$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55b2bc86-f62b-3040-8b74-1f9fa8878ce6.roa File: 55b2bc86-f62b-3040-8b74-1f9fa8878ce6.roa (raw, json) Hash identifier: aOrYsVhhGM9E2dUNWcYdF32bJDlh5UwnP/HyJgsAhpE= Subject key identifier: BA:A0:0B:BD:3E:7C:F2:D1:CB:01:B7:E5:E6:50:7D:90:ED:9A:08:D6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849AD1A011A9D27BDB2F1718D80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55b2bc86-f62b-3040-8b74-1f9fa8878ce6.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 3356 IP address blocks: 20.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:01:1a:9d:27:bd:b2:f1:71:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=3910c806-aa1e-4911-be8b-78009535bf5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f4:06:e0:a3:7d:01:c5:11:cf:5b:b9:18:b5: c0:ff:e5:87:ed:a1:1c:3e:87:83:ae:02:8f:4f:74: 02:70:89:f5:23:79:e9:7d:8e:85:e5:d3:b4:9c:1a: a0:c4:44:e6:c9:6f:46:66:87:8f:27:a3:ce:78:69: 10:e7:73:2f:a5:df:64:62:c5:16:ce:2e:c2:54:7f: c6:92:b2:31:6f:c0:8d:08:96:5c:74:ab:3e:fe:f8: 88:42:91:2e:8c:76:1d:b6:87:9f:d9:68:bb:9f:d6: 56:c6:24:98:6e:f8:1c:21:27:29:10:16:33:5f:89: 61:6c:de:47:6b:54:a0:7a:35:c7:b2:3c:87:93:db: c2:76:b6:bd:8c:3a:1f:e6:fa:49:39:7c:f6:1d:11: d9:2c:59:69:21:18:6c:c1:99:1c:c9:c1:36:cd:97: fa:09:53:9c:79:50:48:7f:cf:09:7f:d7:2b:29:bf: 48:9c:f0:a7:2a:f8:1f:df:f8:6b:8f:57:90:eb:04: c4:32:76:3c:e8:68:57:56:2b:92:3e:50:30:6a:3e: a3:d5:d9:d0:77:77:d6:5f:3e:4d:ea:0a:54:8f:cd: dd:9a:f6:5a:71:50:ad:f7:a5:ae:aa:ce:7a:1f:77: ec:72:41:fa:d6:c0:a7:b1:ef:81:95:ca:25:e6:57: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A0:0B:BD:3E:7C:F2:D1:CB:01:B7:E5:E6:50:7D:90:ED:9A:08:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55b2bc86-f62b-3040-8b74-1f9fa8878ce6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d2:25:cf:6f:d2:01:22:32:75:3c:4d:39:f7:c3:86:a3:9c: 8c:87:17:dc:d3:ad:ef:f4:4d:b6:60:64:4e:3e:b7:3d:6c:e7: 14:6e:6e:c1:25:c9:c5:0a:f0:61:67:64:44:38:2e:82:b2:c5: 7b:3c:b5:8e:c0:45:76:19:b0:19:f3:28:b1:98:d3:26:87:1f: 94:f0:d1:7e:26:d4:7c:80:f5:43:ed:f8:43:36:dd:b1:e4:91: c8:eb:74:75:08:b2:35:86:ff:16:8b:1c:43:d0:84:8b:1e:be: a5:a5:41:d4:db:17:fd:9f:a6:67:e0:8e:09:7f:b1:d2:9e:24: b7:2e:96:ad:71:b4:1b:02:88:68:3e:ad:af:7b:cc:b1:9f:4e: 76:59:a8:63:ec:f9:fb:d3:ce:72:ee:d6:7a:b5:70:e4:c0:e7: 8d:3a:a0:ed:d2:5e:8b:61:ec:92:9e:00:91:ef:3d:ed:05:77: f7:12:d5:91:57:0e:90:cf:1e:fb:4d:c1:42:5d:d0:c7:8c:48: 54:23:9a:eb:8b:6d:fd:63:8d:7d:6a:24:ac:bb:cd:88:21:83: ff:d9:15:6d:ab:1d:d1:22:2b:10:f2:7c:2a:11:e7:b1:fb:b3: 77:16:b5:07:b7:71:41:49:47:3f:b3:6d:28:dd:7d:2f:02:e4: af:df:9a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgEanSe9svFxjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MzkxMGM4MDYtYWExZS00OTExLWJlOGItNzgwMDk1MzViZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPQG4KN9AcURz1u5GLXA/+WH7aEcPoeDrgKP T3QCcIn1I3npfY6F5dO0nBqgxETmyW9GZoePJ6POeGkQ53Mvpd9kYsUWzi7CVH/G krIxb8CNCJZcdKs+/viIQpEujHYdtoef2Wi7n9ZWxiSYbvgcIScpEBYzX4lhbN5H a1SgejXHsjyHk9vCdra9jDof5vpJOXz2HRHZLFlpIRhswZkcycE2zZf6CVOceVBI f88Jf9crKb9InPCnKvgf3/hrj1eQ6wTEMnY86GhXViuSPlAwaj6j1dnQd3fWXz5N 6gpUj83dmvZacVCt96Wuqs56H3fsckH61sCnse+Blcol5ldJjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqgC70+fPLRywG35eZQfZDtmgjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTViMmJjODYtZjYyYi0z MDQwLThiNzQtMWY5ZmE4ODc4Y2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzSJc9v0gEiMnU8TTn3w4ajnIyHF9zTre/0TbZgZE4+tz1s5xRubsEl ycUK8GFnZEQ4LoKyxXs8tY7ARXYZsBnzKLGY0yaHH5Tw0X4m1HyA9UPt+EM23bHk kcjrdHUIsjWG/xaLHEPQhIsevqWlQdTbF/2fpmfgjgl/sdKeJLculq1xtBsCiGg+ ra97zLGfTnZZqGPs+fvTznLu1nq1cOTA5406oO3SXoth7JKeAJHvPe0Fd/cS1ZFX DpDPHvtNwUJd0MeMSFQjmuuLbf1jjX1qJKy7zYghg//ZFW2rHdEiKxDyfCoR57H7 s3cWtQe3cUFJRz+zbSjdfS8C5K/fmqQ= -----END CERTIFICATE-----Generated at Fri May 9 02:40:53 2025 by rpki-client