$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7fe65c36-0855-383c-bd31-06995badfc55.roa File: 7fe65c36-0855-383c-bd31-06995badfc55.roa (raw, json) Hash identifier: ppTzSUN7nvc8bIqicwgo+iBOumMiyMRtT/olP+nFHfs= Subject key identifier: A1:54:B1:D6:9B:AD:BD:64:D9:61:5E:6A:41:BE:96:DF:F6:ED:9A:BD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858499294A59612CE075F438F8C80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7fe65c36-0855-383c-bd31-06995badfc55.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 202 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a5:96:12:ce:07:5f:43:8f:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=9e70a5ba-7b9e-4579-8f0d-cb144a3c4ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:ed:96:f4:52:f2:44:9e:ea:3b:da:3d:8c: 77:cb:bc:cf:23:7e:46:b8:4a:c8:3b:42:c1:71:e2: 53:71:7f:ae:e8:11:a1:18:b0:bd:57:76:26:d2:d6: 51:10:8e:ee:15:63:6f:f5:5e:d2:66:65:11:94:f0: c1:01:bb:b2:d3:63:ed:9c:88:d4:10:ab:09:6c:6d: 3c:72:e3:b2:b1:64:c9:35:aa:fb:04:90:87:08:8b: 12:b3:67:f3:5c:fd:79:1d:6f:e5:3a:d9:16:73:93: 81:83:14:7f:c3:40:c3:c3:d2:b7:d0:86:49:0b:34: a8:0f:31:c3:a9:a6:73:20:0c:8f:7c:60:19:e7:02: 25:ac:d6:60:d8:c7:94:3a:6b:a2:b6:2a:48:62:d2: 41:91:c0:a0:96:19:de:13:f8:e9:d8:71:c8:51:42: 9f:20:5b:a2:33:07:b8:b7:dd:29:5f:a2:2c:8a:be: 9f:ed:d7:16:3c:34:cb:26:6c:f7:de:99:b0:f6:27: 98:40:ec:0b:81:f6:67:02:e6:f6:45:8b:99:77:f4: 09:b9:07:bb:28:ce:93:0e:e4:ca:de:5e:3b:35:35: 37:a3:83:c8:2c:74:a3:12:6a:3b:ee:9b:a0:11:2c: 3c:cd:26:c5:71:5a:fa:85:49:7f:92:88:7c:03:e2: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:54:B1:D6:9B:AD:BD:64:D9:61:5E:6A:41:BE:96:DF:F6:ED:9A:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7fe65c36-0855-383c-bd31-06995badfc55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:28:45:43:cd:f7:b9:3e:85:4b:8f:e2:1b:b1:38:14:f8:00: 1e:69:ee:e6:16:1a:ee:9f:e3:e4:77:99:11:be:ed:35:df:02: 3c:58:8f:da:b8:4a:ba:12:8a:44:48:f1:77:81:0f:24:56:c7: fe:ed:91:47:e5:bd:49:6c:f3:ab:e1:e3:86:7e:0f:34:5d:4e: 34:da:de:0a:f1:26:72:8a:28:c5:81:36:30:ff:9e:21:ef:db: b8:c1:98:ac:a0:45:d0:eb:a9:29:fb:0a:43:72:f9:d8:bf:9a: 39:1b:40:fd:49:d2:42:11:ef:5b:e5:5b:26:75:8e:7d:87:94: 4b:17:23:2b:34:a7:94:bd:c6:75:8f:ec:1b:f2:d7:38:8c:60: 7f:e1:37:20:9e:ce:08:a8:0d:56:29:1c:52:87:4a:97:14:70: 03:45:76:72:20:61:86:5a:f0:dd:62:a7:0f:44:cd:c0:b9:79: ea:c5:24:11:81:e4:f1:27:1d:e2:63:68:25:47:60:e4:b1:40: bd:a7:fb:71:05:bd:77:19:96:c5:f7:c3:9a:51:d3:d6:fc:79: 0f:a8:f3:51:79:6a:78:c3:f0:e6:98:de:3b:b2:3b:50:b3:92: 94:ce:0f:01:0d:1f:77:f9:8d:d3:1b:ec:da:3d:7a:28:b6:d2: 9f:bd:5c:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKWWEs4HX0OPjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk OWU3MGE1YmEtN2I5ZS00NTc5LThmMGQtY2IxNDRhM2M0ZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrXtlvRS8kSe6jvaPYx3y7zPI35GuErIO0LB ceJTcX+u6BGhGLC9V3Ym0tZREI7uFWNv9V7SZmURlPDBAbuy02PtnIjUEKsJbG08 cuOysWTJNar7BJCHCIsSs2fzXP15HW/lOtkWc5OBgxR/w0DDw9K30IZJCzSoDzHD qaZzIAyPfGAZ5wIlrNZg2MeUOmuitipIYtJBkcCglhneE/jp2HHIUUKfIFuiMwe4 t90pX6Isir6f7dcWPDTLJmz33pmw9ieYQOwLgfZnAub2RYuZd/QJuQe7KM6TDuTK 3l47NTU3o4PILHSjEmo77pugESw8zSbFcVr6hUl/koh8A+IgBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFUsdabrb1k2WFeakG+lt/27Zq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2ZlNjVjMzYtMDg1NS0z ODNjLWJkMzEtMDY5OTViYWRmYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4oRUPN97k+hUuP4huxOBT4AB5p7uYWGu6f4+R3mRG+7TXfAjxYj9q4 SroSikRI8XeBDyRWx/7tkUflvUls86vh44Z+DzRdTjTa3grxJnKKKMWBNjD/niHv 27jBmKygRdDrqSn7CkNy+di/mjkbQP1J0kIR71vlWyZ1jn2HlEsXIys0p5S9xnWP 7Bvy1ziMYH/hNyCezgioDVYpHFKHSpcUcANFdnIgYYZa8N1ipw9EzcC5eerFJBGB 5PEnHeJjaCVHYOSxQL2n+3EFvXcZlsX3w5pR09b8eQ+o81F5anjD8OaY3juyO1Cz kpTODwENH3f5jdMb7No9eii20p+9XBI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:26:58 2025 by rpki-client