$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9b3392b0-e2a7-3756-95e8-ccdb10568fd9.roa File: 9b3392b0-e2a7-3756-95e8-ccdb10568fd9.roa (raw, json) Hash identifier: a7lShRcAclPOktkLCA7eNu4jqOdu8uLvrnE+2xUE3Xg= Subject key identifier: D4:03:A2:7A:B3:02:76:2F:F9:E9:76:27:B7:7F:AE:CD:DF:F1:00:68 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F6B37DD4BF7DBEF5EA40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9b3392b0-e2a7-3756-95e8-ccdb10568fd9.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 203 IP address blocks: 20.149.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f6:b3:7d:d4:bf:7d:be:f5:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=4c899f13-e6b8-4e88-9d47-a4598b3a0fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:78:3b:92:b7:52:d4:3e:8d:08:8a:0a:7e: 2b:93:f4:db:1d:37:dc:bd:a7:fe:0f:e0:07:8e:e9: 07:cf:52:9f:ca:73:31:3a:11:ec:7a:db:e7:e6:db: 1d:98:55:d0:99:c8:c2:4b:67:a8:95:94:7c:2f:dd: 98:85:9f:55:54:ea:9b:d7:8c:3c:54:9f:47:fa:ed: 99:39:fe:73:c1:24:f7:26:8e:9d:9b:ee:3b:55:38: dc:89:06:44:ea:69:1b:44:5d:a7:bc:9c:ff:7b:8f: 46:56:d9:e9:41:c6:79:c8:8b:45:4d:1b:b9:f9:4d: a2:b8:2f:5a:17:cc:aa:bb:f6:70:2b:de:75:e3:ab: 2a:32:b1:ee:54:2b:ea:d9:5d:95:52:79:4a:69:eb: ca:70:7f:d1:ba:08:a1:3d:28:33:8d:7b:6c:ae:4e: d0:fa:49:fd:de:fb:c2:e8:5b:3c:9c:bb:f9:2e:fc: be:b1:3e:60:70:5f:a4:52:d2:ff:c6:06:46:63:d3: 00:9c:ae:80:00:96:70:76:6c:2e:53:b2:0d:4e:10: 8d:ef:dd:c4:0c:a4:93:d2:16:92:b8:34:5a:35:9b: ec:6f:ff:2f:6b:b2:b3:9e:93:95:99:ce:25:2f:59: c0:68:f7:8d:19:00:ed:3f:99:1b:65:1b:ad:07:ce: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:03:A2:7A:B3:02:76:2F:F9:E9:76:27:B7:7F:AE:CD:DF:F1:00:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9b3392b0-e2a7-3756-95e8-ccdb10568fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:29:82:54:15:98:fc:ce:48:d8:a7:25:45:ef:d2:6f:82:dd: b9:4f:39:92:6d:2c:17:e1:a2:08:9f:5a:ae:b0:8c:23:76:c0: eb:20:95:27:b2:12:75:ba:d3:41:85:82:5b:64:34:70:c0:78: 0a:dc:af:dc:5b:3d:e2:28:e2:83:88:8e:e9:34:ae:1c:24:ab: f9:76:d8:1c:25:a9:57:ef:34:9d:5b:02:7b:5a:23:46:a5:f4: d1:1c:8f:af:22:ec:fc:33:a2:0d:1d:51:e2:53:2c:74:4e:ef: 95:97:f8:1f:37:ad:71:55:6c:14:5f:3c:ef:ae:cc:26:df:82: 28:d5:b5:41:91:40:b4:4d:70:13:a7:43:8e:89:81:f0:15:78: 0f:5f:f9:84:d6:da:3d:61:bf:f1:c5:09:35:63:55:a9:83:52: 2a:42:7a:49:f0:a6:fb:45:a7:f8:af:28:47:d4:ea:a8:69:66: 09:b3:f3:5a:c0:04:03:81:01:14:9f:75:63:1d:3b:d9:4c:8b: bb:2b:13:c6:62:3e:f8:67:8f:a1:fb:4d:75:99:b1:d8:5a:ee: c2:43:8a:56:b7:49:e2:41:4d:b3:64:5b:7a:d7:ae:d9:5c:d0: 4c:f6:8d:25:dd:2e:e0:ea:4a:f1:a9:d4:dc:d1:0f:b4:7d:3c: 5b:55:2b:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfazfdS/fb716kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk NGM4OTlmMTMtZTZiOC00ZTg4LTlkNDctYTQ1OThiM2EwZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAd4O5K3UtQ+jQiKCn4rk/TbHTfcvaf+D+AH jukHz1KfynMxOhHsetvn5tsdmFXQmcjCS2eolZR8L92YhZ9VVOqb14w8VJ9H+u2Z Of5zwST3Jo6dm+47VTjciQZE6mkbRF2nvJz/e49GVtnpQcZ5yItFTRu5+U2iuC9a F8yqu/ZwK95146sqMrHuVCvq2V2VUnlKaevKcH/RugihPSgzjXtsrk7Q+kn93vvC 6Fs8nLv5Lvy+sT5gcF+kUtL/xgZGY9MAnK6AAJZwdmwuU7INThCN793EDKST0haS uDRaNZvsb/8va7KznpOVmc4lL1nAaPeNGQDtP5kbZRutB85hhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQDonqzAnYv+el2J7d/rs3f8QBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWIzMzkyYjAtZTJhNy0z NzU2LTk1ZTgtY2NkYjEwNTY4ZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJspglQVmPzOSNinJUXv0m+C3blPOZJtLBfhogifWq6wjCN2wOsglSey EnW600GFgltkNHDAeArcr9xbPeIo4oOIjuk0rhwkq/l22BwlqVfvNJ1bAntaI0al 9NEcj68i7Pwzog0dUeJTLHRO75WX+B83rXFVbBRfPO+uzCbfgijVtUGRQLRNcBOn Q46JgfAVeA9f+YTW2j1hv/HFCTVjVamDUipCeknwpvtFp/ivKEfU6qhpZgmz81rA BAOBARSfdWMdO9lMi7srE8ZiPvhnj6H7TXWZsdha7sJDila3SeJBTbNkW3rXrtlc 0Ez2jSXdLuDqSvGp1NzRD7R9PFtVKxk= -----END CERTIFICATE-----Generated at Sun May 11 13:54:11 2025 by rpki-client