$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa File: 5d2179de-2db2-31e0-91ae-22d99860f145.roa (raw, json) Hash identifier: gfSh6hAxMFXNBxWHygO9T1f0+vYeLwBtvVE7O9z89VY= Subject key identifier: 7A:46:6D:DE:8F:B4:EF:0A:D7:2C:21:B5:C7:BA:0E:69:0F:EC:9E:81 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F2D03734EBED3D8A4780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 3360 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f2:d0:37:34:eb:ed:3d:8a:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=88ce1e74-3cf5-4383-9cc4-560d9c530e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:08:5e:27:f1:68:21:20:83:29:2e:27:b1: 08:b5:42:5d:66:25:a9:eb:a9:64:58:ad:17:8e:c3: b9:f0:2f:f7:29:39:ce:79:dd:b1:56:0e:29:f9:28: c4:a2:db:fd:98:62:20:0b:6f:f1:61:be:df:c0:9d: dc:55:da:e8:cf:3d:2a:72:4e:81:8d:a8:97:c4:97: 3f:72:85:60:5d:22:58:a9:f0:4b:f1:3c:3e:6c:8c: 4d:67:61:76:85:19:66:87:31:73:e3:b2:fb:ea:77: 3e:b9:5c:f3:d7:d6:0b:31:c0:01:52:e5:01:58:07: 73:60:dd:10:92:d7:cf:42:7a:5f:44:a5:29:8f:61: fd:7a:56:06:2a:37:c6:6c:b9:be:18:9c:0f:11:57: 53:04:af:ed:27:9e:dd:cd:d3:96:fa:db:cb:c7:6f: 21:5a:36:20:00:3f:f3:62:9a:8c:a0:4d:91:fd:63: d5:e0:cc:dd:4d:70:9a:00:10:82:e1:8c:9f:47:2c: 7c:1f:88:5a:37:7e:6e:ac:3d:8b:5f:85:88:76:fb: 1e:d0:ae:ae:81:4d:c7:6d:16:4d:1e:a6:24:7e:5a: 51:95:58:69:29:06:96:12:fe:8e:83:83:e8:67:6a: a3:7d:58:3b:15:e4:da:38:d1:9f:a1:ff:02:0f:44: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:46:6D:DE:8F:B4:EF:0A:D7:2C:21:B5:C7:BA:0E:69:0F:EC:9E:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f4:4b:16:aa:28:f3:3e:6b:17:f1:64:25:56:ac:4b:24:d3: cc:92:6d:b2:c7:ea:32:2e:28:c2:2b:c0:70:a1:0d:2a:ad:a5: af:b3:ee:31:87:9b:59:74:c1:49:0b:3e:96:81:19:6c:04:4a: 53:5b:95:3d:19:53:02:74:c9:c2:43:b5:df:39:6e:f8:81:60: 2f:74:8c:10:b7:bb:0b:a4:20:e1:e4:95:0e:ba:df:ef:a8:c0: 56:e5:83:0e:fe:fc:fb:7e:f6:ef:f7:ec:6e:12:14:77:f2:c4: bc:50:fe:1b:83:48:f2:e6:2d:b2:d9:4d:ed:7f:b0:09:52:e2: 22:b5:ba:cc:cf:c7:c2:52:21:43:e7:24:88:1f:52:7a:a4:53: 4e:1a:e0:d7:6b:08:1c:d0:b7:27:be:29:03:62:6b:97:c1:a3: ce:e7:30:54:a6:3f:5b:7e:c0:89:78:3f:42:ce:2a:7b:59:3d: dc:91:b0:81:e9:52:06:c1:04:b4:92:65:4b:ae:d0:76:d1:0e: aa:fb:e9:57:20:3c:02:27:5e:ab:73:33:b4:be:01:0d:18:09: eb:5b:8e:0d:0c:c2:cc:bd:04:8c:33:d2:09:35:21:0e:38:74: 38:58:18:9e:a4:b4:f8:36:b0:ee:84:17:5d:5f:71:13:a7:d4: 9e:90:7f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfLQNzTr7T2KR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ODhjZTFlNzQtM2NmNS00MzgzLTljYzQtNTYwZDljNTMwZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+IIXifxaCEggykuJ7EItUJdZiWp66lkWK0X jsO58C/3KTnOed2xVg4p+SjEotv9mGIgC2/xYb7fwJ3cVdrozz0qck6BjaiXxJc/ coVgXSJYqfBL8Tw+bIxNZ2F2hRlmhzFz47L76nc+uVzz19YLMcABUuUBWAdzYN0Q ktfPQnpfRKUpj2H9elYGKjfGbLm+GJwPEVdTBK/tJ57dzdOW+tvLx28hWjYgAD/z YpqMoE2R/WPV4MzdTXCaABCC4YyfRyx8H4haN35urD2LX4WIdvse0K6ugU3HbRZN HqYkflpRlVhpKQaWEv6Og4PoZ2qjfVg7FeTaONGfof8CD0Rt7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpGbd6PtO8K1ywhtce6DmkP7J6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWQyMTc5ZGUtMmRiMi0z MWUwLTkxYWUtMjJkOTk4NjBmMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn0SxaqKPM+axfxZCVWrEsk08ySbbLH6jIuKMIrwHChDSqtpa+z7jGH m1l0wUkLPpaBGWwESlNblT0ZUwJ0ycJDtd85bviBYC90jBC3uwukIOHklQ663++o wFblgw7+/Pt+9u/37G4SFHfyxLxQ/huDSPLmLbLZTe1/sAlS4iK1uszPx8JSIUPn JIgfUnqkU04a4NdrCBzQtye+KQNia5fBo87nMFSmP1t+wIl4P0LOKntZPdyRsIHp UgbBBLSSZUuu0HbRDqr76VcgPAInXqtzM7S+AQ0YCetbjg0Mwsy9BIwz0gk1IQ44 dDhYGJ6ktPg2sO6EF11fcROn1J6Qf/w= -----END CERTIFICATE-----Generated at Sun May 11 13:38:12 2025 by rpki-client