$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a0a7662e-747b-33e3-8354-fbbed9b696f8.roa File: a0a7662e-747b-33e3-8354-fbbed9b696f8.roa (raw, json) Hash identifier: oILgwsObASOBAOGLB4twSpjAupWn8/XTAiqhV9U4+r4= Subject key identifier: 12:54:05:5D:11:53:9B:AD:3E:8A:44:C9:75:0D:C9:55:03:EF:35:9E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F8005BFAD763AEE6A300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a0a7662e-747b-33e3-8354-fbbed9b696f8.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 3356 IP address blocks: 20.156.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f8:00:5b:fa:d7:63:ae:e6:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=238f835f-f2a3-49d6-9964-067eecee98c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a2:6a:ae:63:c0:6c:6b:7a:b6:3d:fb:d7:55: db:08:80:e9:f7:69:90:c5:be:ca:c2:29:39:ab:68: c6:9d:56:c5:b3:bd:12:fd:2b:94:f2:a8:51:3d:d5: 0c:3d:fb:73:cd:9d:4f:b7:c0:d0:dc:a2:5f:04:86: 0a:a3:57:2c:84:40:92:71:99:e4:f9:f8:81:47:a8: ba:13:8b:60:96:61:2c:d1:64:59:1a:c2:2a:77:04: 29:4e:4d:8d:77:b3:66:fc:23:86:20:de:d0:8d:53: 43:bf:13:ba:0b:68:23:5f:c0:fa:7f:53:1a:09:48: 94:1f:e3:4f:35:89:6e:5c:9b:bf:06:90:dd:31:99: 16:a4:09:fb:5a:c5:3f:5c:cc:01:f1:4a:57:4c:1e: 04:4c:3b:95:98:51:8f:43:0c:84:9d:fc:b2:1d:63: 38:31:31:65:4e:6a:79:97:a8:21:5a:e8:f5:eb:e9: b2:1c:c9:cc:a9:07:8f:f9:68:5b:a6:36:16:0e:25: 17:2c:c8:b0:4a:1b:0e:54:08:ae:65:a5:05:50:32: dd:0a:0f:60:e8:9e:24:3c:a3:80:9b:51:f3:bf:5e: 07:d2:78:25:be:ac:2c:40:82:37:ea:29:82:55:96: 56:af:45:2b:e2:6c:5f:de:ee:4b:b4:7e:e0:37:16: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:54:05:5D:11:53:9B:AD:3E:8A:44:C9:75:0D:C9:55:03:EF:35:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a0a7662e-747b-33e3-8354-fbbed9b696f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.156.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:56:87:66:61:c7:1c:14:c8:e6:61:7b:7e:2d:85:52:a5:bd: 15:a7:e5:78:42:44:6b:0d:88:f1:77:00:8d:f1:16:bc:6e:2e: a0:02:3c:91:33:6c:c8:b6:48:b6:e0:91:a3:a9:b9:f4:00:ef: 96:73:ed:15:0b:56:57:28:11:23:d4:cc:8d:a2:2c:3c:3e:bf: aa:85:d3:cc:c6:7b:71:5e:ad:11:a7:86:cb:15:bd:05:e7:1e: 95:03:ed:ac:5f:44:a3:3a:be:b0:71:77:97:07:07:5d:bc:c2: c4:d9:a3:24:32:9e:8c:6c:19:fd:8f:69:1b:60:7c:93:c7:96: 20:38:58:f4:6d:c5:55:dd:44:1f:be:41:b8:27:af:4e:cd:d9: 69:0b:07:1b:1e:ab:b7:40:1e:ce:6a:cd:20:26:e2:ec:a6:a2: 07:d3:ce:66:67:46:b2:1f:df:4c:8a:cc:df:56:e2:98:ab:b7: 25:cb:38:b6:6d:10:99:79:35:42:ed:52:a6:6a:c2:4c:8e:1b: b4:35:1a:12:9e:ee:f3:41:a6:83:f3:09:d5:1c:3a:79:19:d2: 50:39:24:a5:2f:0c:cc:9c:eb:2c:87:0e:bf:7f:48:be:33:2f: f6:4d:16:52:cb:90:25:6a:6e:e7:a1:18:ad:ad:ca:b8:9d:13: 79:2c:da:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfgAW/rXY67mowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk MjM4ZjgzNWYtZjJhMy00OWQ2LTk5NjQtMDY3ZWVjZWU5OGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaJqrmPAbGt6tj3711XbCIDp92mQxb7Kwik5 q2jGnVbFs70S/SuU8qhRPdUMPftzzZ1Pt8DQ3KJfBIYKo1cshECScZnk+fiBR6i6 E4tglmEs0WRZGsIqdwQpTk2Nd7Nm/COGIN7QjVNDvxO6C2gjX8D6f1MaCUiUH+NP NYluXJu/BpDdMZkWpAn7WsU/XMwB8UpXTB4ETDuVmFGPQwyEnfyyHWM4MTFlTmp5 l6ghWuj16+myHMnMqQeP+WhbpjYWDiUXLMiwShsOVAiuZaUFUDLdCg9g6J4kPKOA m1Hzv14H0nglvqwsQII36imCVZZWr0Ur4mxf3u5LtH7gNxYH0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJUBV0RU5utPopEyXUNyVUD7zWeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTBhNzY2MmUtNzQ3Yi0z M2UzLTgzNTQtZmJiZWQ5YjY5NmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJypMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlWh2ZhxxwUyOZhe34thVKlvRWn5XhCRGsNiPF3AI3xFrxuLqACPJEz bMi2SLbgkaOpufQA75Zz7RULVlcoESPUzI2iLDw+v6qF08zGe3FerRGnhssVvQXn HpUD7axfRKM6vrBxd5cHB128wsTZoyQynoxsGf2PaRtgfJPHliA4WPRtxVXdRB++ Qbgnr07N2WkLBxseq7dAHs5qzSAm4uymogfTzmZnRrIf30yKzN9W4pirtyXLOLZt EJl5NULtUqZqwkyOG7Q1GhKe7vNBpoPzCdUcOnkZ0lA5JKUvDMyc6yyHDr9/SL4z L/ZNFlLLkCVqbuehGK2tyridE3ks2hY= -----END CERTIFICATE-----Generated at Mon May 12 16:50:34 2025 by rpki-client