$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa File: d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa (raw, json) Hash identifier: v+30rA5V/EULWNF4vRLODABGpuWKGvu0LAx9CIW5wns= Subject key identifier: 1C:E7:13:67:0D:DB:61:2A:CF:0C:0B:21:FB:39:66:8D:3A:A7:F2:D7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584975445CAEA1466D3F47469C80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 3356 IP address blocks: 20.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:5c:ae:a1:46:6d:3f:47:46:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=ad2fa620-b095-4430-950a-29a3a37ff096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:69:31:fc:ec:ad:bb:6f:1f:2e:0b:d9:51:08: 3a:1d:67:9c:cf:02:f0:be:88:ba:a1:6a:75:d2:2b: 22:ac:c7:69:3d:03:fc:d1:54:64:33:36:14:37:6c: d5:ac:9c:70:e2:da:39:01:61:36:68:95:f1:70:bc: 4d:ce:0a:e8:cb:e9:26:34:ad:ec:06:16:eb:da:39: 65:01:84:07:44:d1:16:55:7b:0c:7b:69:00:01:26: 28:16:8b:95:25:19:d3:38:2a:01:1d:ad:1d:a3:83: 08:9c:7f:41:e3:95:96:80:89:10:fb:f4:a5:3b:bb: 84:83:df:4c:db:f8:ca:c8:92:a0:16:74:66:fc:dc: 0c:3b:93:1d:4c:0b:23:c3:b2:91:cb:ba:a9:f7:44: 13:34:26:0b:7c:6f:1d:55:fa:8e:5a:1c:93:55:56: 45:23:d3:e6:64:52:36:1e:05:64:f3:39:9b:2e:3e: 5b:7b:1e:b7:12:c2:fb:0c:62:ba:68:c0:e0:ec:1b: 99:f1:14:4e:ce:bc:f5:b5:85:3b:51:de:2a:90:bf: 8f:f9:3d:05:45:9d:ca:10:bf:89:2c:50:6a:42:3e: e2:c7:6e:b6:e8:eb:4b:a2:e0:70:5f:25:1f:f2:e4: 3f:e1:b0:ce:bf:9e:e0:c5:ec:8c:66:86:92:5f:6e: 13:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E7:13:67:0D:DB:61:2A:CF:0C:0B:21:FB:39:66:8D:3A:A7:F2:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:27:98:0a:16:bf:8d:91:78:89:4b:52:fe:d9:bc:92:59:6d: ba:8f:09:a8:a0:dc:e1:fd:f6:62:7e:90:5f:42:d1:4e:d5:54: 89:2a:4a:22:0d:98:4f:4e:32:d7:8e:e1:4f:38:e1:1a:cc:c7: 0c:da:38:16:1f:ac:9d:c2:f4:93:fa:52:4c:94:29:c6:47:b5: c5:ee:1b:97:a6:1e:67:f3:39:f8:72:6d:49:45:5a:ef:28:63: 20:1b:6e:41:f2:15:2d:93:a7:be:29:8f:c8:af:06:6d:8d:fe: 4f:85:3c:29:03:04:95:56:5a:d5:82:90:61:20:46:63:f9:56: ec:a2:ec:4f:35:d5:56:51:81:a2:e7:14:05:eb:05:47:c0:0e: 41:9c:99:7f:51:b4:97:ea:60:84:fd:8d:c9:b2:aa:ac:84:9c: 8b:22:10:86:3e:da:80:84:b7:1f:25:8a:0f:d1:a3:f4:f9:7b: d4:82:62:b5:11:f0:27:c7:f9:8d:15:44:1d:4d:c1:79:07:88: c1:70:ea:da:ab:e5:54:e8:8b:a4:5e:d4:c1:8b:9b:87:ee:bf: 9b:35:0e:2f:76:76:d1:51:73:50:b8:94:5d:00:6b:ac:f5:a5: 1b:53:d9:49:2f:35:84:13:8c:4b:38:9d:c9:45:df:97:ae:73: c8:85:45:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RFyuoUZtP0dGnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk YWQyZmE2MjAtYjA5NS00NDMwLTk1MGEtMjlhM2EzN2ZmMDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomkx/Oytu28fLgvZUQg6HWeczwLwvoi6oWp1 0isirMdpPQP80VRkMzYUN2zVrJxw4to5AWE2aJXxcLxNzgroy+kmNK3sBhbr2jll AYQHRNEWVXsMe2kAASYoFouVJRnTOCoBHa0do4MInH9B45WWgIkQ+/SlO7uEg99M 2/jKyJKgFnRm/NwMO5MdTAsjw7KRy7qp90QTNCYLfG8dVfqOWhyTVVZFI9PmZFI2 HgVk8zmbLj5bex63EsL7DGK6aMDg7BuZ8RROzrz1tYU7Ud4qkL+P+T0FRZ3KEL+J LFBqQj7ix2626OtLouBwXyUf8uQ/4bDOv57gxeyMZoaSX24T5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBznE2cN22EqzwwLIfs5Zo06p/LXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDFkOWIzMTEtY2U5ZS0z ODZhLWI1ZTUtYjZmMDFjZDFjZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAnmAoWv42ReIlLUv7ZvJJZbbqPCaig3OH99mJ+kF9C0U7VVIkqSiIN mE9OMteO4U844RrMxwzaOBYfrJ3C9JP6UkyUKcZHtcXuG5emHmfzOfhybUlFWu8o YyAbbkHyFS2Tp74pj8ivBm2N/k+FPCkDBJVWWtWCkGEgRmP5Vuyi7E811VZRgaLn FAXrBUfADkGcmX9RtJfqYIT9jcmyqqyEnIsiEIY+2oCEtx8lig/Ro/T5e9SCYrUR 8CfH+Y0VRB1NwXkHiMFw6tqr5VToi6Re1MGLm4fuv5s1Di92dtFRc1C4lF0Aa6z1 pRtT2UkvNYQTjEs4nclF35euc8iFRQs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:41 2025 by rpki-client