$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa File: a6d04891-47ad-353a-8897-df25d664bb32.roa (raw, json) Hash identifier: iQmI+b4dpGyG/9nvCzASEW95k/07ed4wAqzu2WHl+3c= Subject key identifier: A2:8E:2F:DA:12:7A:6C:29:C2:51:72:23:24:3A:F8:75:A9:1F:A2:4D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858499294A5217EC023A92D387F80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 203 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a5:21:7e:c0:23:a9:2d:38:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=131bf0b5-db9a-43a0-ad7a-1aa812cc61bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:42:96:b9:bf:98:a1:81:8e:6f:28:73:2b: 7b:47:d8:af:3b:ba:96:bb:b9:a8:62:c0:25:44:a2: 8b:08:aa:da:75:b3:66:09:18:c4:dc:b0:ca:9a:82: 9b:82:24:7d:ac:6b:94:02:82:4a:60:fd:0a:b9:b5: a4:7f:f2:8c:48:1c:ac:32:27:18:64:18:c9:17:27: ac:73:7f:c1:c0:27:51:aa:72:fa:e0:85:a0:42:7a: 31:07:62:e9:de:6f:d3:9d:02:b4:f5:90:1c:15:4b: 40:15:ac:34:ad:03:31:d0:d6:8d:9a:2b:8c:23:ed: cf:15:e9:1d:4c:af:98:4b:2f:9e:c0:e3:7f:f8:35: 6b:c6:16:f3:3c:cd:04:a5:6d:51:98:be:b9:64:ec: 3a:f2:50:b0:73:56:24:2b:4e:07:7e:d8:44:52:93: 71:93:84:09:73:3b:5a:93:bb:91:a7:37:4c:32:82: 3d:87:b2:ae:04:ec:93:d8:34:56:bd:4e:c0:c2:9d: 90:ad:83:bb:08:e9:c1:ed:00:04:3e:2e:e4:b8:85: 2e:f4:c4:19:b0:28:3c:ef:4b:96:07:c5:9c:12:44: 06:cb:8f:21:7e:77:51:b5:18:20:d2:7b:63:0f:49: 45:53:cc:7a:37:f5:96:5e:a0:5e:4b:da:3f:a8:52: 9e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8E:2F:DA:12:7A:6C:29:C2:51:72:23:24:3A:F8:75:A9:1F:A2:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:09:a5:a4:55:9d:28:be:b5:91:91:39:38:be:a8:0b:28:1e: bb:0b:df:45:74:29:27:a9:fd:5f:83:1c:b6:15:2c:7e:2c:2c: 9b:ec:f7:ad:3f:d7:5c:b8:c2:e7:41:ad:57:21:e0:39:98:b7: da:4a:a4:98:f3:3a:03:5e:1d:7d:ed:65:95:95:46:96:fa:f4: b9:ca:d8:f6:25:1a:38:92:84:f5:8e:62:f6:87:1f:77:83:36: 53:e6:0b:6c:c2:1a:ca:be:b9:c2:f5:41:08:44:ad:33:3a:3f: f8:d0:30:a0:92:9c:7e:6b:7b:2f:4a:f1:36:4b:60:3e:89:0d: 85:87:31:3b:dc:20:8f:c0:7a:66:38:ce:8e:4a:65:6e:a5:31: b2:b8:7c:de:5d:91:54:d2:b3:83:30:4c:37:c4:b3:8e:06:c5: 0b:08:a0:b7:5b:3e:21:5b:35:b5:f0:7e:b0:64:eb:49:8c:22: d6:8b:48:c1:a1:1b:5e:78:f4:d1:c2:df:6c:39:5b:a8:a1:72: 3a:ff:3c:a9:bc:c4:92:a5:6c:4f:e6:ed:e3:32:b6:ff:0f:28: 33:21:b6:cb:98:b3:81:f0:ae:a2:5d:c5:74:a9:af:2b:5a:00: f4:fb:2a:63:e5:2e:5a:da:03:c9:94:70:8f:3d:08:15:ab:d5: 16:1f:1d:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKUhfsAjqS04f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MTMxYmYwYjUtZGI5YS00M2EwLWFkN2EtMWFhODEyY2M2MWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO5Clrm/mKGBjm8ocyt7R9ivO7qWu7moYsAl RKKLCKradbNmCRjE3LDKmoKbgiR9rGuUAoJKYP0KubWkf/KMSBysMicYZBjJFyes c3/BwCdRqnL64IWgQnoxB2Lp3m/TnQK09ZAcFUtAFaw0rQMx0NaNmiuMI+3PFekd TK+YSy+ewON/+DVrxhbzPM0EpW1RmL65ZOw68lCwc1YkK04HfthEUpNxk4QJczta k7uRpzdMMoI9h7KuBOyT2DRWvU7Awp2QrYO7COnB7QAEPi7kuIUu9MQZsCg870uW B8WcEkQGy48hfndRtRgg0ntjD0lFU8x6N/WWXqBeS9o/qFKeRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKOL9oSemwpwlFyIyQ6+HWpH6JNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTZkMDQ4OTEtNDdhZC0z NTNhLTg4OTctZGYyNWQ2NjRiYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEJpaRVnSi+tZGROTi+qAsoHrsL30V0KSep/V+DHLYVLH4sLJvs960/ 11y4wudBrVch4DmYt9pKpJjzOgNeHX3tZZWVRpb69LnK2PYlGjiShPWOYvaHH3eD NlPmC2zCGsq+ucL1QQhErTM6P/jQMKCSnH5rey9K8TZLYD6JDYWHMTvcII/AemY4 zo5KZW6lMbK4fN5dkVTSs4MwTDfEs44GxQsIoLdbPiFbNbXwfrBk60mMItaLSMGh G1549NHC32w5W6ihcjr/PKm8xJKlbE/m7eMytv8PKDMhtsuYs4HwrqJdxXSpryta APT7KmPlLlraA8mUcI89CBWr1RYfHR0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:30:08 2025 by rpki-client