$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa File: 5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa (raw, json) Hash identifier: 7dO5M0BTcb6nz3+6FcE+y3nrJKXCHMq2XxzJzjpBOf0= Subject key identifier: 5B:7B:DA:D3:FF:C5:69:40:CE:57:9C:5C:94:09:E2:1E:D2:8B:A2:F1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F3AD657DC9B6736C1B80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 202 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f3:ad:65:7d:c9:b6:73:6c:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=166566dd-98eb-4bb4-b05e-66fc46f736a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:81:15:f8:a3:0e:5f:7d:dd:11:24:de:26:89: 4f:ca:b1:7e:3a:46:a0:c0:94:e6:df:a2:2b:35:7c: 4d:8d:09:b3:0a:c4:74:61:7d:28:f3:1d:b8:ef:f4: 5c:a0:bb:08:68:24:40:06:f0:9a:a3:f7:5f:be:e0: 43:ea:e0:65:84:b2:59:df:99:5e:dc:d8:99:64:17: fd:a7:8b:01:2d:f2:9e:64:48:50:19:7b:b3:f1:62: 5f:15:3f:0d:17:f5:e5:0c:b7:4f:81:5c:34:bd:51: 74:b4:cc:c0:d1:6f:e2:02:a2:58:8c:d6:02:32:7e: d7:b5:83:32:64:77:a2:95:89:ab:9b:5e:23:10:d0: c7:f5:2c:25:5e:df:0d:af:8c:1a:60:6d:74:09:5a: 4e:f8:c4:01:65:41:56:19:af:9a:1e:c7:05:73:42: 26:7c:55:25:1a:c8:60:95:11:ae:75:3e:c2:47:5e: 20:6d:a0:70:ca:78:28:d0:80:63:8e:4d:be:20:e0: f2:8e:c3:23:38:d8:62:99:52:65:e8:36:a4:b6:c0: a2:6f:8f:58:27:7d:66:13:82:f6:73:9c:79:06:91: 90:0c:4f:f4:74:23:11:c5:fa:ce:a7:ad:19:99:16: f3:cf:b2:81:09:cc:4f:8f:09:75:8a:ae:0b:95:6a: 1e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7B:DA:D3:FF:C5:69:40:CE:57:9C:5C:94:09:E2:1E:D2:8B:A2:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b6:57:9f:74:de:f8:35:3b:91:66:7d:af:fa:5d:70:6d:b7: a7:2b:db:dd:d4:f5:54:c1:02:8d:1f:1a:89:c4:28:50:49:52: 6a:1b:8b:9e:90:97:a0:03:9a:2a:19:31:0f:b8:dc:54:00:a4: bb:d1:ae:93:30:73:2f:ea:65:a2:3d:52:25:c9:d7:ae:fc:49: a2:dc:e1:cd:ff:e0:7a:52:2e:a7:21:89:9f:c5:40:a8:ab:8b: 00:0e:3a:a1:75:14:2a:06:0e:41:68:32:9f:6d:c6:f8:7e:13: c6:70:ce:13:07:87:bb:b2:d0:e6:03:2e:fc:2e:cb:d7:a5:85: 2c:5b:07:f7:77:98:db:11:1c:6e:80:14:d5:26:7f:2e:25:1a: 7b:0d:91:0f:64:14:4f:fa:57:0e:2b:ff:b9:95:f6:94:42:8f: 43:8f:25:ba:4f:4a:c4:20:f6:2e:23:56:9e:34:29:24:ae:15: be:52:7b:06:55:eb:7c:09:52:47:9b:f8:2d:4d:62:54:06:69: f6:13:a7:c3:a2:ab:f4:d0:71:cd:54:d9:02:be:59:2b:7f:89: 5a:85:87:8f:cb:0b:07:b7:e1:27:49:77:6a:c9:bb:0c:55:c8: 6d:8f:79:73:56:c6:0d:90:34:fa:77:f1:e0:1d:db:7f:3e:37: 2f:71:c5:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfOtZX3JtnNsG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk MTY2NTY2ZGQtOThlYi00YmI0LWIwNWUtNjZmYzQ2ZjczNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4EV+KMOX33dESTeJolPyrF+OkagwJTm36Ir NXxNjQmzCsR0YX0o8x247/RcoLsIaCRABvCao/dfvuBD6uBlhLJZ35le3NiZZBf9 p4sBLfKeZEhQGXuz8WJfFT8NF/XlDLdPgVw0vVF0tMzA0W/iAqJYjNYCMn7XtYMy ZHeilYmrm14jENDH9SwlXt8Nr4waYG10CVpO+MQBZUFWGa+aHscFc0ImfFUlGshg lRGudT7CR14gbaBwyngo0IBjjk2+IODyjsMjONhimVJl6DaktsCib49YJ31mE4L2 c5x5BpGQDE/0dCMRxfrOp60ZmRbzz7KBCcxPjwl1iq4LlWoeuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt72tP/xWlAzlecXJQJ4h7Si6LxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWNlYTQwZjMtYTA3NS0z YjQ1LWJkM2ItYTcyMjBjZjA5YzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+2V5903vg1O5Fmfa/6XXBtt6cr293U9VTBAo0fGonEKFBJUmobi56Q l6ADmioZMQ+43FQApLvRrpMwcy/qZaI9UiXJ1678SaLc4c3/4HpSLqchiZ/FQKir iwAOOqF1FCoGDkFoMp9txvh+E8ZwzhMHh7uy0OYDLvwuy9elhSxbB/d3mNsRHG6A FNUmfy4lGnsNkQ9kFE/6Vw4r/7mV9pRCj0OPJbpPSsQg9i4jVp40KSSuFb5SewZV 63wJUkeb+C1NYlQGafYTp8Oiq/TQcc1U2QK+WSt/iVqFh4/LCwe34SdJd2rJuwxV yG2PeXNWxg2QNPp38eAd238+Ny9xxSk= -----END CERTIFICATE-----Generated at Wed May 7 21:36:28 2025 by rpki-client