$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa File: a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa (raw, json) Hash identifier: IToyvLHx4S+/vlRBYbojpTi1131fHUWH9XBHOtIiL+o= Subject key identifier: 23:08:D0:AF:73:30:58:C9:65:0F:D2:EA:69:C5:59:CE:8E:83:26:B8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE93A33B4882DB47E60A80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:93:a3:3b:48:82:db:47:e6:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=4b371875-dfff-4ed6-b69b-7978c223f297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:6f:59:82:21:09:9f:43:a3:c2:ef:88:97: 1f:43:b8:16:26:72:ae:33:6a:2f:e4:a3:26:33:e0: c9:b7:5b:f2:4a:6f:a4:ae:b2:98:93:29:e6:af:ae: 4e:16:a6:03:e3:b3:73:41:c9:23:e7:9f:bf:18:d2: bd:0e:63:9f:6c:9c:ab:a7:d0:aa:80:1d:64:07:ab: b0:0c:ea:8b:65:6c:47:ae:01:6f:ee:89:23:d9:3a: fa:89:37:cf:b6:fe:f9:81:aa:06:ee:60:ff:9f:e6: 61:6e:fe:d8:c5:cb:9f:5a:9a:c8:0d:fe:a4:12:52: be:54:a0:6d:84:c6:0e:31:1f:fd:55:7e:de:7c:b6: b7:ef:6b:1d:18:d4:00:22:79:c4:3c:35:4a:c2:80: 3a:9f:b1:87:73:dd:db:8d:2a:a9:34:9a:c4:d3:7d: 57:c6:0a:bf:8d:7d:5f:9c:1e:0e:63:ab:76:d6:73: f5:38:e1:4c:27:df:02:92:78:22:ea:e7:5f:d1:5d: 07:59:ec:be:b1:50:fe:38:a9:63:80:92:fd:3d:4d: 2f:ac:a2:c4:51:56:4f:45:c7:03:c5:33:58:66:93: 44:31:46:b1:b9:a4:7b:12:d6:39:f6:cb:b9:26:c6: 20:9d:53:6c:90:f5:12:58:74:74:1f:32:9e:d6:3a: f6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:08:D0:AF:73:30:58:C9:65:0F:D2:EA:69:C5:59:CE:8E:83:26:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7c:b3:6d:d1:b0:85:1c:ed:7a:8b:00:37:44:18:a8:8a:8a: a8:21:0f:c3:89:37:a7:b2:62:a8:01:c0:34:d0:47:f5:30:87: f7:00:e7:f7:34:5a:2a:53:9e:10:4c:94:34:af:76:a4:5e:42: 13:ef:db:0c:cd:ad:53:80:e4:ad:44:94:df:53:75:b0:98:dc: 9d:29:10:85:55:28:6e:17:3a:6d:c8:9c:5a:ec:4c:74:cb:51: 7e:d6:a9:29:43:8f:0d:e7:d0:b1:df:1b:3f:a0:29:df:de:d8: e9:bf:e8:8b:f3:48:39:6a:d1:a9:9a:ba:3d:b6:ab:08:ac:0c: 23:38:43:62:05:85:a8:a9:f9:90:1e:94:34:00:e5:46:63:b9: 4a:39:74:57:41:25:eb:b7:64:94:de:7d:57:ff:99:64:83:70: 9f:f1:7c:f0:0f:44:91:3c:32:3d:ab:04:9e:ab:02:76:d9:12: 4a:f0:3b:5d:70:c9:ce:c4:e6:5b:52:4f:cc:18:b3:74:41:ff: 66:a8:f4:a8:63:f3:3d:0d:3e:f5:d7:c9:32:73:03:13:17:89: 00:92:74:a6:a3:c1:b8:33:30:72:da:1b:c4:df:f4:d2:95:af: 76:18:cc:7f:cf:1c:57:0d:b8:63:a3:aa:e9:24:24:fc:08:90: bb:c7:ab:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpOjO0iC20fmCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NGIzNzE4NzUtZGZmZi00ZWQ2LWI2OWItNzk3OGMyMjNmMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg9vWYIhCZ9Do8LviJcfQ7gWJnKuM2ov5KMm M+DJt1vySm+krrKYkynmr65OFqYD47NzQckj55+/GNK9DmOfbJyrp9CqgB1kB6uw DOqLZWxHrgFv7okj2Tr6iTfPtv75gaoG7mD/n+Zhbv7YxcufWprIDf6kElK+VKBt hMYOMR/9VX7efLa372sdGNQAInnEPDVKwoA6n7GHc93bjSqpNJrE031Xxgq/jX1f nB4OY6t21nP1OOFMJ98Ckngi6udf0V0HWey+sVD+OKljgJL9PU0vrKLEUVZPRccD xTNYZpNEMUaxuaR7EtY59su5JsYgnVNskPUSWHR0HzKe1jr2vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMI0K9zMFjJZQ/S6mnFWc6Ogya4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTEwYTA2NDYtZDBkYy0z MGRjLWI5YjQtMzMyMzVmNmM4MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA18s23RsIUc7XqLADdEGKiKiqghD8OJN6eyYqgBwDTQR/Uwh/cA5/c0 WipTnhBMlDSvdqReQhPv2wzNrVOA5K1ElN9TdbCY3J0pEIVVKG4XOm3InFrsTHTL UX7WqSlDjw3n0LHfGz+gKd/e2Om/6IvzSDlq0amauj22qwisDCM4Q2IFhaip+ZAe lDQA5UZjuUo5dFdBJeu3ZJTefVf/mWSDcJ/xfPAPRJE8Mj2rBJ6rAnbZEkrwO11w yc7E5ltST8wYs3RB/2ao9Khj8z0NPvXXyTJzAxMXiQCSdKajwbgzMHLaG8Tf9NKV r3YYzH/PHFcNuGOjqukkJPwIkLvHq2Y= -----END CERTIFICATE-----Generated at Sat Apr 26 19:18:41 2025 by rpki-client