1b:4d: e1:be:0c:f3:13:7d:85:31:9b:8f:8c:39:50:06:e8:32:75:5f: 64:20:09:ab:b9:8a:fc:57:b1:7a:80:97:38:7f:41:7b:35:33: 60:b5:c6:38:22:e0:1a:b4:ea:f2:a3:65:9c:9e:18:8c:d2:86: 48:d3:02:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBFwHsv5zf7VyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NDkxZGI1ZjMtMWM5YS00NGIxLTk3MzktM2JiMDc4YjAyZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0kGTvapd0AqZUMBCoo3LmWia03aEH+FzPY9 z4/A1KW78QhJKqU9geY1l00Fvk8ZMcbWUCJ5N1j5ncAInlLPUkd4DHUOXgAtd0yo yKEsoZ+3A2tZ9zaheV/wz8eEHXgGHItN8LhW+MK5h8duJmylZMdjlqBD6hPmOyCs IL4l4EoROJugwCu3c49ty5WrgkRbCSZRbbfUoqyhyQWGoniUhVVjmLxbLuIP6Iju jatqC1tyzil3Ix0DnNeZcUD3IlkKrDAXK4vcKGwr2WZqqlZ9m2ilEq4KaciVqTKx y5RBucpddplw7XFA8az8nj/M+ACM5/8LkJcmgwlOwCkBYAKyYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4Ifh8QHPOCcIJHKIoRGC9xfAiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTYwZjc5OWUtOGVhOC0z M2ZmLTk2YWUtYWE3MWZhOTg5ZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3M5p9kTQSQIY9iJc6sfaYcwyyqDodelbU1UiipvvxRpxYcx03eddG+ bRqhEVRBezaxBpLJSvn47RF4YlvPvWvtPyPxwohsfXgKp04Q8ayj3CdBVZuixc1r /QcHpvGIS9to2kCNndjWv55mq/6hFYZSy4daJGjJFJ+QyULsZC8iUdM8GmPuBv0X kX3c7eVQ7hYqx9U+SGYJINIQ+0eT3yWxCvXF4rS4p9nlTv/g5oyBFT2zsu1yV+U5 hgV3q6lXHXBwE+YbTeG+DPMTfYUxm4+MOVAG6DJ1X2QgCau5ivxXsXqAlzh/QXs1 M2C1xjgi4Bq06vKjZZyeGIzShkjTAjA= -----END CERTIFICATE-----Generated at Tue Jun 17 16:52:24 2025 by rpki-client