$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa File: 53fb2e37-5e98-3242-85b4-dc0598c808e7.roa (raw, json) Hash identifier: 6Nd29YdEAHrB7LXgFqEeZj14dwdPjw0ZOqIMdtgo+WA= Subject key identifier: 62:DE:A7:EA:FB:61:34:95:05:40:22:7B:57:68:50:C2:50:1B:C3:93 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F59F04800497683C49C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 3356 IP address blocks: 20.149.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f5:9f:04:80:04:97:68:3c:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=d391c42e-38a7-4d19-9bbf-affad5a0e35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:56:01:72:7f:12:52:49:20:de:85:f5:81: 97:d0:a8:0a:3a:24:a6:d6:3f:6d:de:6a:5f:7a:68: ef:66:be:ea:a7:60:36:c8:cc:7f:a2:55:06:7c:76: 3e:f2:cc:7a:c8:64:7f:10:9a:cf:5e:90:17:63:c3: af:cf:65:10:d4:01:5d:ee:c8:e9:1e:5d:38:47:65: 6c:44:d6:c0:47:99:e0:47:7f:a9:6d:c1:9b:78:ee: 94:89:9b:fd:3c:6d:1b:5f:c7:c1:63:be:36:ce:22: 91:60:c3:1d:da:85:62:1b:2f:e6:1e:ad:30:cf:81: d9:fe:97:cc:c1:e9:bb:65:62:89:12:58:a6:33:df: 25:27:9c:17:7d:5f:60:52:60:30:3c:a9:42:ca:4b: 1f:d5:21:0d:3b:49:61:9b:8c:42:a3:83:06:50:17: 90:1a:92:4a:68:87:da:f9:69:67:bd:b8:30:7a:60: 94:05:2b:08:f2:2c:fa:f3:59:42:73:ea:e3:d4:1c: 5e:96:3a:98:21:3e:37:b5:e2:29:a4:2e:9a:76:71: ba:39:70:e2:22:f7:47:86:99:31:58:99:88:66:0b: 05:34:4b:3b:d0:6e:32:61:64:58:8e:86:39:29:65: a6:03:d5:1c:cd:eb:19:54:ca:fd:65:ab:7c:93:5a: 29:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DE:A7:EA:FB:61:34:95:05:40:22:7B:57:68:50:C2:50:1B:C3:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:aa:76:ae:7b:9f:fa:b5:11:b6:a0:28:b9:2e:4c:88:aa:83: 0a:55:84:0e:bd:dc:91:d4:29:e5:37:2f:db:14:5d:e0:75:d4: 76:fa:49:88:cf:f8:68:e6:05:af:0c:9b:04:51:98:cc:1f:1f: b2:2d:09:42:94:78:75:7d:db:8d:36:33:b0:6f:ad:ca:aa:17: dd:b9:e9:5b:3e:e9:f8:2b:b4:98:0a:b7:c2:0d:76:b0:27:b2: af:f8:09:8d:11:7c:d4:01:8c:89:f0:50:81:21:ff:a5:53:9d: 21:14:11:f9:0e:4a:5b:d5:02:00:8c:92:87:f1:aa:d3:a6:69: a2:e3:cf:82:92:02:42:25:1d:bd:03:30:7a:59:ab:93:b9:8f: 4e:4e:56:dc:9a:49:55:6a:57:43:40:67:03:9a:9d:c3:e8:16: 45:63:68:18:f5:11:a1:11:af:dd:ed:00:b6:c2:02:79:58:1e: 90:98:e6:2c:3e:92:52:88:af:7c:41:a9:59:bc:17:fc:83:88: e7:b2:41:07:05:6b:c0:c4:2f:21:68:5f:d1:33:a5:85:13:15: 16:81:16:5a:65:45:3c:9b:6a:cc:26:9d:b1:47:fa:0c:74:58: dc:49:3a:05:5a:60:56:93:dd:8a:8d:58:fb:6a:40:85:6f:2a: 2a:6b:ac:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfWfBIAEl2g8ScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDM5MWM0MmUtMzhhNy00ZDE5LTliYmYtYWZmYWQ1YTBlMzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCRWAXJ/ElJJIN6F9YGX0KgKOiSm1j9t3mpf emjvZr7qp2A2yMx/olUGfHY+8sx6yGR/EJrPXpAXY8Ovz2UQ1AFd7sjpHl04R2Vs RNbAR5ngR3+pbcGbeO6UiZv9PG0bX8fBY742ziKRYMMd2oViGy/mHq0wz4HZ/pfM wem7ZWKJElimM98lJ5wXfV9gUmAwPKlCyksf1SENO0lhm4xCo4MGUBeQGpJKaIfa +WlnvbgwemCUBSsI8iz681lCc+rj1BxeljqYIT43teIppC6adnG6OXDiIvdHhpkx WJmIZgsFNEs70G4yYWRYjoY5KWWmA9UczesZVMr9Zat8k1optQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLep+r7YTSVBUAie1doUMJQG8OTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTNmYjJlMzctNWU5OC0z MjQyLTg1YjQtZGMwNTk4YzgwOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6qdq57n/q1EbagKLkuTIiqgwpVhA693JHUKeU3L9sUXeB11Hb6SYjP +GjmBa8MmwRRmMwfH7ItCUKUeHV92402M7BvrcqqF9256Vs+6fgrtJgKt8INdrAn sq/4CY0RfNQBjInwUIEh/6VTnSEUEfkOSlvVAgCMkofxqtOmaaLjz4KSAkIlHb0D MHpZq5O5j05OVtyaSVVqV0NAZwOancPoFkVjaBj1EaERr93tALbCAnlYHpCY5iw+ klKIr3xBqVm8F/yDiOeyQQcFa8DELyFoX9EzpYUTFRaBFlplRTybaswmnbFH+gx0 WNxJOgVaYFaT3YqNWPtqQIVvKiprrKM= -----END CERTIFICATE-----Generated at Sun May 11 17:02:50 2025 by rpki-client