$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa File: 89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa (raw, json) Hash identifier: kXtSUNXH6sXcCB8mWOZuRfMKeeu76IY9ngpQ4kw41JQ= Subject key identifier: 56:CD:44:60:A1:CE:A2:8C:E1:82:28:54:06:F0:1A:B4:6F:A4:07:2D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A23C01147FE5714CA11464CC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 3360 IP address blocks: 20.134.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:11:47:fe:57:14:ca:11:46:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=355328e0-c765-41e9-98af-4a3f413aa106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6b:b1:cb:ee:39:81:d1:60:f1:4e:ca:7b:a2: 40:ac:ae:64:e1:bf:56:e4:60:75:f5:ef:7e:56:4d: 31:13:93:85:e0:cf:b0:8c:8a:51:76:ec:b0:5f:07: 1f:dc:2b:a1:7a:c5:b4:fa:cb:b3:11:e4:26:11:bb: a5:10:8d:b9:ae:4e:ea:12:bb:fb:8e:11:ad:45:f3: 32:a9:e1:33:9b:d5:9f:ca:9e:20:7b:93:b2:7e:44: 54:e0:0b:df:4a:d0:ed:15:8a:22:f9:1f:ea:22:2a: 4f:18:10:dd:da:4f:64:47:5d:0e:87:f2:c2:80:6d: ab:0e:7e:c9:c0:71:85:6c:25:41:2b:b6:cd:d8:2c: f5:2a:02:d6:ff:ff:32:10:10:b5:1c:04:40:1a:98: f2:e0:26:b7:24:08:86:bb:63:0f:14:3e:74:85:8e: 5b:fb:b1:bb:46:42:5c:34:65:99:70:d0:e2:1f:81: 0a:cc:9d:df:e1:40:48:a8:fe:ae:3d:a4:4a:cd:4a: 38:de:c9:8e:7a:65:a9:b7:51:ec:aa:b9:8a:bf:1d: 5f:31:c8:77:69:de:82:3d:3d:1d:69:66:56:38:43: 41:57:c2:4e:d8:a2:e2:c9:f4:c5:c3:dc:62:21:1e: 7e:02:ff:c0:8c:24:c8:75:99:6b:d8:b0:ad:87:45: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CD:44:60:A1:CE:A2:8C:E1:82:28:54:06:F0:1A:B4:6F:A4:07:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:ac:4d:58:ee:f0:29:43:f8:bd:ad:9a:49:8a:98:42:64:0f: c8:8b:02:d0:4d:a8:93:50:c7:d3:cc:98:04:c5:31:6c:ce:27: 90:d6:6c:c0:22:a3:4f:0f:7c:6f:16:77:cf:83:ed:4b:5f:d8: 59:10:2e:7b:f4:84:53:15:ef:73:89:39:fd:d1:a2:78:72:dd: 08:3e:4a:0c:c8:b0:fd:c7:31:b9:35:e0:ad:6f:4e:ce:3f:44: 8a:cb:c4:42:d3:7c:61:d4:2f:e5:3a:31:6f:6a:b9:8c:2c:db: 7f:4d:60:b6:c4:53:10:b6:6a:ed:b7:d5:d7:fb:0f:a8:48:7d: 96:37:a0:3f:55:f3:40:c5:b2:a2:0c:a1:ed:94:ab:b8:5a:a3: 82:28:dc:3d:86:0c:ba:b5:df:87:35:1c:dc:a5:77:8d:cc:f0: 0f:49:37:16:c4:7a:7e:26:c5:3d:72:18:6e:92:8c:f0:95:3c: 4f:ca:65:01:4d:2e:a4:dd:71:73:49:39:dc:2c:29:23:92:11: 85:60:dd:1f:eb:99:86:68:5e:11:c3:cf:c3:d4:55:a3:9c:63: 1d:61:17:3d:ca:af:39:8f:98:07:36:28:f6:9c:22:83:8a:d2: 4a:b7:73:d4:a4:7e:8e:8e:49:fa:d8:1d:eb:17:23:cf:dd:47: 0a:1d:f8:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBFH/lcUyhFGTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk MzU1MzI4ZTAtYzc2NS00MWU5LTk4YWYtNGEzZjQxM2FhMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wuxy+45gdFg8U7Ke6JArK5k4b9W5GB19e9+ Vk0xE5OF4M+wjIpRduywXwcf3CuhesW0+suzEeQmEbulEI25rk7qErv7jhGtRfMy qeEzm9Wfyp4ge5OyfkRU4AvfStDtFYoi+R/qIipPGBDd2k9kR10Oh/LCgG2rDn7J wHGFbCVBK7bN2Cz1KgLW//8yEBC1HARAGpjy4Ca3JAiGu2MPFD50hY5b+7G7RkJc NGWZcNDiH4EKzJ3f4UBIqP6uPaRKzUo43smOemWpt1HsqrmKvx1fMch3ad6CPT0d aWZWOENBV8JO2KLiyfTFw9xiIR5+Av/AjCTIdZlr2LCth0VJzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbNRGChzqKM4YIoVAbwGrRvpActMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODlkMzNjMmMtY2M2ZC0z ZmZkLWFiYmQtNjNmNDU5ZDQ0ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqsTVju8ClD+L2tmkmKmEJkD8iLAtBNqJNQx9PMmATFMWzOJ5DWbMAi o08PfG8Wd8+D7Utf2FkQLnv0hFMV73OJOf3Ronhy3Qg+SgzIsP3HMbk14K1vTs4/ RIrLxELTfGHUL+U6MW9quYws239NYLbEUxC2au231df7D6hIfZY3oD9V80DFsqIM oe2Uq7hao4Io3D2GDLq134c1HNyld43M8A9JNxbEen4mxT1yGG6SjPCVPE/KZQFN LqTdcXNJOdwsKSOSEYVg3R/rmYZoXhHDz8PUVaOcYx1hFz3KrzmPmAc2KPacIoOK 0kq3c9Skfo6OSfrYHesXI8/dRwod+GE= -----END CERTIFICATE-----Generated at Sun Jun 15 20:49:17 2025 by rpki-client