$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa File: a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa (raw, json) Hash identifier: zCO6Q4QHnKkotX37PVaaMaT0owk18zucyjRCcNfwOF0= Subject key identifier: 4B:B7:6C:93:51:BE:47:65:B7:6D:5C:9E:29:3B:78:63:10:13:62:1F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858497C3EEB0C6F486F458EB27C00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 17916 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:eb:0c:6f:48:6f:45:8e:b2:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=9da073e9-3509-4691-b26f-24ef058f0b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:f4:45:03:cf:98:a6:42:00:b3:70:b4:90: 8d:ff:1b:d8:fc:3c:b4:08:ad:bf:fc:f6:ad:5e:ef: 73:aa:b5:62:68:43:86:d2:9f:a9:06:50:5e:de:67: e9:ec:9d:73:91:f2:b3:67:2b:ab:e8:ea:db:58:a5: c4:63:bc:0b:3b:2e:3c:7c:3f:a0:55:ae:b4:cc:9b: 47:da:23:d2:8a:30:38:a9:ff:f1:85:cb:a2:5e:5a: 69:2e:76:97:3e:04:a3:73:2f:e8:69:1c:b1:f3:4a: 3e:d6:37:9c:fe:2c:b5:5f:e1:07:8c:72:ab:7a:2d: d8:ce:cc:22:e8:bb:6f:82:8a:de:06:89:aa:14:7d: 69:c1:19:44:8d:5c:c3:cb:29:e2:34:bc:40:54:7a: f7:2e:92:3d:f7:db:04:1c:eb:d8:2a:16:6d:be:42: 36:1a:b4:9f:db:2d:7a:f1:07:1b:d1:b6:75:7d:ac: c6:1e:98:ad:df:03:53:a4:91:36:0c:8c:c4:80:7f: 2c:b8:88:19:b1:49:9f:ae:4d:ad:4f:75:8f:c0:5d: 60:eb:52:07:95:2f:86:a4:6f:35:15:03:69:3a:7f: 68:1c:fe:8f:fe:f7:36:0e:c3:62:be:90:f0:69:34: 3e:d8:fb:e3:e6:24:c7:f3:2c:73:8b:e6:33:3b:d5: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B7:6C:93:51:BE:47:65:B7:6D:5C:9E:29:3B:78:63:10:13:62:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:84:cb:7f:e4:1d:96:43:c8:46:28:34:14:df:88:88:5b:c5: 60:73:07:36:7a:75:30:27:0f:fe:c1:1e:92:51:43:fb:e6:16: aa:7a:2a:6e:94:57:83:1b:84:b2:fc:97:58:5e:19:be:4c:55: 1d:84:48:04:f2:71:f1:3f:bf:85:ba:7e:75:86:8f:37:74:08: 6e:da:97:49:96:63:ac:e5:a5:66:48:19:6a:ac:a9:af:f4:47: a8:40:32:67:88:55:10:b1:c6:d8:0e:5a:40:4f:93:3e:10:72: d4:a4:a8:65:ae:59:35:d9:fb:2e:07:a2:b3:0e:cd:2c:a5:27: 4e:4f:2f:d7:7f:84:a4:53:0e:4e:9c:ab:6b:88:32:d9:f0:ef: dc:e2:44:13:b4:84:5f:df:ff:f5:ad:fa:ab:4a:e8:83:a3:6f: 83:79:85:2c:62:bb:9a:15:e0:e1:e8:19:96:31:2a:bd:31:9b: 35:e8:c1:b3:3a:22:da:27:51:36:f7:8f:04:da:0e:22:a9:61: 52:cf:84:2e:c8:aa:fe:f4:3f:ac:20:71:71:a0:4e:fa:59:05: 9c:a0:53:37:b4:18:b4:90:38:2e:b4:be:83:f7:17:bc:bd:57: 01:b7:75:b0:0d:2c:44:b2:e0:64:70:17:dc:0d:d4:06:49:1c: 2c:7c:cf:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PusMb0hvRY6yfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk OWRhMDczZTktMzUwOS00NjkxLWIyNmYtMjRlZjA1OGYwYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMz0RQPPmKZCALNwtJCN/xvY/Dy0CK2//Pat Xu9zqrViaEOG0p+pBlBe3mfp7J1zkfKzZyur6OrbWKXEY7wLOy48fD+gVa60zJtH 2iPSijA4qf/xhcuiXlppLnaXPgSjcy/oaRyx80o+1jec/iy1X+EHjHKrei3Yzswi 6LtvgoreBomqFH1pwRlEjVzDyyniNLxAVHr3LpI999sEHOvYKhZtvkI2GrSf2y16 8Qcb0bZ1fazGHpit3wNTpJE2DIzEgH8suIgZsUmfrk2tT3WPwF1g61IHlS+GpG81 FQNpOn9oHP6P/vc2DsNivpDwaTQ+2Pvj5iTH8yxzi+YzO9XwmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu3bJNRvkdlt21cnik7eGMQE2IfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTJjNDllZTUtZmJlMC0z ZDU5LTlmZDMtOWFhNzg4OTA4YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6Ey3/kHZZDyEYoNBTfiIhbxWBzBzZ6dTAnD/7BHpJRQ/vmFqp6Km6U V4MbhLL8l1heGb5MVR2ESATycfE/v4W6fnWGjzd0CG7al0mWY6zlpWZIGWqsqa/0 R6hAMmeIVRCxxtgOWkBPkz4QctSkqGWuWTXZ+y4HorMOzSylJ05PL9d/hKRTDk6c q2uIMtnw79ziRBO0hF/f//Wt+qtK6IOjb4N5hSxiu5oV4OHoGZYxKr0xmzXowbM6 ItonUTb3jwTaDiKpYVLPhC7Iqv70P6wgcXGgTvpZBZygUze0GLSQOC60voP3F7y9 VwG3dbANLESy4GRwF9wN1AZJHCx8z0s= -----END CERTIFICATE-----Generated at Sun Apr 27 12:57:45 2025 by rpki-client