$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa File: ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa (raw, json) Hash identifier: YFslYCxI8f0VQjNlzDxwu8ck9Q6srHV+FFzSOhw5ENo= Subject key identifier: DF:43:97:3E:4B:88:FE:A3:FB:E8:66:27:17:4F:A5:BA:38:E5:22:3D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858499294A5150A83F7D1E25347C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 202 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a5:15:0a:83:f7:d1:e2:53:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=9c89ae59-f4aa-4111-949b-ece92f1f568a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:20:72:2e:70:d5:8c:f1:2e:08:96:17:3f: 67:64:02:42:0d:81:88:31:42:0e:c2:a2:56:f4:b2: d7:49:d5:d4:37:05:08:71:6d:86:87:22:10:7b:99: b3:6b:e4:36:25:64:72:b2:7d:3d:c4:86:c1:8e:d7: 8b:38:46:84:26:d5:b5:6f:0c:23:b9:b9:94:49:3e: 92:a7:1a:93:91:78:22:cf:a9:4a:46:ff:5e:db:39: bf:ed:bc:71:27:bf:f2:d3:a0:31:4a:3e:e6:d8:27: 11:1e:fc:40:96:94:a6:b6:46:1a:2e:9e:48:cf:dc: a3:ce:a9:ca:73:c9:c2:bf:81:d3:6c:22:16:e7:20: e9:9a:7e:50:30:d4:85:a9:5c:99:31:4d:a6:f8:6b: 10:ef:6a:15:32:76:84:e0:3c:dd:bf:bc:7c:55:07: fd:79:c0:f9:98:2e:8f:bf:42:7d:e0:48:18:bb:1b: 8a:ba:16:6c:d4:f8:d4:91:9a:4f:4a:c1:1c:02:17: 2e:b5:0c:75:24:4c:a5:00:ed:84:a0:60:95:08:8b: 57:84:d3:e0:87:e7:64:0a:cd:fc:43:4b:9f:7e:2b: c8:61:24:cb:6e:60:ea:59:d8:73:7f:b5:36:3e:ba: 47:06:bb:0d:5b:7b:69:d6:03:8d:e4:65:83:ff:e3: f9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:43:97:3E:4B:88:FE:A3:FB:E8:66:27:17:4F:A5:BA:38:E5:22:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1e:a9:bc:3e:08:ba:ff:1e:c4:8e:a4:4e:1c:98:40:13:21: 1f:b7:fd:37:a8:42:34:d9:60:62:f7:a7:31:03:a2:a4:4c:47: 6e:7e:d0:48:05:9c:2b:e4:af:f3:3e:ce:05:0f:af:75:5d:c7: 29:63:9c:cf:3f:2c:1b:65:cf:ed:e0:c5:98:5c:8e:9a:87:74: 38:1e:fd:8c:87:ea:8a:fc:b3:83:f1:5f:cb:a3:fd:de:8c:55: f5:25:55:82:2d:2f:7c:b4:6e:2c:20:f9:64:31:4f:c0:62:f8: e1:44:f2:0d:ea:03:d5:4c:1d:79:a0:5c:75:58:1b:69:5d:91: 8d:5d:47:f5:b8:a6:10:10:80:ef:8f:e4:1c:8c:39:43:ad:e9: 51:2a:cc:07:84:9c:1a:1b:7c:f5:7c:56:53:f8:7c:76:12:7c: 2b:4b:39:d0:00:fa:09:d8:15:6c:85:c8:59:d9:ba:46:7e:43: 56:bc:a6:47:a3:b4:4d:ab:ac:9b:02:05:7b:c2:5c:46:8b:a0: 7e:d3:29:22:c5:fd:c8:db:12:b6:1d:a5:bf:9e:04:ac:96:54: 68:80:dc:7b:9d:31:84:ec:fe:54:aa:0e:14:08:b5:57:c9:3e: c3:ec:85:a3:8b:02:46:38:19:bb:d0:f3:e4:a7:ba:21:2a:4b: 72:fb:10:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKUVCoP30eJTR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk OWM4OWFlNTktZjRhYS00MTExLTk0OWItZWNlOTJmMWY1NjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM0gci5w1YzxLgiWFz9nZAJCDYGIMUIOwqJW 9LLXSdXUNwUIcW2GhyIQe5mza+Q2JWRysn09xIbBjteLOEaEJtW1bwwjubmUST6S pxqTkXgiz6lKRv9e2zm/7bxxJ7/y06AxSj7m2CcRHvxAlpSmtkYaLp5Iz9yjzqnK c8nCv4HTbCIW5yDpmn5QMNSFqVyZMU2m+GsQ72oVMnaE4Dzdv7x8VQf9ecD5mC6P v0J94EgYuxuKuhZs1PjUkZpPSsEcAhcutQx1JEylAO2EoGCVCItXhNPgh+dkCs38 Q0uffivIYSTLbmDqWdhzf7U2PrpHBrsNW3tp1gON5GWD/+P5GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9Dlz5LiP6j++hmJxdPpbo45SI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWIwYzU4ZDItYTJlMy0z YzQ5LWI2ZDMtMjNjYzZmMmE1MjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIeqbw+CLr/HsSOpE4cmEATIR+3/TeoQjTZYGL3pzEDoqRMR25+0EgF nCvkr/M+zgUPr3VdxyljnM8/LBtlz+3gxZhcjpqHdDge/YyH6or8s4PxX8uj/d6M VfUlVYItL3y0biwg+WQxT8Bi+OFE8g3qA9VMHXmgXHVYG2ldkY1dR/W4phAQgO+P 5ByMOUOt6VEqzAeEnBobfPV8VlP4fHYSfCtLOdAA+gnYFWyFyFnZukZ+Q1a8pkej tE2rrJsCBXvCXEaLoH7TKSLF/cjbErYdpb+eBKyWVGiA3HudMYTs/lSqDhQItVfJ PsPshaOLAkY4GbvQ8+SnuiEqS3L7EEU= -----END CERTIFICATE-----Generated at Sat Apr 26 18:00:19 2025 by rpki-client