$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa File: 38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa (raw, json) Hash identifier: COUA6iM7ipRYFfGpRTrssVnd2milyROeXza/pEsAN5s= Subject key identifier: 9F:EB:2E:2A:8D:45:55:2E:D6:4E:5B:DF:E2:83:A0:ED:13:4C:99:75 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F81350B197F3C7207300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 202 IP address blocks: 20.156.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f8:13:50:b1:97:f3:c7:20:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=6882bb46-27de-4fdb-99dd-30244df93e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fa:f2:19:3c:b9:3a:c4:26:de:b1:2c:c0:dd: b8:ff:af:30:60:61:d8:78:93:b3:5c:c7:8e:b4:7a: 41:02:13:be:46:89:c2:47:df:e6:ed:ac:ff:86:a3: c4:3f:79:c0:d4:6e:d0:ad:c2:d1:28:15:b1:00:35: 05:fe:cb:ac:da:40:a9:30:16:52:c0:db:a4:56:b7: 0a:78:ff:99:cf:37:f4:34:b3:de:7a:dc:e5:38:12: 61:3c:a8:f7:5c:8e:6f:a4:f4:37:b7:ee:8b:fb:a3: 6a:45:0c:de:0a:b0:33:54:c7:b4:cb:bd:1b:bb:b1: 27:87:0f:36:87:dd:cb:8e:bc:00:97:63:c1:de:68: f4:1d:ea:42:be:a3:2b:c6:70:be:d9:de:27:15:85: 7e:ab:6f:d5:8f:d0:fd:ad:5a:d7:8e:22:1d:a9:0d: d3:ef:e8:4d:e5:9d:6f:cc:2f:1a:1f:9b:7b:f9:bd: 70:7d:90:4c:1e:d6:fc:e9:3d:a9:89:44:e8:1f:86: b7:57:7c:23:a2:ef:82:fc:de:e1:3c:ce:f6:56:57: a7:f0:56:2c:d6:26:8d:80:32:3c:6f:56:a5:c9:d4: fd:1a:6c:8f:5d:ec:7f:d4:3e:74:d6:d7:42:e3:a7: c7:28:be:bd:58:6c:e2:bd:8e:e1:07:97:b6:2e:44: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EB:2E:2A:8D:45:55:2E:D6:4E:5B:DF:E2:83:A0:ED:13:4C:99:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.156.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e6:49:6c:eb:d7:2f:75:2e:06:ba:08:ef:f5:7c:49:fc:60: 03:80:c9:a2:9d:0c:d0:21:91:62:ba:02:bb:d8:b2:b6:6e:e5: ec:23:bf:2c:7a:42:8f:cc:d3:84:52:9d:d0:e0:a7:30:35:59: 4b:4e:07:cc:4f:3f:50:ab:73:1e:98:3d:c9:a0:29:94:19:e2: 60:3b:f0:b9:58:2b:bd:da:8e:25:4a:16:f0:e5:07:b7:9c:23: a2:9e:37:96:47:85:4b:b3:a3:61:be:87:72:11:d8:18:81:6b: 39:4f:39:3f:0d:d2:78:35:03:d1:e5:03:56:81:c3:6c:f1:73: 21:b3:7b:96:ab:24:b4:2c:4f:f1:fb:62:e5:33:8b:c1:ce:25: 5d:9d:7a:70:ac:e2:c5:e4:d4:b1:e1:41:71:d7:18:ec:e0:54: 5d:5e:73:04:6f:c7:97:08:26:6f:97:c0:cf:a7:09:d9:cb:db: 5b:9c:a1:85:14:32:d9:1f:20:b1:0a:29:ee:48:cb:46:cc:90: a9:b6:62:5b:1c:f6:ac:bf:36:8e:5f:2b:4f:95:60:fb:10:4d: a5:d6:71:75:53:a0:25:72:5b:29:09:2c:62:6c:cb:7a:9b:de: 60:bc:87:8c:3d:6f:9f:b7:0d:52:fd:ac:e8:c4:10:d3:9e:b9: 9d:37:15:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfgTULGX88cgcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk Njg4MmJiNDYtMjdkZS00ZmRiLTk5ZGQtMzAyNDRkZjkzZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PryGTy5OsQm3rEswN24/68wYGHYeJOzXMeO tHpBAhO+RonCR9/m7az/hqPEP3nA1G7QrcLRKBWxADUF/sus2kCpMBZSwNukVrcK eP+Zzzf0NLPeetzlOBJhPKj3XI5vpPQ3t+6L+6NqRQzeCrAzVMe0y70bu7Enhw82 h93LjrwAl2PB3mj0HepCvqMrxnC+2d4nFYV+q2/Vj9D9rVrXjiIdqQ3T7+hN5Z1v zC8aH5t7+b1wfZBMHtb86T2piUToH4a3V3wjou+C/N7hPM72Vlen8FYs1iaNgDI8 b1alydT9GmyPXex/1D501tdC46fHKL69WGzivY7hB5e2LkTB9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/rLiqNRVUu1k5b3+KDoO0TTJl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhjYTU2NDMtZmU0OS0z MTA4LThkYmQtZDRjYjYzZTRlOTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJypMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzmSWzr1y91Lga6CO/1fEn8YAOAyaKdDNAhkWK6ArvYsrZu5ewjvyx6 Qo/M04RSndDgpzA1WUtOB8xPP1Crcx6YPcmgKZQZ4mA78LlYK73ajiVKFvDlB7ec I6KeN5ZHhUuzo2G+h3IR2BiBazlPOT8N0ng1A9HlA1aBw2zxcyGze5arJLQsT/H7 YuUzi8HOJV2denCs4sXk1LHhQXHXGOzgVF1ecwRvx5cIJm+XwM+nCdnL21ucoYUU MtkfILEKKe5Iy0bMkKm2Ylsc9qy/No5fK0+VYPsQTaXWcXVToCVyWykJLGJsy3qb 3mC8h4w9b5+3DVL9rOjEENOeuZ03FWg= -----END CERTIFICATE-----Generated at Sun May 11 15:13:53 2025 by rpki-client