$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59205f9e-be67-31b6-8b33-8d851a623090.roa File: 59205f9e-be67-31b6-8b33-8d851a623090.roa (raw, json) Hash identifier: vp1By/opn7e8rZkp0HMVeXDWF6SGW+DaXEd4CIqEqbs= Subject key identifier: FA:BC:AA:60:8E:D1:3C:D6:D8:00:6B:5E:FD:9A:13:21:8A:05:20:0C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A23C011617DD2EA3EF3AD8D80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59205f9e-be67-31b6-8b33-8d851a623090.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 3356 IP address blocks: 20.134.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:11:61:7d:d2:ea:3e:f3:ad:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=bff41b51-f8f0-40ae-9878-b874a52a864f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:a2:e1:b3:8d:55:ba:dd:90:28:9e:3b:07: e5:55:e8:a2:7a:c1:a5:ef:ea:f8:c1:f9:f1:5a:c4: f6:44:25:b2:68:d1:d1:49:83:4b:34:cc:ba:42:1c: 4b:62:46:d4:5f:bd:5b:21:41:89:b0:f6:f0:c9:a4: 90:af:f1:65:fc:d2:8a:50:0e:d5:66:d1:f0:7c:04: 2a:c2:0f:51:d4:6c:17:e2:f2:fb:66:9e:8e:56:b2: a3:8b:bf:b8:98:de:f8:e0:57:1c:60:a7:b0:c1:df: 89:04:ad:b6:ea:5e:19:58:d5:89:1c:85:2f:c9:49: 20:3e:3b:dc:05:a2:ae:1b:89:c7:f3:99:16:a3:5d: 3d:96:3d:04:27:72:45:1f:41:cc:6b:c7:1a:61:ca: 4b:c2:95:7e:d7:b6:d9:8e:1c:ad:b0:55:e2:50:1c: 2f:63:4a:7d:72:ca:85:e0:08:a7:87:44:5b:e2:34: 36:bb:1a:36:6a:8c:9d:b9:6c:f2:fc:11:24:1e:5f: bb:5f:f1:30:5e:1f:1b:e8:89:ce:ed:20:53:af:13: b3:3d:51:56:3e:3f:41:04:a9:13:0c:14:fe:56:b6: d4:1a:7f:b2:34:ac:bc:59:13:d1:2b:e6:e8:a9:2a: 90:f3:58:d6:95:11:ee:79:0e:0b:fc:3d:66:e7:3e: 87:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BC:AA:60:8E:D1:3C:D6:D8:00:6B:5E:FD:9A:13:21:8A:05:20:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59205f9e-be67-31b6-8b33-8d851a623090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ae:db:fa:9e:f9:7b:42:d8:c0:7a:90:65:11:57:a2:9a:b1: ef:35:69:ec:25:9e:7d:11:1c:98:bf:66:3b:31:02:26:f8:60: 7a:87:6b:0a:dc:ab:4e:4f:6a:25:26:dd:19:2e:50:fe:06:2a: 3b:f7:0c:e1:00:6e:7b:ca:04:21:7d:24:fc:6c:3f:ee:7a:2f: 8b:9c:25:4f:a8:b7:8e:35:1f:38:84:aa:53:8f:e8:80:26:d7: c9:77:c4:6f:34:34:d3:42:12:a0:f4:1a:4d:c0:3f:26:45:50: 17:cb:e1:41:0c:4d:0e:e5:eb:6c:d4:2d:36:6d:40:5d:4c:c4: c1:2f:67:f5:2d:20:65:2a:97:55:1a:1b:e8:cd:f8:04:65:85: 96:90:ed:8e:fb:93:38:7b:2f:87:bf:80:77:a1:2b:c5:3b:27: fc:84:f0:31:60:37:bc:d3:1a:92:3f:52:e1:bd:ad:f9:bb:21: 48:b6:c7:06:ed:2a:cf:fe:bc:0d:3d:d1:c8:2f:b4:02:fb:7e: 12:cc:78:fd:78:50:59:97:1e:48:4d:53:f7:24:e4:f7:48:fb: 59:5e:dd:af:5c:88:03:88:9f:0d:db:d1:0b:c9:00:a3:5a:7d: 72:80:6f:26:0b:94:a8:8c:69:a6:64:1c:d6:11:bc:1c:d8:49: de:aa:2a:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBFhfdLqPvOtjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk YmZmNDFiNTEtZjhmMC00MGFlLTk4NzgtYjg3NGE1MmE4NjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD6i4bONVbrdkCieOwflVeiiesGl7+r4wfnx WsT2RCWyaNHRSYNLNMy6QhxLYkbUX71bIUGJsPbwyaSQr/Fl/NKKUA7VZtHwfAQq wg9R1GwX4vL7Zp6OVrKji7+4mN744FccYKewwd+JBK226l4ZWNWJHIUvyUkgPjvc BaKuG4nH85kWo109lj0EJ3JFH0HMa8caYcpLwpV+17bZjhytsFXiUBwvY0p9csqF 4Ainh0Rb4jQ2uxo2aoyduWzy/BEkHl+7X/EwXh8b6InO7SBTrxOzPVFWPj9BBKkT DBT+VrbUGn+yNKy8WRPRK+boqSqQ81jWlRHueQ4L/D1m5z6H1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq8qmCO0TzW2ABrXv2aEyGKBSAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTkyMDVmOWUtYmU2Ny0z MWI2LThiMzMtOGQ4NTFhNjIzMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEau2/qe+XtC2MB6kGURV6Kase81aewlnn0RHJi/ZjsxAib4YHqHawrc q05PaiUm3RkuUP4GKjv3DOEAbnvKBCF9JPxsP+56L4ucJU+ot441HziEqlOP6IAm 18l3xG80NNNCEqD0Gk3APyZFUBfL4UEMTQ7l62zULTZtQF1MxMEvZ/UtIGUql1Ua G+jN+ARlhZaQ7Y77kzh7L4e/gHehK8U7J/yE8DFgN7zTGpI/UuG9rfm7IUi2xwbt Ks/+vA090cgvtAL7fhLMeP14UFmXHkhNU/ck5PdI+1le3a9ciAOInw3b0QvJAKNa fXKAbyYLlKiMaaZkHNYRvBzYSd6qKrI= -----END CERTIFICATE-----Generated at Sun Jun 15 19:13:42 2025 by rpki-client