$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7391e80e-1609-311c-b39c-9832fb7cfa4f.roa File: 7391e80e-1609-311c-b39c-9832fb7cfa4f.roa (raw, json) Hash identifier: fEFrgiHTbZtUxFVAYLiHVqG2uM11cFZaaSaChmlwn/k= Subject key identifier: A9:F5:D3:32:17:36:01:89:99:C0:3E:70:94:7F:87:4A:A0:D4:DB:5A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D944974D2B48724C4B35B280 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7391e80e-1609-311c-b39c-9832fb7cfa4f.roa Signing time: Tue 11 Feb 2025 15:55:30 +0000 ROA not before: Tue 11 Feb 2025 15:55:30 +0000 ROA not after: Mon 12 May 2025 14:55:30 +0000 asID: 3360 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:44:97:4d:2b:48:72:4c:4b:35:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 15:55:30 2025 GMT Not After : May 12 14:55:30 2025 GMT Subject: CN=e44da22e-d5a3-453f-93d9-d9d580ac92d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1d:9c:25:01:e3:8e:a3:a8:a5:44:a0:71:c7: a7:01:86:41:16:e8:96:15:03:eb:2a:8e:ea:31:87: 1c:bc:03:7b:fb:c7:71:d1:3c:43:be:4f:72:49:25: 5d:0b:4f:09:91:c8:d9:55:50:5e:fe:58:54:8f:cb: 1f:40:af:3f:67:04:96:c8:00:9d:b0:76:5e:c6:3f: c7:83:b9:36:34:93:ad:5f:11:39:91:4c:c1:e3:77: b2:14:63:11:dc:d8:b3:47:bb:19:0d:85:4b:14:36: d1:c7:c8:b7:7f:b0:56:a6:ab:b9:ee:72:28:41:fb: 6d:ae:ef:78:31:42:a7:88:0e:9f:82:09:95:96:86: 21:6f:55:ed:c3:8c:2d:97:2d:1f:8c:9c:e7:0c:d9: 75:7a:17:ca:79:45:4f:69:cf:87:3b:37:03:45:88: f7:50:3a:05:3d:c8:8e:1d:3f:03:d2:10:5d:05:e2: 46:96:dd:32:a7:eb:73:c0:bf:fd:55:16:0d:e4:d3: e6:fa:66:dd:7a:51:65:95:11:7c:b6:ae:12:73:23: 9b:5d:15:8e:82:81:c7:fa:6b:35:ca:5b:08:c2:90: 0e:ed:89:c6:46:70:e4:a0:23:eb:83:74:7d:03:fc: 8b:78:25:c9:fa:aa:f4:f6:10:e6:ff:d3:7c:44:1a: 5e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F5:D3:32:17:36:01:89:99:C0:3E:70:94:7F:87:4A:A0:D4:DB:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7391e80e-1609-311c-b39c-9832fb7cfa4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b1:44:d5:c9:2d:bf:4e:99:ce:5f:b5:55:2b:dd:be:c6:25: 18:66:bb:3d:fc:f9:1a:da:90:38:86:89:48:b4:2c:d2:6f:dc: 7f:8b:e1:59:42:58:99:b4:6e:01:c3:8f:ca:aa:f1:b3:f9:d4: 62:f2:c9:9c:97:bf:aa:bd:13:fe:02:1e:7b:74:9a:8b:b3:d1: c6:bf:65:da:3e:30:78:e3:08:39:09:4a:bf:9b:31:aa:87:52: 9c:79:a5:33:38:e8:37:88:35:8d:06:b8:e9:99:c1:d9:bb:84: 70:e9:1a:76:f7:0d:1d:fc:4c:84:49:b2:a0:49:81:12:e0:07: 4c:db:49:79:3e:e2:c1:9a:97:10:92:e2:0f:3d:d1:1a:05:a7: 83:f6:0d:a0:60:b0:1f:72:28:8b:84:b6:75:66:96:f2:8e:9e: 97:2c:24:3e:2f:39:84:64:bd:b6:22:4d:08:c4:1f:53:02:98: 1a:16:2f:62:f1:8a:cc:a0:b0:56:fd:1d:27:88:c0:82:9a:c5: 14:d4:e0:cd:57:ec:9c:d5:5b:6b:8d:c9:2c:10:66:cf:ab:13: e5:c4:9c:f0:38:6f:41:1d:d5:0c:18:16:93:ab:c3:4d:c0:e7: 13:80:d6:4a:c6:c1:9d:68:69:48:b6:b6:e2:f2:c0:97:63:5d: 85:43:fe:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZRJdNK0hyTEs1soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE1NTUzMFoXDTI1MDUxMjE0NTUzMFowLzEtMCsGA1UEAxMk ZTQ0ZGEyMmUtZDVhMy00NTNmLTkzZDktZDlkNTgwYWM5MmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih2cJQHjjqOopUSgccenAYZBFuiWFQPrKo7q MYccvAN7+8dx0TxDvk9ySSVdC08JkcjZVVBe/lhUj8sfQK8/ZwSWyACdsHZexj/H g7k2NJOtXxE5kUzB43eyFGMR3NizR7sZDYVLFDbRx8i3f7BWpqu57nIoQfttru94 MUKniA6fggmVloYhb1Xtw4wtly0fjJznDNl1ehfKeUVPac+HOzcDRYj3UDoFPciO HT8D0hBdBeJGlt0yp+tzwL/9VRYN5NPm+mbdelFllRF8tq4ScyObXRWOgoHH+ms1 ylsIwpAO7YnGRnDkoCPrg3R9A/yLeCXJ+qr09hDm/9N8RBpe7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn10zIXNgGJmcA+cJR/h0qg1NtaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzM5MWU4MGUtMTYwOS0z MTFjLWIzOWMtOTgzMmZiN2NmYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASxRNXJLb9Omc5ftVUr3b7GJRhmuz38+RrakDiGiUi0LNJv3H+L4VlC WJm0bgHDj8qq8bP51GLyyZyXv6q9E/4CHnt0mouz0ca/Zdo+MHjjCDkJSr+bMaqH Upx5pTM46DeINY0GuOmZwdm7hHDpGnb3DR38TIRJsqBJgRLgB0zbSXk+4sGalxCS 4g890RoFp4P2DaBgsB9yKIuEtnVmlvKOnpcsJD4vOYRkvbYiTQjEH1MCmBoWL2Lx isygsFb9HSeIwIKaxRTU4M1X7JzVW2uNySwQZs+rE+XEnPA4b0Ed1QwYFpOrw03A 5xOA1krGwZ1oaUi2tuLywJdjXYVD/vE= -----END CERTIFICATE-----Generated at Mon Apr 28 15:12:49 2025 by rpki-client