$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa File: 32054d0b-077d-3e96-8773-c1690e50a953.roa (raw, json) Hash identifier: rHvV8irsdkkE56UaaOhs5MhgKqYVy2uKMGLhJeAx1HA= Subject key identifier: 37:6D:2C:80:A4:2E:83:EA:B5:1A:6C:B9:07:2E:4B:14:6A:DE:9F:54 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F55ABAB312BBA4196100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 202 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f5:5a:ba:b3:12:bb:a4:19:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=cb8ee565-ae23-4801-9ddc-97e4785f2be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9e:44:69:ac:8a:29:b4:c7:0f:7d:e0:e7:06: 02:10:c1:dc:d0:1a:2e:22:84:32:bc:b8:4f:19:bd: 2a:99:8c:2a:68:bb:c0:06:0e:51:a7:ab:26:25:3d: 78:0d:98:4f:22:af:5b:be:7d:fe:0b:12:90:6d:97: ec:78:d5:bb:cc:c7:da:26:9c:68:4a:63:3e:7c:bf: 3c:57:81:d1:6b:f7:dd:8c:f0:d9:92:fe:24:fb:56: b4:26:7f:a6:b9:c4:a9:34:56:3f:43:9b:a4:c3:a3: 5c:59:cd:7e:c0:57:14:e7:87:ce:ec:86:cd:d9:8c: bb:a3:44:c6:aa:8d:d1:3d:20:7a:18:06:15:c0:4f: c6:4d:07:3c:cc:86:a0:67:21:6e:3f:af:49:5e:87: 27:7f:95:fa:eb:b6:18:c4:83:01:07:4e:67:49:ba: df:13:f9:10:1f:bc:2b:1b:b7:0a:19:99:28:78:c2: b0:43:85:8c:12:da:99:78:51:99:20:e1:d8:13:9f: 62:d8:25:46:24:12:c8:04:f3:4f:04:82:e4:ab:b4: d0:39:ab:4b:c0:06:48:c1:88:02:6c:ae:cd:2a:d3: 21:3b:63:eb:7e:ac:df:7d:02:57:2f:99:51:69:46: a7:56:7d:75:d6:d2:5e:e5:4c:14:93:69:20:60:da: 73:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6D:2C:80:A4:2E:83:EA:B5:1A:6C:B9:07:2E:4B:14:6A:DE:9F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/32054d0b-077d-3e96-8773-c1690e50a953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:46:7a:2c:f4:55:a9:7b:14:30:84:f1:a8:16:12:a0:8c:e9: 32:e4:3d:85:77:6a:2e:18:e1:72:f1:92:2d:8e:20:4b:7d:0a: 13:69:ec:9d:aa:24:2c:d3:ec:f5:03:e8:5e:df:e0:29:b9:11: ec:2e:7a:9b:13:dc:3c:75:cc:cd:3e:8c:ef:5c:01:7f:54:d2: 24:e0:c4:83:fa:0e:36:a6:be:7d:1f:06:6e:6d:26:ff:18:c0: 91:b2:81:71:bd:47:f2:fc:22:84:4a:2b:b4:1d:91:d8:99:7c: 0f:5c:6a:79:5f:75:9e:6e:ab:2c:bb:d0:6d:d0:24:fa:a7:8d: e4:94:90:0c:b8:6d:2c:07:5b:8e:0a:29:ef:f3:6e:bc:b4:f3: 30:f4:da:34:d2:a5:43:16:83:38:26:02:69:ce:c9:09:ef:bc: 2e:23:f2:4f:a0:39:ab:8a:47:b0:28:73:e0:f5:0b:ca:bd:70: 38:05:8c:d9:d7:6b:e3:94:65:c4:30:e4:b5:d9:84:34:27:a8: 26:39:f4:12:35:c1:24:ca:ac:5b:df:85:f4:db:36:4f:4f:fb: 07:fd:0d:46:ac:53:65:41:65:60:89:80:ce:7e:30:4a:30:8f: a7:3e:d4:9d:0a:c1:b5:e6:d8:87:20:8e:58:d3:c4:6f:74:5a: 72:7d:7c:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfVaurMSu6QZYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk Y2I4ZWU1NjUtYWUyMy00ODAxLTlkZGMtOTdlNDc4NWYyYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p5EaayKKbTHD33g5wYCEMHc0BouIoQyvLhP Gb0qmYwqaLvABg5Rp6smJT14DZhPIq9bvn3+CxKQbZfseNW7zMfaJpxoSmM+fL88 V4HRa/fdjPDZkv4k+1a0Jn+mucSpNFY/Q5ukw6NcWc1+wFcU54fO7IbN2Yy7o0TG qo3RPSB6GAYVwE/GTQc8zIagZyFuP69JXocnf5X667YYxIMBB05nSbrfE/kQH7wr G7cKGZkoeMKwQ4WMEtqZeFGZIOHYE59i2CVGJBLIBPNPBILkq7TQOatLwAZIwYgC bK7NKtMhO2PrfqzffQJXL5lRaUanVn111tJe5UwUk2kgYNpzHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdtLICkLoPqtRpsuQcuSxRq3p9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzIwNTRkMGItMDc3ZC0z ZTk2LTg3NzMtYzE2OTBlNTBhOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVGeiz0Val7FDCE8agWEqCM6TLkPYV3ai4Y4XLxki2OIEt9ChNp7J2q JCzT7PUD6F7f4Cm5EewuepsT3Dx1zM0+jO9cAX9U0iTgxIP6Djamvn0fBm5tJv8Y wJGygXG9R/L8IoRKK7QdkdiZfA9canlfdZ5uqyy70G3QJPqnjeSUkAy4bSwHW44K Ke/zbry08zD02jTSpUMWgzgmAmnOyQnvvC4j8k+gOauKR7Aoc+D1C8q9cDgFjNnX a+OUZcQw5LXZhDQnqCY59BI1wSTKrFvfhfTbNk9P+wf9DUasU2VBZWCJgM5+MEow j6c+1J0KwbXm2IcgjljTxG90WnJ9fBw= -----END CERTIFICATE-----Generated at Sun May 11 19:05:13 2025 by rpki-client