$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7391e80e-1609-311c-b39c-9832fb7cfa4f.roa File: 7391e80e-1609-311c-b39c-9832fb7cfa4f.roa (raw, json) Hash identifier: /GRw3F4w1EP67OE2FJ1Mw8LzIpXhU4b3o+PqB3XLdRw= Subject key identifier: 55:02:B5:6E:36:F4:DA:B7:DC:5A:E6:0D:E8:0E:2F:A1:2D:4A:B2:71 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F52B8C5A0B68DE8617E0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7391e80e-1609-311c-b39c-9832fb7cfa4f.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 3360 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f5:2b:8c:5a:0b:68:de:86:17:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=e3744b05-ef10-4718-8a97-8fc15ada7c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e1:30:a9:45:91:88:47:7c:40:3b:44:e0:29: 3f:a5:98:93:6f:80:b8:79:08:5d:c3:95:be:c7:88: d1:39:5e:8a:d6:8d:28:06:7a:49:d4:a4:5f:0a:a3: de:37:bc:35:18:34:a8:32:60:12:3e:7e:15:9b:ec: bb:31:25:a1:09:50:49:34:17:5c:02:bf:20:4d:86: 1e:44:0d:ad:18:80:a3:74:3c:bc:fe:85:7d:2b:92: 5c:db:06:14:b8:9a:4b:d9:8d:35:43:a9:28:8f:ce: e1:83:b0:03:fc:7c:40:34:a0:88:62:d6:39:9f:86: 6e:62:50:ca:60:42:24:7d:2c:a5:fe:cb:72:3e:25: 88:32:a9:eb:97:ef:5c:a5:38:16:26:ff:2b:0d:86: f0:d1:58:61:be:0b:2e:25:8b:f7:5d:ac:88:65:6a: 49:2e:c1:5b:c3:cb:2b:95:46:c6:aa:56:a2:34:0c: ff:5a:1b:95:52:1a:6e:37:f8:be:af:da:48:59:bf: 65:a6:d3:a2:a6:02:db:17:90:dc:d9:53:15:5a:93: cf:55:77:52:3b:c7:f9:e1:3a:07:74:f6:f7:71:d7: 6b:9a:39:89:01:7f:58:14:84:4e:06:ea:6d:b1:41: b4:96:1d:b0:e9:5d:f5:61:00:05:be:cc:da:eb:0f: 16:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:02:B5:6E:36:F4:DA:B7:DC:5A:E6:0D:E8:0E:2F:A1:2D:4A:B2:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7391e80e-1609-311c-b39c-9832fb7cfa4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:61:98:91:67:39:2d:09:8e:10:8d:99:66:02:4f:ba:65:b2: 3e:0d:26:5a:fa:82:8c:99:f5:b3:fd:d7:ed:d6:df:92:29:f9: 1c:b7:48:4f:84:20:8d:28:47:44:68:96:75:eb:7d:ab:72:5e: 83:bf:e5:84:69:75:83:9c:de:f5:63:82:d0:13:52:b4:00:c8: 01:72:4e:36:53:b9:55:a8:e0:65:f5:c3:93:07:03:0d:22:72: bd:32:b5:df:8d:b5:3c:cc:17:0d:c3:73:c8:ed:7e:f8:aa:c9: ea:48:9a:56:81:bf:c8:3f:f8:b5:fd:34:92:ce:23:17:5e:13: 4d:19:0d:7e:58:db:24:29:8b:41:82:e2:84:23:4b:47:3d:04: f2:16:b4:61:cf:dd:2c:aa:ae:54:9a:c1:d4:79:6b:c0:8b:01: 96:a8:d5:d5:c3:77:86:94:a9:7d:6e:1a:18:10:ad:10:1c:ca: 1b:47:13:57:45:25:24:4b:e5:1c:06:14:1e:80:34:ee:52:96: fb:e6:d7:b2:45:f8:f7:9b:c2:0b:e8:a6:42:97:6d:de:4a:51: e7:1c:8d:7a:19:88:99:b5:90:c1:33:86:6f:52:10:49:78:30: 0e:1a:b3:45:56:a0:3e:d1:49:2b:f7:bd:dd:ff:ad:d1:3d:21: c6:01:73:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfUrjFoLaN6GF+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ZTM3NDRiMDUtZWYxMC00NzE4LThhOTctOGZjMTVhZGE3YzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouEwqUWRiEd8QDtE4Ck/pZiTb4C4eQhdw5W+ x4jROV6K1o0oBnpJ1KRfCqPeN7w1GDSoMmASPn4Vm+y7MSWhCVBJNBdcAr8gTYYe RA2tGICjdDy8/oV9K5Jc2wYUuJpL2Y01Q6koj87hg7AD/HxANKCIYtY5n4ZuYlDK YEIkfSyl/styPiWIMqnrl+9cpTgWJv8rDYbw0VhhvgsuJYv3XayIZWpJLsFbw8sr lUbGqlaiNAz/WhuVUhpuN/i+r9pIWb9lptOipgLbF5Dc2VMVWpPPVXdSO8f54ToH dPb3cddrmjmJAX9YFIROBuptsUG0lh2w6V31YQAFvsza6w8WmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUCtW429Nq33FrmDegOL6EtSrJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzM5MWU4MGUtMTYwOS0z MTFjLWIzOWMtOTgzMmZiN2NmYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdhmJFnOS0JjhCNmWYCT7plsj4NJlr6goyZ9bP91+3W35Ip+Ry3SE+E II0oR0RolnXrfatyXoO/5YRpdYOc3vVjgtATUrQAyAFyTjZTuVWo4GX1w5MHAw0i cr0ytd+NtTzMFw3Dc8jtfviqyepImlaBv8g/+LX9NJLOIxdeE00ZDX5Y2yQpi0GC 4oQjS0c9BPIWtGHP3SyqrlSawdR5a8CLAZao1dXDd4aUqX1uGhgQrRAcyhtHE1dF JSRL5RwGFB6ANO5Slvvm17JF+PebwgvopkKXbd5KUeccjXoZiJm1kMEzhm9SEEl4 MA4as0VWoD7RSSv3vd3/rdE9IcYBcxo= -----END CERTIFICATE-----Generated at Thu May 8 14:43:50 2025 by rpki-client