$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/44c10e11-66e7-3cd4-83d9-f068bd15ae76.roa File: 44c10e11-66e7-3cd4-83d9-f068bd15ae76.roa (raw, json) Hash identifier: Q+qiTx7HTAuNEx4xsWjQodFhE6AaDGJhJc6t944it4A= Subject key identifier: D2:5F:9E:18:81:7D:7F:7D:59:2C:05:8B:B2:1F:A8:A7:15:0D:00:AC Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F65C3DA0D912BBD90900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/44c10e11-66e7-3cd4-83d9-f068bd15ae76.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 3360 IP address blocks: 20.149.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f6:5c:3d:a0:d9:12:bb:d9:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=2c5e14fa-d5ef-4119-bcfc-502fe50401a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:df:61:7d:7e:52:31:5d:e4:e4:5a:b0:d0: 04:40:b1:0f:18:7a:28:b0:a3:2c:03:bc:70:4a:fa: d6:bc:ce:b9:ac:b2:c2:9b:a9:62:65:16:00:93:1d: be:32:3e:70:31:10:88:70:39:35:00:8d:97:8d:31: 89:d0:d2:1f:23:a5:7b:21:c8:47:88:4c:1b:dc:b8: 7e:91:e9:41:2f:1c:59:a2:f9:2c:ab:06:e3:02:96: 0e:89:16:ab:ac:dc:16:89:f3:0d:d7:d5:f1:59:15: 0c:29:34:3c:2d:73:f7:4f:53:a4:de:22:75:ed:db: 5e:ca:49:80:8f:94:b6:e0:aa:63:20:46:b7:bc:a0: 0a:38:44:0f:c4:9e:fd:1a:d8:33:97:20:24:45:72: 6c:a0:d1:62:7a:97:b8:c5:aa:e2:26:0d:2e:15:31: 24:b2:53:d9:f6:69:af:56:80:cd:1a:44:b3:75:a2: 66:dc:62:46:ee:50:e4:c2:b3:68:47:64:7a:88:57: 66:64:27:5a:cd:68:21:7f:20:57:4e:f4:42:20:42: 51:77:9b:d3:82:a7:1a:72:83:11:78:62:c5:3d:77: d8:d8:c2:04:f8:fb:2e:67:b0:e5:39:df:c5:c3:6e: 7b:9a:e1:bf:59:d4:50:5b:a5:81:5e:d7:61:99:dc: 2a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5F:9E:18:81:7D:7F:7D:59:2C:05:8B:B2:1F:A8:A7:15:0D:00:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/44c10e11-66e7-3cd4-83d9-f068bd15ae76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b4:6d:be:35:35:48:55:04:b2:5a:6f:ba:93:fc:b9:77:e2: 9e:90:d4:be:c9:8c:aa:53:0d:4c:5a:27:d9:d1:ea:6b:64:36: b2:d5:94:18:3b:47:54:c4:4a:c6:2c:3b:a8:6b:c8:24:fd:69: 9c:86:a5:87:51:e6:cd:9e:25:1c:f6:07:30:98:88:7f:6b:53: 7e:85:56:4e:cf:d5:ac:ac:b8:63:c7:4f:93:64:5d:44:f8:e0: 4b:ad:39:a6:f0:12:73:75:6d:32:1d:80:8d:11:ce:30:01:86: dd:87:3d:c0:5d:53:c9:16:1c:6f:42:4b:e0:f0:a0:f8:9e:1d: fc:e9:82:7a:af:95:b2:5d:8b:1e:66:0d:3e:aa:aa:2c:7a:2a: d6:8d:e0:44:18:3d:50:3f:8f:55:f6:d8:b1:c6:ff:9f:04:31: c0:8e:d5:af:eb:75:64:31:57:94:c9:7b:da:1e:c5:75:de:05: ce:99:9e:35:7f:e5:b8:f3:87:fb:10:ab:a2:f4:d6:b5:40:db: 50:5e:7f:b6:28:a1:28:f3:8a:0b:47:63:03:89:eb:62:81:07: dd:05:04:d3:bb:96:46:e5:54:a9:ee:f5:9d:cd:fc:1b:c9:c7: e2:c5:b5:f4:89:d4:ec:0f:ad:0e:4b:1b:64:18:79:d1:2f:9e: 5e:dc:88:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfZcPaDZErvZCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk MmM1ZTE0ZmEtZDVlZi00MTE5LWJjZmMtNTAyZmU1MDQwMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcLfYX1+UjFd5ORasNAEQLEPGHoosKMsA7xw SvrWvM65rLLCm6liZRYAkx2+Mj5wMRCIcDk1AI2XjTGJ0NIfI6V7IchHiEwb3Lh+ kelBLxxZovksqwbjApYOiRarrNwWifMN19XxWRUMKTQ8LXP3T1Ok3iJ17dteykmA j5S24KpjIEa3vKAKOEQPxJ79GtgzlyAkRXJsoNFiepe4xariJg0uFTEkslPZ9mmv VoDNGkSzdaJm3GJG7lDkwrNoR2R6iFdmZCdazWghfyBXTvRCIEJRd5vTgqcacoMR eGLFPXfY2MIE+PsuZ7DlOd/Fw257muG/WdRQW6WBXtdhmdwqqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJfnhiBfX99WSwFi7IfqKcVDQCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDRjMTBlMTEtNjZlNy0z Y2Q0LTgzZDktZjA2OGJkMTVhZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG0bb41NUhVBLJab7qT/Ll34p6Q1L7JjKpTDUxaJ9nR6mtkNrLVlBg7 R1TESsYsO6hryCT9aZyGpYdR5s2eJRz2BzCYiH9rU36FVk7P1aysuGPHT5NkXUT4 4EutOabwEnN1bTIdgI0RzjABht2HPcBdU8kWHG9CS+DwoPieHfzpgnqvlbJdix5m DT6qqix6KtaN4EQYPVA/j1X22LHG/58EMcCO1a/rdWQxV5TJe9oexXXeBc6ZnjV/ 5bjzh/sQq6L01rVA21Bef7YooSjzigtHYwOJ62KBB90FBNO7lkblVKnu9Z3N/BvJ x+LFtfSJ1OwPrQ5LG2QYedEvnl7ciEs= -----END CERTIFICATE-----Generated at Sat May 10 19:43:10 2025 by rpki-client