$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa File: 33db6407-ff15-3683-8991-2de945a25738.roa (raw, json) Hash identifier: 2I9EZiYxmAiDdMLv5cOEno+nZdqUcsblRw2u0gjwTrk= Subject key identifier: 52:FA:1D:19:BB:F7:F1:E0:C8:E3:6C:7E:0E:9D:61:87:B9:C9:92:33 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F3C996BB8F5EDA4F5700 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 203 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f3:c9:96:bb:8f:5e:da:4f:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=89dc5723-62cb-49b8-b522-bb0e4a89b98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f4:29:10:e0:25:f4:fa:d3:7d:86:d2:3f:cd: c4:65:dc:03:9b:95:29:a7:ff:aa:ef:f9:22:72:ca: df:77:25:73:03:f6:fa:dc:86:4a:ac:5c:27:77:48: f4:c8:f2:b4:90:56:5e:8a:56:a5:67:70:79:24:fe: c9:a1:02:05:bb:84:f8:eb:1b:5e:cd:80:5e:c7:60: c1:6d:bd:c3:85:05:c7:ab:6c:53:a1:85:21:60:62: a6:02:29:4c:01:7c:46:25:cd:a0:35:55:cd:c6:45: 48:3f:c7:ce:60:c7:cd:cb:34:b6:08:a2:51:0c:c2: d8:ce:6e:69:1e:10:65:8c:0b:0c:1b:2a:93:3f:3c: eb:ac:b0:c7:9b:6c:01:b6:da:56:93:e9:fb:63:29: 93:56:2c:fb:95:76:1d:ca:e8:aa:8b:fb:6f:d8:38: 06:76:c5:83:95:53:74:82:77:b0:ca:91:58:b4:89: fb:dd:df:df:e0:5d:d3:b4:33:c5:1b:23:d4:3b:6f: 22:41:7b:f8:16:fa:63:2c:20:85:fb:65:17:bd:55: af:77:42:63:45:80:97:36:e1:13:4a:16:31:eb:34: 5e:b2:73:b9:3b:72:ad:b7:61:68:b1:51:3e:56:03: 3d:3c:5c:3e:48:89:17:cb:a7:be:1f:83:1b:0b:3f: 4f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FA:1D:19:BB:F7:F1:E0:C8:E3:6C:7E:0E:9D:61:87:B9:C9:92:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/33db6407-ff15-3683-8991-2de945a25738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:48:df:b8:3c:83:d6:88:74:37:af:6e:52:bf:a9:f5:fd:4a: 27:82:2d:e4:24:46:5f:34:74:e2:31:0a:31:17:6d:ee:76:54: 8f:eb:6f:11:a5:69:cd:f8:93:2e:cb:6d:c3:a6:74:2f:bd:95: 50:a6:7e:3f:97:32:45:14:74:e9:54:38:5e:e2:49:49:fe:be: b2:d6:79:10:62:f0:b7:3e:c7:1d:06:8a:e2:e0:91:b0:49:3f: 19:e9:eb:1b:41:da:ce:70:99:a8:ff:55:73:b9:07:f8:1f:3b: c0:41:e2:3a:8c:cd:86:58:b8:dc:35:97:24:a0:7c:23:7d:80: 08:d2:74:b8:e1:38:bd:f4:71:22:00:38:13:ae:54:89:97:45: 23:eb:8f:37:d9:a4:5d:11:e9:c0:46:0a:2d:1c:55:08:97:9c: 32:14:62:7c:f2:c1:a6:ae:e8:40:f7:f8:eb:b7:03:57:20:57: 32:ed:d8:b5:9a:e7:02:bb:aa:d0:50:55:9b:91:c5:5d:1c:ef: a3:89:d7:30:81:a1:f7:93:bc:0c:e5:74:dd:d7:e0:3f:2e:8e: a5:3b:a5:41:51:45:85:53:62:d8:1f:d3:dc:3f:7b:88:36:f9: 4a:14:f2:05:d0:05:5d:00:87:2a:cd:26:19:95:2c:72:89:93: 59:0e:7c:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfPJlruPXtpPVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ODlkYzU3MjMtNjJjYi00OWI4LWI1MjItYmIwZTRhODliOThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/QpEOAl9PrTfYbSP83EZdwDm5Upp/+q7/ki csrfdyVzA/b63IZKrFwnd0j0yPK0kFZeilalZ3B5JP7JoQIFu4T46xtezYBex2DB bb3DhQXHq2xToYUhYGKmAilMAXxGJc2gNVXNxkVIP8fOYMfNyzS2CKJRDMLYzm5p HhBljAsMGyqTPzzrrLDHm2wBttpWk+n7YymTViz7lXYdyuiqi/tv2DgGdsWDlVN0 gnewypFYtIn73d/f4F3TtDPFGyPUO28iQXv4FvpjLCCF+2UXvVWvd0JjRYCXNuET ShYx6zResnO5O3Ktt2FosVE+VgM9PFw+SIkXy6e+H4MbCz9PqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL6HRm79/HgyONsfg6dYYe5yZIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzNkYjY0MDctZmYxNS0z NjgzLTg5OTEtMmRlOTQ1YTI1NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENI37g8g9aIdDevblK/qfX9SieCLeQkRl80dOIxCjEXbe52VI/rbxGl ac34ky7LbcOmdC+9lVCmfj+XMkUUdOlUOF7iSUn+vrLWeRBi8Lc+xx0GiuLgkbBJ Pxnp6xtB2s5wmaj/VXO5B/gfO8BB4jqMzYZYuNw1lySgfCN9gAjSdLjhOL30cSIA OBOuVImXRSPrjzfZpF0R6cBGCi0cVQiXnDIUYnzywaau6ED3+Ou3A1cgVzLt2LWa 5wK7qtBQVZuRxV0c76OJ1zCBofeTvAzldN3X4D8ujqU7pUFRRYVTYtgf09w/e4g2 +UoU8gXQBV0AhyrNJhmVLHKJk1kOfOI= -----END CERTIFICATE-----Generated at Sun May 11 15:18:35 2025 by rpki-client