$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa File: a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa (raw, json) Hash identifier: aSos7oKVWi7GX5VENjB9smO6nQb3WFdDMZRs/3roY0o= Subject key identifier: 7D:D7:63:41:C4:05:48:C8:DC:97:3B:68:E9:4B:66:C8:0C:F0:FF:8E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13C3EBDCE6E14D95FBE00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 203 IP address blocks: 20.134.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3c:3e:bd:ce:6e:14:d9:5f:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=3540569a-3a7e-47da-acd5-5795992599dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:24:f9:e1:1a:51:f4:39:6d:a1:b8:66:15:44: 4f:3a:fd:fa:53:4f:90:65:91:6d:ae:23:6d:3d:64: 8c:6e:ac:37:7f:87:be:46:c7:ac:fb:74:33:24:2e: 5b:fa:07:1b:9b:e3:b6:d3:48:c8:a0:6b:b1:2c:f9: 6a:c2:5f:59:28:b4:88:a9:f8:96:2a:d7:1c:78:9c: 5d:e3:d1:7f:7a:30:ce:52:ce:d2:28:e2:c6:03:cf: 52:a0:74:14:78:65:7f:6c:06:b7:79:94:49:d6:80: 9e:bb:77:00:9c:d3:5e:9b:c8:3b:70:94:e9:12:90: 05:5e:9b:cb:68:1e:2d:ee:25:05:8d:30:12:4a:23: db:c6:d8:4b:b5:61:0a:ea:a9:15:58:42:46:e1:91: 35:7d:73:6e:02:2c:9b:31:72:5e:46:2a:ae:48:d7: 41:57:55:9a:27:31:7b:d4:0d:50:03:6f:21:a8:d4: 59:08:f9:46:a0:cf:63:46:b8:47:7e:95:5b:c8:dc: 0e:53:1b:7a:d3:b5:7d:f8:6d:bd:43:e5:d3:d3:40: 5b:b0:6d:aa:e9:6d:21:d5:22:43:21:9b:2d:87:ec: 69:a2:44:30:b8:68:df:6f:17:0a:a5:7b:84:e2:86: ba:43:4d:f2:14:37:0b:09:1e:15:64:22:80:2b:a9: f1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D7:63:41:C4:05:48:C8:DC:97:3B:68:E9:4B:66:C8:0C:F0:FF:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b3:4e:9b:66:cf:40:ef:fe:34:88:e5:b3:b2:56:c0:f3:e7: 5e:38:6c:11:e8:56:8c:b9:00:d6:58:a3:36:cf:9f:b5:1e:3e: a4:b2:39:13:20:9f:84:73:b5:6a:25:f1:a8:76:b0:81:67:bc: ca:6c:40:a1:52:83:ad:72:a6:49:a5:7b:14:4c:34:ad:15:e9: ae:ca:f8:d1:68:d4:0a:79:b1:41:5b:8f:d9:88:fd:44:59:94: b7:13:4e:93:d1:64:06:b1:80:bf:e7:b8:10:b4:1f:5d:ae:be: d9:45:c8:80:62:4c:41:58:14:ae:3d:46:30:66:15:a0:ec:e2: f1:f4:27:0d:f4:48:78:e4:ff:5f:ff:8f:fc:c6:9b:d6:4a:f0: 30:51:08:24:9e:ce:bc:e1:c7:62:16:29:dd:63:bc:5e:c7:e8: f2:b0:b6:2f:70:14:d2:e8:9c:3a:ba:2b:76:2b:30:81:b8:2e: 94:c8:32:aa:28:19:e2:25:1e:22:55:bc:f1:9b:10:d3:f2:bc: af:5d:13:57:5d:af:98:ab:10:4e:7f:c4:3c:72:5a:2a:a7:53: 12:91:7b:96:c0:ac:1c:e0:b4:29:a0:1c:32:0e:c0:ea:b8:5a: 85:af:3d:de:cf:64:05:1a:55:28:98:05:23:e2:ac:3a:92:0a: f6:d5:8f:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTw+vc5uFNlfvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk MzU0MDU2OWEtM2E3ZS00N2RhLWFjZDUtNTc5NTk5MjU5OWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiT54RpR9DltobhmFURPOv36U0+QZZFtriNt PWSMbqw3f4e+Rses+3QzJC5b+gcbm+O200jIoGuxLPlqwl9ZKLSIqfiWKtcceJxd 49F/ejDOUs7SKOLGA89SoHQUeGV/bAa3eZRJ1oCeu3cAnNNem8g7cJTpEpAFXpvL aB4t7iUFjTASSiPbxthLtWEK6qkVWEJG4ZE1fXNuAiybMXJeRiquSNdBV1WaJzF7 1A1QA28hqNRZCPlGoM9jRrhHfpVbyNwOUxt607V9+G29Q+XT00BbsG2q6W0h1SJD IZsth+xpokQwuGjfbxcKpXuE4oa6Q03yFDcLCR4VZCKAK6nxcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3XY0HEBUjI3Jc7aOlLZsgM8P+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTUxYzFiNzEtMmRhMi0z YTlmLWE3MWYtZTE1YzkzNGNjN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuzTptmz0Dv/jSI5bOyVsDz5144bBHoVoy5ANZYozbPn7UePqSyORMg n4RztWol8ah2sIFnvMpsQKFSg61ypkmlexRMNK0V6a7K+NFo1Ap5sUFbj9mI/URZ lLcTTpPRZAaxgL/nuBC0H12uvtlFyIBiTEFYFK49RjBmFaDs4vH0Jw30SHjk/1// j/zGm9ZK8DBRCCSezrzhx2IWKd1jvF7H6PKwti9wFNLonDq6K3YrMIG4LpTIMqoo GeIlHiJVvPGbENPyvK9dE1ddr5irEE5/xDxyWiqnUxKRe5bArBzgtCmgHDIOwOq4 WoWvPd7PZAUaVSiYBSPirDqSCvbVj08= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:23 2025 by rpki-client