$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ecb6d237-6f5e-3cca-8801-33794ca3a7fa.roa File: ecb6d237-6f5e-3cca-8801-33794ca3a7fa.roa (raw, json) Hash identifier: XLxrRIGDS8ubs7d4TuT2E2+isc3vLpXi0jctPPcpgH4= Subject key identifier: 90:A6:74:7B:28:7E:D6:B8:7D:8C:9C:B8:E9:AF:02:37:5B:B4:36:14 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858499294A5EF7CFBF75B56739840 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ecb6d237-6f5e-3cca-8801-33794ca3a7fa.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 3356 IP address blocks: 20.155.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a5:ef:7c:fb:f7:5b:56:73:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=d758db53-0f60-460d-bd5b-540b2655d69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:ab:6a:de:84:fa:59:dc:e5:af:97:bf:77: 02:0e:94:16:1c:06:47:50:16:0b:20:79:6e:25:ac: f9:56:b6:73:4c:43:0f:49:b0:ed:d3:96:a3:62:b7: 10:bc:7e:aa:48:62:ea:ff:05:5a:70:74:f4:15:26: 81:83:c8:6c:9f:76:1e:69:06:89:db:d8:3b:b3:2b: 16:25:6c:a9:51:8d:4d:25:62:54:f7:e7:15:76:a1: f0:31:d0:73:80:44:8f:e0:fe:f1:da:b9:27:79:fc: 5c:0d:f6:7e:d9:7d:ce:de:b7:ba:12:85:e4:92:dc: 46:3f:f1:38:27:41:b2:bf:38:d9:0c:76:69:9d:5f: 3b:58:a7:60:78:0d:b1:fb:27:2f:9d:7b:74:d8:42: be:6c:d7:f3:a1:8b:62:fa:09:b6:ea:94:5d:64:cc: 3e:31:dd:e3:19:68:6b:74:97:fa:0c:b0:71:8d:98: ba:4b:c4:ba:ac:68:18:7c:3f:2b:00:5b:25:41:31: c7:a3:19:e9:c0:e9:a9:9c:ba:cb:75:52:54:60:34: 84:ce:39:79:52:30:bf:3d:e6:69:14:a5:5c:1e:a7: 83:d7:27:49:a4:f2:af:f5:d3:e5:ef:1f:e2:44:7f: aa:93:04:95:f5:15:87:3a:32:d2:0d:c9:c6:80:a6: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:74:7B:28:7E:D6:B8:7D:8C:9C:B8:E9:AF:02:37:5B:B4:36:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ecb6d237-6f5e-3cca-8801-33794ca3a7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.155.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:59:74:5e:cb:a8:08:e4:fe:66:f0:be:7d:99:6c:80:ac:6c: 66:32:b3:02:de:78:7b:4b:6a:17:32:59:7f:b0:4d:69:9f:9a: fe:06:df:6b:a2:ce:0c:d8:ca:e9:91:35:d4:f2:54:65:f2:d7: 14:3e:f4:28:1c:5a:13:15:b1:de:f6:a8:a5:dd:20:30:8b:ed: 6e:10:f3:d3:72:ac:ac:c8:be:91:a8:38:54:fe:f4:a5:ea:f4: 9c:d1:b0:c4:ec:b6:88:f0:b7:49:40:87:e7:6d:e1:e3:af:f3: c9:ef:e8:0d:50:9b:f5:e3:65:18:02:28:9b:c1:df:7b:19:c3: eb:c4:ac:cc:99:8c:43:c5:fb:78:41:5b:66:75:36:93:f0:1d: 8f:af:3f:46:ec:b0:6e:54:88:5f:8d:4e:8f:44:5a:0c:b2:5f: c7:19:e8:c9:cb:0d:96:4a:1d:21:2c:ca:61:f7:5d:04:22:f3: 07:0f:ac:d7:dd:80:53:78:ea:a5:6c:88:a8:e9:3e:4b:ca:4c: 10:9c:67:56:92:6a:86:68:93:ab:5c:5a:46:61:8a:5a:23:c1: 88:05:e8:20:61:38:82:3c:91:33:ed:70:52:77:49:bc:23:39: 9a:1b:f8:e2:1a:e3:77:51:72:ee:a5:5d:0e:4f:c7:e8:6b:8c: c3:ad:dd:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKXvfPv3W1ZzmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk ZDc1OGRiNTMtMGY2MC00NjBkLWJkNWItNTQwYjI2NTVkNjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXKrat6E+lnc5a+Xv3cCDpQWHAZHUBYLIHlu Jaz5VrZzTEMPSbDt05ajYrcQvH6qSGLq/wVacHT0FSaBg8hsn3YeaQaJ29g7sysW JWypUY1NJWJU9+cVdqHwMdBzgESP4P7x2rknefxcDfZ+2X3O3re6EoXkktxGP/E4 J0GyvzjZDHZpnV87WKdgeA2x+ycvnXt02EK+bNfzoYti+gm26pRdZMw+Md3jGWhr dJf6DLBxjZi6S8S6rGgYfD8rAFslQTHHoxnpwOmpnLrLdVJUYDSEzjl5UjC/PeZp FKVcHqeD1ydJpPKv9dPl7x/iRH+qkwSV9RWHOjLSDcnGgKYJEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCmdHsofta4fYycuOmvAjdbtDYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZWNiNmQyMzctNmY1ZS0z Y2NhLTg4MDEtMzM3OTRjYTNhN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFJtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpZdF7LqAjk/mbwvn2ZbICsbGYyswLeeHtLahcyWX+wTWmfmv4G32ui zgzYyumRNdTyVGXy1xQ+9CgcWhMVsd72qKXdIDCL7W4Q89NyrKzIvpGoOFT+9KXq 9JzRsMTstojwt0lAh+dt4eOv88nv6A1Qm/XjZRgCKJvB33sZw+vErMyZjEPF+3hB W2Z1NpPwHY+vP0bssG5UiF+NTo9EWgyyX8cZ6MnLDZZKHSEsymH3XQQi8wcPrNfd gFN46qVsiKjpPkvKTBCcZ1aSaoZok6tcWkZhilojwYgF6CBhOII8kTPtcFJ3Sbwj OZob+OIa43dRcu6lXQ5Px+hrjMOt3RQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:38 2025 by rpki-client