$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa File: 023b5472-f6c0-3095-80c3-7b022b15a339.roa (raw, json) Hash identifier: hJZEOVchKt8eDVrq2Pr9J6J86rB88aBULEDPN+h13Ps= Subject key identifier: 3C:88:79:E5:E6:E6:94:29:46:8A:51:B6:89:A5:A5:11:C8:DB:BD:40 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858499294A551C6096EA30CC9DD80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 203 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a5:51:c6:09:6e:a3:0c:c9:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=b50d5a57-b70c-430c-89f5-d75d0bd4db17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6a:46:6a:45:da:e7:4e:3e:7d:09:87:65:46: 91:89:f3:10:53:09:65:68:50:b9:8f:87:68:b5:b1: b1:98:3d:d1:6a:4f:28:03:c7:50:d9:1f:d6:93:7a: 47:93:17:fc:39:7e:ef:4d:23:30:8a:d2:1a:08:a1: 05:03:51:e7:3e:58:bd:bc:fd:c0:bb:91:62:23:16: e4:e8:33:30:b8:96:0e:ff:50:15:81:d1:df:8a:56: 7f:8a:49:15:ec:01:fd:5b:88:5f:78:74:7e:dc:0a: 2b:63:26:01:68:e5:ba:bb:a7:d5:52:31:6e:0a:ff: 24:8f:a2:25:5f:4d:c5:1c:e6:2e:97:c7:28:90:82: 49:cf:87:5c:53:a1:2e:fb:1a:b8:61:ae:e1:48:b5: 45:d7:ca:c2:10:87:f1:29:e2:28:11:ab:ac:b5:68: f1:b9:ad:72:48:bb:15:70:2d:1d:08:1a:4a:67:a0: e2:66:f9:aa:4b:db:76:b4:85:1e:98:40:33:5d:8b: 91:44:48:9f:e5:45:6b:da:8b:8d:19:fc:b7:2b:f9: 60:76:99:65:a4:b5:66:b8:3c:12:6c:75:6d:a8:da: 92:17:98:9f:84:40:8c:ec:f7:3e:dc:9c:82:5c:d1: 60:00:e9:3e:0f:3c:8d:63:91:af:9c:8d:a3:0c:50: 82:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:88:79:E5:E6:E6:94:29:46:8A:51:B6:89:A5:A5:11:C8:DB:BD:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1e:65:bf:87:13:01:0d:2e:0a:06:a6:79:98:cb:98:d5:1a: c9:b9:e9:b2:03:2e:f1:46:2c:34:5a:1d:89:f2:c0:24:7d:67: 2c:b3:98:2c:b4:c6:f1:da:cb:13:fb:b5:9b:6c:fa:2c:89:6f: a9:01:ad:80:ff:7b:76:51:96:bc:7f:62:2d:b5:47:11:57:9a: 92:92:73:8a:1f:65:e8:61:dd:7c:eb:e4:8d:cc:a3:85:a8:94: 67:ca:32:bb:4f:c2:19:c0:4c:6d:69:d1:2a:9c:45:5d:ee:04: fc:95:25:0c:e0:c0:a6:44:0a:b0:14:c2:54:10:da:99:a2:0b: 96:a3:b1:de:42:2a:19:56:38:16:99:ad:30:c0:b8:1a:6e:3d: ea:3b:17:da:d7:5e:e3:0f:50:3c:cf:de:5b:af:d9:39:a0:28: bb:d8:17:b6:f9:44:f7:5c:41:06:db:a4:a5:ed:e2:51:ef:14: bf:e1:1b:f0:5b:2c:29:d0:0f:fb:73:1f:6e:42:5d:7a:1f:05: 13:b5:19:c2:60:88:d4:56:73:45:b9:14:00:de:55:59:60:bb: f4:f6:08:ca:4c:9a:2a:3c:6a:b5:46:e4:f1:25:28:18:5b:b3: 26:1c:a1:76:f9:01:d2:3d:8e:66:21:a9:db:b5:54:25:e0:d4: 67:23:37:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKVRxgluowzJ3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk YjUwZDVhNTctYjcwYy00MzBjLTg5ZjUtZDc1ZDBiZDRkYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mpGakXa504+fQmHZUaRifMQUwllaFC5j4do tbGxmD3Rak8oA8dQ2R/Wk3pHkxf8OX7vTSMwitIaCKEFA1HnPli9vP3Au5FiIxbk 6DMwuJYO/1AVgdHfilZ/ikkV7AH9W4hfeHR+3AorYyYBaOW6u6fVUjFuCv8kj6Il X03FHOYul8cokIJJz4dcU6Eu+xq4Ya7hSLVF18rCEIfxKeIoEaustWjxua1ySLsV cC0dCBpKZ6DiZvmqS9t2tIUemEAzXYuRREif5UVr2ouNGfy3K/lgdpllpLVmuDwS bHVtqNqSF5ifhECM7Pc+3JyCXNFgAOk+DzyNY5GvnI2jDFCCrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyIeeXm5pQpRopRtomlpRHI271AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDIzYjU0NzItZjZjMC0z MDk1LTgwYzMtN2IwMjJiMTVhMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQeZb+HEwENLgoGpnmYy5jVGsm56bIDLvFGLDRaHYnywCR9ZyyzmCy0 xvHayxP7tZts+iyJb6kBrYD/e3ZRlrx/Yi21RxFXmpKSc4ofZehh3Xzr5I3Mo4Wo lGfKMrtPwhnATG1p0SqcRV3uBPyVJQzgwKZECrAUwlQQ2pmiC5ajsd5CKhlWOBaZ rTDAuBpuPeo7F9rXXuMPUDzP3luv2TmgKLvYF7b5RPdcQQbbpKXt4lHvFL/hG/Bb LCnQD/tzH25CXXofBRO1GcJgiNRWc0W5FADeVVlgu/T2CMpMmio8arVG5PElKBhb syYcoXb5AdI9jmYhqdu1VCXg1GcjN18= -----END CERTIFICATE-----Generated at Sun May 11 19:07:32 2025 by rpki-client