$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa File: 59c44230-ec55-3638-8a91-87a24d084422.roa (raw, json) Hash identifier: pQLn0mJSaPa4yOPzgwhtr5hyGSu0dGIRXD7CD4Zt6nQ= Subject key identifier: 2A:9F:CB:A0:3F:7C:9F:35:B2:09:5D:A6:65:8C:39:62:54:27:D3:6E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849244E6F2849460DA41D773A78 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.137.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:6f:28:49:46:0d:a4:1d:77:3a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=4ea796de-7a31-4df4-bcfc-d07c05773a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:c2:cc:74:28:e3:d3:f9:26:52:0a:d8:2c: ae:be:0e:2b:d1:96:7f:d3:15:72:0e:9a:95:bb:66: e1:1a:e0:54:5f:0c:66:55:39:90:09:00:8e:46:9a: a4:f8:ca:41:85:2f:11:59:b0:1a:19:d9:fd:db:11: 3b:d6:08:c7:d0:71:74:1e:ed:7a:e1:f3:c8:73:c4: 2b:46:6b:97:13:55:ea:c8:62:d5:96:4b:77:55:1e: 9b:0e:9c:ea:5b:58:6f:f7:cd:79:e8:52:5d:50:2f: d5:90:2a:16:58:31:bf:6a:42:eb:2d:85:0c:d7:71: d5:37:69:f1:77:ca:fb:41:da:23:19:3d:58:7e:e4: a6:c3:cb:5f:74:80:79:cb:21:ae:b4:c8:1a:be:b9: b7:79:11:16:b1:54:c6:03:3e:16:31:80:34:cd:de: e2:09:87:5a:c3:74:7c:82:c0:88:48:1e:e0:61:04: a7:52:d8:b2:a7:f6:2e:0b:27:c2:b6:5f:90:a1:ad: 89:ae:9b:12:7e:9b:bd:18:b9:9a:a3:29:f6:20:0f: e8:d0:78:ab:91:5f:9f:38:14:71:59:43:2a:4b:49: 7a:4f:c8:d4:3e:17:a5:e2:8a:be:a7:0b:00:58:f9: 32:a6:cc:c9:84:5a:15:4e:f6:30:41:0b:e9:77:bc: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9F:CB:A0:3F:7C:9F:35:B2:09:5D:A6:65:8C:39:62:54:27:D3:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:5f:51:a9:48:bd:e6:f8:c4:57:88:d7:15:b4:68:71:4d:74: 11:a3:cf:db:7d:24:aa:16:01:e0:b6:e7:d6:aa:02:6c:23:7f: 9a:d6:83:5a:5b:26:61:ea:02:7b:d4:9c:b0:1f:ad:d2:d6:09: e8:67:ad:cc:a8:42:13:0d:8b:d1:6a:1d:2f:e4:80:a1:76:cc: d7:fa:5b:b8:36:9b:c7:84:64:57:6b:fb:aa:f6:73:4a:b8:e1: 4b:3c:67:f3:f0:d1:8d:63:77:e8:78:01:82:f0:be:12:2f:96: 8b:04:3f:d5:16:b6:26:67:69:42:7e:90:64:d0:75:a4:ef:c1: dd:ff:e6:f8:14:74:23:28:f5:d5:f9:8d:00:8c:29:7a:8d:59: 53:ed:79:55:d9:0a:51:58:68:46:9f:6c:af:08:3c:af:08:9d: e9:71:c0:ab:52:d9:6d:16:f4:88:ce:7e:f0:bc:30:3d:06:82: 2e:61:ec:e3:0c:31:55:5c:85:8b:21:45:2c:3e:01:14:14:8b: d6:94:a7:21:82:3b:80:03:ca:69:61:aa:df:54:17:62:6e:ea: 56:07:cd:a2:2c:4d:aa:cb:93:b3:1f:1a:ab:4b:d5:e9:93:01: a6:dd:ff:84:dc:3a:1b:bf:c3:84:63:66:d9:31:c1:29:e5:bb: 31:90:32:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTm8oSUYNpB13OngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NGVhNzk2ZGUtN2EzMS00ZGY0LWJjZmMtZDA3YzA1NzczYTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9DCzHQo49P5JlIK2Cyuvg4r0ZZ/0xVyDpqV u2bhGuBUXwxmVTmQCQCORpqk+MpBhS8RWbAaGdn92xE71gjH0HF0Hu164fPIc8Qr RmuXE1XqyGLVlkt3VR6bDpzqW1hv98156FJdUC/VkCoWWDG/akLrLYUM13HVN2nx d8r7QdojGT1YfuSmw8tfdIB5yyGutMgavrm3eREWsVTGAz4WMYA0zd7iCYdaw3R8 gsCISB7gYQSnUtiyp/YuCyfCtl+Qoa2JrpsSfpu9GLmaoyn2IA/o0HirkV+fOBRx WUMqS0l6T8jUPhel4oq+pwsAWPkypszJhFoVTvYwQQvpd7yygwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqfy6A/fJ81sgldpmWMOWJUJ9NuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTljNDQyMzAtZWM1NS0z NjM4LThhOTEtODdhMjRkMDg0NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhfUalIveb4xFeI1xW0aHFNdBGjz9t9JKoWAeC259aqAmwjf5rWg1pb JmHqAnvUnLAfrdLWCehnrcyoQhMNi9FqHS/kgKF2zNf6W7g2m8eEZFdr+6r2c0q4 4Us8Z/Pw0Y1jd+h4AYLwvhIvlosEP9UWtiZnaUJ+kGTQdaTvwd3/5vgUdCMo9dX5 jQCMKXqNWVPteVXZClFYaEafbK8IPK8InelxwKtS2W0W9IjOfvC8MD0Ggi5h7OMM MVVchYshRSw+ARQUi9aUpyGCO4ADymlhqt9UF2Ju6lYHzaIsTarLk7MfGqtL1emT Aabd/4TcOhu/w4RjZtkxwSnluzGQMow= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:39 2025 by rpki-client