$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/775e95ad-166a-34bd-b074-07d8661b799e.roa File: 775e95ad-166a-34bd-b074-07d8661b799e.roa (raw, json) Hash identifier: nwqphg5Utg1U2xVAeIT7Cgj0RGhAHaFIoztwIVtbM3o= Subject key identifier: 10:28:D6:10:FC:1A:BD:96:52:46:77:6C:41:AE:70:6A:4A:F6:15:64 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584975445D43AD0AF1D63A839399 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/775e95ad-166a-34bd-b074-07d8661b799e.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 202 IP address blocks: 20.137.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:5d:43:ad:0a:f1:d6:3a:83:93:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=5da73bc7-83fb-4235-8f82-9d2ba9d85c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:d9:a8:cc:65:4c:4d:69:eb:2b:7b:5d:c9: 82:c1:7c:90:cb:cf:05:2d:74:d1:9b:03:72:eb:3c: cb:e2:fd:ec:5d:09:43:ba:a6:0b:77:01:51:5c:a3: 18:07:15:30:b7:ec:56:34:b6:f5:4a:44:fc:01:6d: 7d:73:2e:0e:95:48:1e:16:3a:19:09:3c:44:bf:b2: 0b:ce:74:14:ab:c9:33:c9:80:8c:8f:2f:20:03:8a: a7:3b:cd:f1:86:40:19:a3:5a:c7:8d:3f:5e:ac:d7: 17:16:a7:32:15:8a:ab:ff:da:b6:da:66:0c:62:e6: 8f:b4:91:0c:56:8a:d6:ea:1a:d3:89:74:ae:8f:75: 3e:70:ce:e1:0b:1f:eb:85:f0:74:33:a2:c4:1b:39: 22:ab:08:c2:ee:15:4c:67:2b:a9:49:c6:53:b0:72: 8f:01:23:2d:12:62:2e:18:fd:e6:bb:2d:b9:97:4b: 13:1b:1a:b0:34:8d:e1:54:95:3a:6d:fe:b4:e0:db: 6e:c2:73:5e:27:18:e2:cc:c6:f6:5c:d1:7b:70:0f: 73:87:cc:0a:42:0f:04:5e:04:00:c3:5d:a6:62:d5: e7:2d:3a:e0:af:b1:eb:19:06:17:0c:6d:8d:ca:0a: 37:4e:c6:0d:b7:c7:7b:79:47:48:a8:3c:29:bb:b7: 3e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:28:D6:10:FC:1A:BD:96:52:46:77:6C:41:AE:70:6A:4A:F6:15:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/775e95ad-166a-34bd-b074-07d8661b799e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:31:93:fa:3c:23:89:5c:52:a6:e0:ca:4e:39:89:da:02:3c: 81:16:3e:af:12:59:35:83:8c:3b:c0:30:51:52:44:ec:64:52: ec:0d:05:28:41:b8:24:d0:66:26:fd:a8:b2:f0:5d:83:4b:1c: ae:b3:ac:04:b0:bd:a3:8b:6a:e8:8b:76:6d:c6:39:51:68:e9: fe:16:5e:c8:f4:86:3e:da:0a:48:99:90:eb:6a:e3:b4:13:27: 0e:53:02:10:f6:e7:2d:27:50:4f:22:16:bb:a9:5f:17:58:50: f0:54:60:37:b5:1e:1a:d5:34:2c:ca:1e:c7:32:7c:98:10:26: c6:ba:53:35:05:df:9e:31:2a:93:eb:ff:40:05:6e:da:2f:66: f8:a4:78:3d:bc:ad:d9:e4:c0:c9:cc:1b:a6:5e:81:a7:8d:8f: 11:f8:90:9f:b1:cc:a2:bd:a7:22:7c:5b:59:4b:19:17:8a:c6: c4:1b:75:6f:0b:aa:7b:ec:21:4b:51:dc:a3:71:77:fc:b3:f9: 86:25:d7:e6:9b:7d:e5:10:76:8d:fb:d7:a1:71:bc:cb:48:ba: 28:c1:1a:3e:2b:9a:4b:1b:6c:ec:76:31:bd:86:91:bd:61:a9: 6b:23:95:92:8e:95:b7:e8:55:53:6c:70:40:24:64:3f:81:79: 85:91:fb:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RF1DrQrx1jqDk5kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NWRhNzNiYzctODNmYi00MjM1LThmODItOWQyYmE5ZDg1YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLnZqMxlTE1p6yt7XcmCwXyQy88FLXTRmwNy 6zzL4v3sXQlDuqYLdwFRXKMYBxUwt+xWNLb1SkT8AW19cy4OlUgeFjoZCTxEv7IL znQUq8kzyYCMjy8gA4qnO83xhkAZo1rHjT9erNcXFqcyFYqr/9q22mYMYuaPtJEM VorW6hrTiXSuj3U+cM7hCx/rhfB0M6LEGzkiqwjC7hVMZyupScZTsHKPASMtEmIu GP3muy25l0sTGxqwNI3hVJU6bf604NtuwnNeJxjizMb2XNF7cA9zh8wKQg8EXgQA w12mYtXnLTrgr7HrGQYXDG2Nygo3TsYNt8d7eUdIqDwpu7c+wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAo1hD8Gr2WUkZ3bEGucGpK9hVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzc1ZTk1YWQtMTY2YS0z NGJkLWIwNzQtMDdkODY2MWI3OTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUxk/o8I4lcUqbgyk45idoCPIEWPq8SWTWDjDvAMFFSROxkUuwNBShB uCTQZib9qLLwXYNLHK6zrASwvaOLauiLdm3GOVFo6f4WXsj0hj7aCkiZkOtq47QT Jw5TAhD25y0nUE8iFrupXxdYUPBUYDe1HhrVNCzKHscyfJgQJsa6UzUF354xKpPr /0AFbtovZvikeD28rdnkwMnMG6ZegaeNjxH4kJ+xzKK9pyJ8W1lLGReKxsQbdW8L qnvsIUtR3KNxd/yz+YYl1+abfeUQdo3716FxvMtIuijBGj4rmksbbOx2Mb2Gkb1h qWsjlZKOlbfoVVNscEAkZD+BeYWR+/U= -----END CERTIFICATE-----Generated at Sat Apr 26 19:30:12 2025 by rpki-client