$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa File: e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa (raw, json) Hash identifier: wRPkMsbS6iapYUSqze+M3AiKKcDErYQACor52QA7oxM= Subject key identifier: 45:DC:5A:CD:50:E1:DE:C9:10:74:32:9B:53:4A:D6:71:A8:1F:3B:C2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858499294A50779AE62FC0DD0FFE0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 3356 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a5:07:79:ae:62:fc:0d:d0:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=5963d1e5-8ff5-4441-999f-50da00266a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:39:5e:7a:64:d0:2b:a3:8b:2b:5b:85:ea:0b: ca:d1:6a:29:2d:f2:0f:53:f5:1f:3c:ff:d6:50:69: d5:50:a7:be:6b:d7:6d:47:3d:dc:bc:ce:18:00:df: c3:c9:47:02:a9:98:b7:a2:05:09:55:1e:99:94:40: 10:8a:de:50:c0:1b:ed:e8:ce:53:80:3d:98:62:fb: 1f:ff:70:09:92:b4:a8:e2:d8:e8:56:51:b7:ae:1d: 09:a6:3f:63:9f:ca:cf:32:84:1e:c8:37:58:a1:fd: 52:28:7f:0f:19:4c:ab:a6:8c:f8:cd:80:92:28:f3: df:ec:a1:05:dd:6d:91:53:6a:2f:02:b8:72:be:e5: b3:21:7b:66:15:71:80:72:2c:6d:d6:9f:a1:42:3d: 1c:1f:2c:97:e5:06:d7:13:a6:8d:14:8e:6b:fc:7f: a6:ee:52:f4:5b:07:d0:e3:ed:ff:1f:1c:db:67:57: 9c:c3:d0:00:42:3d:8e:aa:57:a1:82:11:55:35:87: ce:b0:0b:ca:1e:20:d2:39:85:99:84:5b:21:2e:67: 26:d2:bc:c2:cd:fb:9b:b8:7b:39:94:e9:5d:49:28: 75:c5:44:20:2b:d1:53:df:9f:79:83:f9:00:7f:25: d2:b0:db:10:dc:47:ab:1d:38:bb:41:0d:51:a7:7b: cb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DC:5A:CD:50:E1:DE:C9:10:74:32:9B:53:4A:D6:71:A8:1F:3B:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:05:d9:f0:78:a3:67:4c:f6:c5:cb:6e:8e:12:1d:19:73:0f: 3f:4d:e9:19:e8:16:b0:e6:94:ae:6d:c3:08:72:d5:06:a5:a2: 53:63:58:16:b7:b0:f1:99:6c:b0:6d:a4:00:94:dd:0d:f1:81: 47:3e:ea:fa:a7:eb:6d:e8:70:d3:3e:0c:9b:ed:de:53:a5:a5: eb:14:a1:fd:70:e7:36:63:9a:fc:ea:8b:bd:ac:c8:3c:e5:55: f3:bf:88:ac:06:0b:f0:f7:5f:84:55:00:02:c0:cd:f1:cd:21: 7c:06:40:65:47:7c:c9:04:9b:57:bd:68:e0:2d:f3:9d:ad:c2: c3:36:69:e9:7e:fb:69:ab:fd:4b:f7:f0:f6:a9:e7:90:d9:41: 82:b2:98:28:65:e0:9f:65:da:2f:d5:7f:67:f3:6b:a0:59:88: 99:f7:93:53:bc:0b:98:4f:03:4e:a0:b6:74:a4:70:5a:b1:b2: 59:a0:2d:92:8f:51:14:f9:61:9d:03:8d:5a:1d:b6:76:fc:1f: 82:ba:47:2e:a9:26:44:4d:2f:6e:47:56:d0:31:62:50:fa:cf: 69:a2:fa:e9:dd:14:ac:38:4d:70:55:00:c9:dc:8e:63:34:1d: 1e:f8:75:24:42:c8:de:7e:88:c9:5c:84:7d:3e:cd:20:8b:40: 10:ef:a8:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKUHea5i/A3Q/+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NTk2M2QxZTUtOGZmNS00NDQxLTk5OWYtNTBkYTAwMjY2YTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DleemTQK6OLK1uF6gvK0WopLfIPU/UfPP/W UGnVUKe+a9dtRz3cvM4YAN/DyUcCqZi3ogUJVR6ZlEAQit5QwBvt6M5TgD2YYvsf /3AJkrSo4tjoVlG3rh0Jpj9jn8rPMoQeyDdYof1SKH8PGUyrpoz4zYCSKPPf7KEF 3W2RU2ovArhyvuWzIXtmFXGAcixt1p+hQj0cHyyX5QbXE6aNFI5r/H+m7lL0WwfQ 4+3/HxzbZ1ecw9AAQj2OqlehghFVNYfOsAvKHiDSOYWZhFshLmcm0rzCzfubuHs5 lOldSSh1xUQgK9FT3595g/kAfyXSsNsQ3EerHTi7QQ1Rp3vLiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXcWs1Q4d7JEHQym1NK1nGoHzvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTJkMTdkNzEtZjZmOC0z YmU1LWFkMmQtODgzODE3MTYwOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEF2fB4o2dM9sXLbo4SHRlzDz9N6RnoFrDmlK5twwhy1QalolNjWBa3 sPGZbLBtpACU3Q3xgUc+6vqn623ocNM+DJvt3lOlpesUof1w5zZjmvzqi72syDzl VfO/iKwGC/D3X4RVAALAzfHNIXwGQGVHfMkEm1e9aOAt852twsM2ael++2mr/Uv3 8Pap55DZQYKymChl4J9l2i/Vf2fza6BZiJn3k1O8C5hPA06gtnSkcFqxslmgLZKP URT5YZ0DjVodtnb8H4K6Ry6pJkRNL25HVtAxYlD6z2mi+undFKw4TXBVAMncjmM0 HR74dSRCyN5+iMlchH0+zSCLQBDvqA4= -----END CERTIFICATE-----Generated at Sat Apr 26 18:05:48 2025 by rpki-client