$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa File: 2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa (raw, json) Hash identifier: tL5Ljr6+cnClQ4IUh0E55Y6BabZPVJsVKAGtDGa/7JA= Subject key identifier: 97:66:E9:B2:E1:14:69:D3:73:8A:2E:78:7B:10:85:8F:C7:B0:E2:85 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849D6FA462A5A920E1B75800980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa Signing time: Tue 13 May 2025 13:01:02 +0000 ROA not before: Tue 13 May 2025 13:01:02 +0000 ROA not after: Mon 11 Aug 2025 13:01:02 +0000 asID: 3356 IP address blocks: 20.134.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:fa:46:2a:5a:92:0e:1b:75:80:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 13 13:01:02 2025 GMT Not After : Aug 11 13:01:02 2025 GMT Subject: CN=3480fdc9-0200-4f83-b0e4-f1a25aa2a238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:1a:6a:bb:20:1f:91:40:03:c6:f9:81:e7: 5f:74:b3:84:23:6e:a9:50:27:62:b9:42:de:46:22: ad:83:4e:0d:36:ad:d1:75:d6:e2:7d:2f:8b:aa:1c: 6b:60:49:b6:79:fa:f0:98:83:98:a1:36:e7:52:83: 57:e0:d6:87:c4:cc:5c:c5:f5:06:f7:41:9a:e7:ff: e3:c1:0d:90:a7:cd:ec:d4:7e:c7:33:e1:24:27:f1: 09:f7:ae:7d:6c:0c:89:d2:3c:be:41:ea:77:84:02: c3:45:98:ac:23:c0:ac:f2:17:a9:68:30:b0:76:b0: 8e:4c:15:97:cb:67:ed:8b:e9:e1:99:62:83:63:78: e7:4d:71:9b:4f:1a:1d:96:58:6f:d1:b3:8c:fe:a6: 43:23:60:d4:22:9b:80:f8:3b:d7:aa:9e:3b:57:10: a5:07:b7:79:5c:31:28:59:6a:5c:49:de:82:e4:6f: aa:51:5e:0d:6f:49:9c:fc:2f:d2:06:d4:37:b6:df: 65:6c:44:ab:f8:cf:a5:4f:f9:0b:b2:8e:ac:6b:24: 38:ee:16:f2:0e:22:59:a4:95:74:38:41:8d:cf:c6: b1:45:30:b8:c9:70:b2:a0:28:1f:5e:1c:b3:ce:05: a2:17:0d:ec:9b:b1:94:35:2f:ef:9f:bd:1b:60:39: dd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:66:E9:B2:E1:14:69:D3:73:8A:2E:78:7B:10:85:8F:C7:B0:E2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ed:58:8a:43:fa:63:e0:74:00:ed:5e:d5:e7:ac:59:14:e4: c6:6b:04:f0:c7:a4:7b:c5:8d:7a:a4:68:00:ab:71:49:73:21: 17:a2:d5:3a:06:18:0a:e9:5a:2d:1d:0d:cf:eb:24:d3:97:b1: 5c:7d:48:7f:87:e6:24:86:d5:ea:85:6d:d0:29:06:30:5e:4a: 94:17:c6:89:9a:fc:87:77:c9:b3:5b:63:fa:ce:de:54:16:6c: e5:da:17:ed:be:6c:8d:21:c4:fb:58:e3:d6:62:10:55:5b:b8: 5d:ad:a4:e0:99:5f:da:6d:f9:d7:38:01:e3:87:fe:d8:4b:1d: 43:c7:f6:fb:93:fe:53:ea:e5:d3:1d:18:74:f9:4c:84:9b:3d: e6:94:eb:0d:b9:55:16:1c:2d:72:48:fb:3f:10:5a:22:61:30: d9:55:2f:17:d3:3f:c8:70:90:a1:96:4d:d7:5b:8e:5d:33:58: 10:72:3d:27:7b:51:31:58:10:03:62:88:17:23:43:c4:10:32: 03:11:2c:bd:cb:68:f2:17:44:bc:53:ab:8e:04:9f:8e:22:2b: 61:82:70:3e:75:22:6a:a6:94:a3:c4:a6:95:9d:b5:a4:b3:c8: 72:6d:f7:a6:d8:ef:42:a4:9c:b6:02:34:f5:09:e2:d2:81:99: 68:2f:6d:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW+kYqWpIOG3WACYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk MzQ4MGZkYzktMDIwMC00ZjgzLWIwZTQtZjFhMjVhYTJhMjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWcaarsgH5FAA8b5gedfdLOEI26pUCdiuULe RiKtg04NNq3RddbifS+LqhxrYEm2efrwmIOYoTbnUoNX4NaHxMxcxfUG90Ga5//j wQ2Qp83s1H7HM+EkJ/EJ9659bAyJ0jy+Qep3hALDRZisI8Cs8hepaDCwdrCOTBWX y2fti+nhmWKDY3jnTXGbTxodllhv0bOM/qZDI2DUIpuA+DvXqp47VxClB7d5XDEo WWpcSd6C5G+qUV4Nb0mc/C/SBtQ3tt9lbESr+M+lT/kLso6sayQ47hbyDiJZpJV0 OEGNz8axRTC4yXCyoCgfXhyzzgWiFw3sm7GUNS/vn70bYDnd7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdm6bLhFGnTc4oueHsQhY/HsOKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMmRlNjZlMjMtYjBmOS0z YmVmLWJhMDAtNjc5MmViMzhlYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABztWIpD+mPgdADtXtXnrFkU5MZrBPDHpHvFjXqkaACrcUlzIRei1ToG GArpWi0dDc/rJNOXsVx9SH+H5iSG1eqFbdApBjBeSpQXxoma/Id3ybNbY/rO3lQW bOXaF+2+bI0hxPtY49ZiEFVbuF2tpOCZX9pt+dc4AeOH/thLHUPH9vuT/lPq5dMd GHT5TISbPeaU6w25VRYcLXJI+z8QWiJhMNlVLxfTP8hwkKGWTddbjl0zWBByPSd7 UTFYEANiiBcjQ8QQMgMRLL3LaPIXRLxTq44En44iK2GCcD51ImqmlKPEppWdtaSz yHJt96bY70KknLYCNPUJ4tKBmWgvbTY= -----END CERTIFICATE-----Generated at Tue Jul 1 15:25:04 2025 by rpki-client