$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa File: 66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa (raw, json) Hash identifier: boNmXlZCYNjegr3mn//awNG5syA1iS+8mHzdlz3bAWE= Subject key identifier: 0B:BC:0C:AB:D3:95:DB:74:52:A9:99:9D:D3:84:F5:2F:71:06:EB:3C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584975445D70B7B78473471E1280 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 3356 IP address blocks: 20.137.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:5d:70:b7:b7:84:73:47:1e:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=dbef7edb-c614-40d7-8199-114773328cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9c:59:1a:3e:1d:e8:e4:2e:62:fc:f5:03:72: aa:c6:58:40:f9:87:4c:f9:24:47:3d:58:0e:31:02: 6f:af:df:5f:55:8d:64:33:c7:ea:d9:74:1b:24:85: f3:d0:31:60:95:72:0e:fa:f4:b5:eb:a9:b7:fd:38: 18:1c:18:9b:8d:07:70:86:ed:2b:60:27:55:7d:80: 41:f7:1d:1b:95:d8:27:3f:19:8e:62:46:59:33:cd: d4:2c:9b:95:e7:43:38:9d:33:f2:1e:1c:f1:1c:38: 21:c4:21:41:21:0d:7a:87:2d:c2:62:a7:fd:30:6f: fb:20:d8:fa:1f:50:22:3c:02:4d:19:fb:e5:0d:c7: c7:0e:ca:ee:a4:82:77:e8:73:6e:38:bf:24:7a:de: dd:56:9c:84:56:7e:cc:46:de:8e:67:f1:db:5a:e0: 1f:ed:96:cc:0d:e3:2d:c7:15:6d:d8:5e:e5:46:17: a0:92:a5:3b:44:05:6c:7f:93:9c:5f:d1:a9:24:cf: bc:91:36:00:5d:1d:26:96:70:34:43:a1:5b:3e:19: b8:68:79:49:c8:8a:e4:66:d4:ea:bd:a1:61:2d:df: 9c:16:5f:5f:73:5e:28:a5:a1:a3:18:c0:36:9b:8e: 25:81:ca:ed:a9:56:eb:f5:e7:c9:e9:51:36:39:b4: 1b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BC:0C:AB:D3:95:DB:74:52:A9:99:9D:D3:84:F5:2F:71:06:EB:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c2:47:aa:86:f9:70:ec:55:b1:3e:52:0f:2d:65:6f:f9:b4: 89:d7:95:92:25:3c:7c:ba:4b:0e:d4:19:d9:5f:46:8b:36:75: a8:5a:4f:4a:9b:e7:72:db:58:60:e4:5f:1e:ed:f6:90:82:cc: e9:10:9a:17:fd:87:19:5b:e6:4f:ff:72:db:22:53:dd:6e:e3: 87:15:c2:14:e7:9c:13:fe:a8:bc:13:39:68:31:eb:16:2d:52: b6:0f:de:a9:bc:00:29:f5:c4:68:ca:23:bb:be:31:b2:96:c7: b4:1b:be:81:ac:5f:a0:03:cd:f4:6b:d7:ef:db:69:88:c1:27: 04:a3:af:3c:ad:fe:eb:b8:73:24:56:7b:72:3f:94:f6:dc:0b: e0:e3:fd:31:56:be:59:15:d0:3a:52:3d:85:dd:8a:aa:dd:b1: 79:05:ab:90:61:ff:06:18:03:8d:ca:c3:8b:c1:9c:ca:6f:b8: 83:b9:73:fb:2a:8d:19:f3:eb:80:6a:e8:62:c2:ec:2b:44:26: 6a:bf:36:42:5a:98:74:be:e8:88:36:dd:d3:c4:fd:94:fa:bf: 21:43:f5:b3:b6:5e:f5:ff:e4:c9:75:7a:ee:f4:3e:28:1e:69: e0:df:64:0f:3a:65:fb:3d:13:1f:dc:cb:da:cd:7f:1c:11:90: e4:7c:a1:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RF1wt7eEc0ceEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk ZGJlZjdlZGItYzYxNC00MGQ3LTgxOTktMTE0NzczMzI4Y2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5xZGj4d6OQuYvz1A3KqxlhA+YdM+SRHPVgO MQJvr99fVY1kM8fq2XQbJIXz0DFglXIO+vS166m3/TgYHBibjQdwhu0rYCdVfYBB 9x0bldgnPxmOYkZZM83ULJuV50M4nTPyHhzxHDghxCFBIQ16hy3CYqf9MG/7INj6 H1AiPAJNGfvlDcfHDsrupIJ36HNuOL8ket7dVpyEVn7MRt6OZ/HbWuAf7ZbMDeMt xxVt2F7lRhegkqU7RAVsf5OcX9GpJM+8kTYAXR0mlnA0Q6FbPhm4aHlJyIrkZtTq vaFhLd+cFl9fc14opaGjGMA2m44lgcrtqVbr9efJ6VE2ObQbMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAu8DKvTldt0UqmZndOE9S9xBus8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjZhM2M5MzQtYThhZS0z OWM2LTllMDctOTU3OTRiNjNiOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFInwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDCR6qG+XDsVbE+Ug8tZW/5tInXlZIlPHy6Sw7UGdlfRos2dahaT0qb 53LbWGDkXx7t9pCCzOkQmhf9hxlb5k//ctsiU91u44cVwhTnnBP+qLwTOWgx6xYt UrYP3qm8ACn1xGjKI7u+MbKWx7QbvoGsX6ADzfRr1+/baYjBJwSjrzyt/uu4cyRW e3I/lPbcC+Dj/TFWvlkV0DpSPYXdiqrdsXkFq5Bh/wYYA43Kw4vBnMpvuIO5c/sq jRnz64Bq6GLC7CtEJmq/NkJamHS+6Ig23dPE/ZT6vyFD9bO2XvX/5Ml1eu70Pige aeDfZA86Zfs9Ex/cy9rNfxwRkOR8ob4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:40 2025 by rpki-client