$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa File: f68ba57f-5e4d-33d2-960d-57b417d05011.roa (raw, json) Hash identifier: hrhu+mObImqSMfbF3IsR2vXqTumHGqcNdPHGsTAkZC0= Subject key identifier: CB:BE:89:12:1A:7A:1B:E9:15:0B:2A:9A:21:1D:D2:2D:92:12:12:6D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D944B9FD50D3EB8EDBD4E020 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa Signing time: Tue 11 Feb 2025 15:55:46 +0000 ROA not before: Tue 11 Feb 2025 15:55:46 +0000 ROA not after: Mon 12 May 2025 14:55:46 +0000 asID: 3356 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:44:b9:fd:50:d3:eb:8e:db:d4:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 15:55:46 2025 GMT Not After : May 12 14:55:46 2025 GMT Subject: CN=58f34f22-86d7-4b77-ba5b-ae2fe841463c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:25:bb:bc:f4:eb:19:4d:73:39:83:a9:16:34: 7d:c1:5f:4a:cc:93:6f:ca:98:84:51:5f:87:ec:1b: 69:a0:ef:4a:1e:43:f6:dd:af:01:57:3f:0b:22:61: 6d:a4:b9:fa:a2:54:58:28:c7:31:5a:d4:a5:63:83: 9d:b0:48:bd:c4:25:1e:4e:07:41:fb:5b:b5:f6:88: 08:70:e7:40:f3:e3:4c:3f:c5:ef:9d:a9:16:ab:fe: f3:ba:9a:7b:b1:be:aa:79:27:bf:a1:b5:74:20:69: 4e:6e:59:b8:ab:de:7f:dd:c8:dc:17:7d:01:07:5b: 47:62:73:99:58:cf:4e:48:92:f0:83:45:67:c9:fa: 2b:d2:b3:4d:89:3a:dc:8c:fd:32:33:a0:41:7a:7b: 81:34:da:3a:c1:00:d5:02:78:d9:01:cb:c1:bd:ee: 25:64:a6:f2:aa:bb:60:54:40:29:fd:d1:f6:f5:84: 3f:fc:07:5c:a0:32:eb:92:91:90:83:ef:1f:e6:ce: b8:cd:5c:86:bb:7d:1f:3e:c2:6b:c0:f2:e9:e8:86: 07:5f:84:08:88:73:79:78:9e:e7:d1:ec:20:44:96: 59:ea:06:7a:28:47:a3:4d:f2:eb:84:86:4a:df:96: 6e:aa:19:3a:36:93:45:38:21:f5:19:1b:74:39:08: 6a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BE:89:12:1A:7A:1B:E9:15:0B:2A:9A:21:1D:D2:2D:92:12:12:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:3b:50:aa:7c:03:a7:ac:7d:a2:31:b2:e8:92:c3:1d:90:44: 25:11:06:84:b8:7c:0e:2a:be:6f:14:3d:15:37:3b:8a:48:18: 07:67:72:c8:92:00:e5:eb:54:b1:7f:26:c1:18:c4:a9:83:eb: 02:9f:f0:7f:c6:33:b0:76:15:6c:0d:1a:a1:10:9c:53:18:18: e9:2c:48:27:f7:f5:f0:59:4e:1e:d0:73:2e:35:f4:fc:a6:3c: 99:7f:57:4e:38:42:bf:d2:b0:ab:af:64:b5:58:e6:32:e3:cf: 38:60:de:f8:61:22:79:87:f3:a6:dd:11:31:ce:7f:eb:06:57: 97:96:a1:02:0e:00:d8:c4:8d:e1:df:cf:26:83:5d:45:de:39: 5a:47:bb:5b:bb:1b:a7:42:38:3d:e5:11:be:e4:99:98:b8:31: 4b:bd:72:4b:8d:22:8c:7c:83:91:90:b1:6e:f7:b7:96:01:ab: 8f:23:f4:f4:f9:81:a0:a5:a7:9b:b2:4e:a7:a5:80:bb:4f:b6: 29:99:b8:21:3c:13:67:f3:7c:a3:6b:ee:e1:dd:da:3c:74:e9: 7f:df:16:46:5d:83:9b:af:e2:7c:f3:14:28:15:0a:58:33:c9: d4:7b:8a:a0:cc:a6:66:c0:d0:c6:66:cb:a0:f9:3b:e3:1e:1c: fd:30:00:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZRLn9UNPrjtvU4CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE1NTU0NloXDTI1MDUxMjE0NTU0NlowLzEtMCsGA1UEAxMk NThmMzRmMjItODZkNy00Yjc3LWJhNWItYWUyZmU4NDE0NjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCW7vPTrGU1zOYOpFjR9wV9KzJNvypiEUV+H 7BtpoO9KHkP23a8BVz8LImFtpLn6olRYKMcxWtSlY4OdsEi9xCUeTgdB+1u19ogI cOdA8+NMP8XvnakWq/7zupp7sb6qeSe/obV0IGlOblm4q95/3cjcF30BB1tHYnOZ WM9OSJLwg0Vnyfor0rNNiTrcjP0yM6BBenuBNNo6wQDVAnjZAcvBve4lZKbyqrtg VEAp/dH29YQ//AdcoDLrkpGQg+8f5s64zVyGu30fPsJrwPLp6IYHX4QIiHN5eJ7n 0ewgRJZZ6gZ6KEejTfLrhIZK35Zuqhk6NpNFOCH1GRt0OQhqRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMu+iRIaehvpFQsqmiEd0i2SEhJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjY4YmE1N2YtNWU0ZC0z M2QyLTk2MGQtNTdiNDE3ZDA1MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI7UKp8A6esfaIxsuiSwx2QRCURBoS4fA4qvm8UPRU3O4pIGAdncsiS AOXrVLF/JsEYxKmD6wKf8H/GM7B2FWwNGqEQnFMYGOksSCf39fBZTh7Qcy419Pym PJl/V044Qr/SsKuvZLVY5jLjzzhg3vhhInmH86bdETHOf+sGV5eWoQIOANjEjeHf zyaDXUXeOVpHu1u7G6dCOD3lEb7kmZi4MUu9ckuNIox8g5GQsW73t5YBq48j9PT5 gaClp5uyTqelgLtPtimZuCE8E2fzfKNr7uHd2jx06X/fFkZdg5uv4nzzFCgVClgz ydR7iqDMpmbA0MZmy6D5O+MeHP0wAOU= -----END CERTIFICATE-----Generated at Sat Apr 26 18:11:17 2025 by rpki-client