$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e05ae60a-5ff9-3ee5-884e-da2510336861.roa File: e05ae60a-5ff9-3ee5-884e-da2510336861.roa (raw, json) Hash identifier: R/R4A8Jqi6jm1A0wR2fjUJRJX9UKpxCMq8kx/kI2+Kw= Subject key identifier: B3:FF:B0:C8:7C:4A:E2:3D:38:A1:E3:AB:12:FB:E0:2C:8C:72:6E:52 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848CDCB7DC755DAB2CD8DB958A0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e05ae60a-5ff9-3ee5-884e-da2510336861.roa Signing time: Fri 07 Feb 2025 13:17:37 +0000 ROA not before: Fri 07 Feb 2025 13:17:37 +0000 ROA not after: Thu 08 May 2025 12:17:37 +0000 asID: 3360 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:cb:7d:c7:55:da:b2:cd:8d:b9:58:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 7 13:17:37 2025 GMT Not After : May 8 12:17:37 2025 GMT Subject: CN=1dc4b8bd-3745-4a13-a4e9-32368dcaf4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:68:19:d2:99:e4:9c:66:a2:50:26:ea:52: f4:46:01:09:d7:71:85:ab:94:b9:bc:3a:95:24:2c: 73:6f:e8:58:ca:b1:20:65:08:af:37:95:e6:12:b5: 24:33:0c:24:88:0d:f0:da:e0:25:ff:44:eb:fb:c0: 3a:86:65:e8:4c:32:51:1d:6f:31:05:aa:f3:df:20: e0:0c:e6:2b:41:08:38:5d:76:0f:9c:d6:91:28:83: 95:e8:79:a4:0d:93:30:57:8b:15:dc:cf:ae:63:29: 88:f3:a3:e8:74:86:6b:12:3a:fb:65:a1:63:d1:8c: 5e:26:c9:21:bf:ae:18:bc:b2:bc:97:5c:55:c1:b2: 88:6b:4b:b2:bd:5f:41:a6:6f:59:99:86:ef:61:85: 4f:23:e7:58:75:5e:e9:fd:da:ed:31:a9:9d:d0:2c: 68:b0:71:47:cf:1b:5f:c5:32:de:c3:10:bc:97:fd: 00:b6:12:93:d2:e9:43:85:46:3d:30:4d:f5:46:9f: c6:8f:fd:eb:61:f3:f5:c5:d4:b6:d8:23:e0:d2:18: 22:55:f5:ab:c9:d4:57:c7:17:11:8a:6d:c8:19:59: 9e:f1:67:b4:c8:e9:9b:ee:b0:a8:6e:cc:ae:8e:f6: 0a:89:16:6e:9f:e1:dc:73:e4:62:2a:1b:73:4b:1a: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FF:B0:C8:7C:4A:E2:3D:38:A1:E3:AB:12:FB:E0:2C:8C:72:6E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e05ae60a-5ff9-3ee5-884e-da2510336861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1b:57:f4:93:3c:15:2c:6e:cd:75:f4:e0:73:61:d1:26:40: 08:d7:ec:75:2e:7a:25:fe:40:51:a8:18:3e:ac:3f:c3:6c:d4: 8b:e5:22:af:ba:36:b7:3f:40:5f:32:7e:e3:3f:73:f3:70:bb: d6:5a:5c:ab:88:8c:c3:3c:e4:6c:aa:0d:7d:aa:14:ae:5a:1d: dc:62:34:d6:09:72:82:dc:84:58:8f:69:50:ac:ba:81:1c:d3: cb:cb:50:e3:e5:41:46:e6:44:ee:c1:8a:4e:bb:f1:86:be:40: 90:f8:ef:21:78:0d:55:2f:b2:32:ef:c3:80:17:7d:59:68:ac: d1:56:c1:0c:0c:5a:cc:dd:fb:76:68:57:15:d9:74:2f:a8:48: d9:86:7d:2a:5e:10:29:be:ef:dc:a8:dc:28:24:0f:18:34:87: 3d:28:8c:94:b4:ef:73:17:e8:5d:16:91:d4:bd:42:12:17:14: 02:16:bd:65:46:fc:78:64:9a:2f:a3:27:ad:b5:aa:de:d6:e4: b4:1e:de:0a:0e:51:82:87:12:de:b7:63:28:d5:54:df:12:23: cc:a8:da:89:6a:01:c5:db:69:fb:12:55:fb:73:dd:27:ef:65: 76:52:ef:9c:dd:16:5e:5e:0e:43:2d:0e:3c:e7:60:ed:f5:f1: 23:35:24:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjNy33HVdqyzY25WKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIwNzEzMTczN1oXDTI1MDUwODEyMTczN1owLzEtMCsGA1UEAxMk MWRjNGI4YmQtMzc0NS00YTEzLWE0ZTktMzIzNjhkY2FmNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB1oGdKZ5JxmolAm6lL0RgEJ13GFq5S5vDqV JCxzb+hYyrEgZQivN5XmErUkMwwkiA3w2uAl/0Tr+8A6hmXoTDJRHW8xBarz3yDg DOYrQQg4XXYPnNaRKIOV6HmkDZMwV4sV3M+uYymI86PodIZrEjr7ZaFj0YxeJskh v64YvLK8l1xVwbKIa0uyvV9Bpm9ZmYbvYYVPI+dYdV7p/drtMamd0CxosHFHzxtf xTLewxC8l/0AthKT0ulDhUY9ME31Rp/Gj/3rYfP1xdS22CPg0hgiVfWrydRXxxcR im3IGVme8We0yOmb7rCobsyujvYKiRZun+Hcc+RiKhtzSxrFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP/sMh8SuI9OKHjqxL74CyMcm5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTA1YWU2MGEtNWZmOS0z ZWU1LTg4NGUtZGEyNTEwMzM2ODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYbV/STPBUsbs119OBzYdEmQAjX7HUueiX+QFGoGD6sP8Ns1IvlIq+6 Nrc/QF8yfuM/c/Nwu9ZaXKuIjMM85GyqDX2qFK5aHdxiNNYJcoLchFiPaVCsuoEc 08vLUOPlQUbmRO7Bik678Ya+QJD47yF4DVUvsjLvw4AXfVlorNFWwQwMWszd+3Zo VxXZdC+oSNmGfSpeECm+79yo3CgkDxg0hz0ojJS073MX6F0WkdS9QhIXFAIWvWVG /Hhkmi+jJ621qt7W5LQe3goOUYKHEt63YyjVVN8SI8yo2olqAcXbafsSVftz3Sfv ZXZS75zdFl5eDkMtDjznYO318SM1JH8= -----END CERTIFICATE-----Generated at Mon Apr 28 03:22:31 2025 by rpki-client