$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa File: b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa (raw, json) Hash identifier: zwX6Fpti33GdD7rFNEpChBjwOjrkiRkNCw/u/NVRPEg= Subject key identifier: 21:BF:FD:9B:15:DC:7C:15:F4:14:82:3D:10:19:52:99:7F:4C:45:67 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F4DC6ABBE49849828C40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 3356 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f4:dc:6a:bb:e4:98:49:82:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=6ef36be0-ae60-4594-8485-f445ce7937ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:da:f9:f3:7f:c8:21:c5:91:c9:d7:d4:9c:73: 3b:12:e7:98:13:cb:92:23:65:d3:59:33:0a:42:7a: 4e:47:f9:16:a3:4c:cf:2f:7d:88:88:dc:08:aa:8f: c3:0e:aa:86:b4:6f:ac:dd:59:4c:29:26:db:86:9d: 81:8a:15:54:d0:b9:ae:1a:8b:4a:ab:27:2f:a5:3d: 29:1b:da:97:b9:2d:54:5e:7e:86:f2:d2:95:12:b6: f1:20:39:a3:36:f0:49:f4:e7:87:3b:30:27:b6:ae: 9a:22:58:71:17:41:1c:a9:00:8e:c2:ca:ac:46:b2: 47:0d:19:d0:63:3d:ee:a0:ea:7b:0a:fc:51:72:d5: 7d:1b:90:76:29:80:49:3d:ed:62:68:82:2d:6a:b6: 78:84:a3:9a:f4:69:77:c9:df:c1:20:c5:02:46:37: 7d:39:33:73:3c:11:72:78:74:ad:69:e5:6d:c2:16: 44:4c:e3:be:69:99:ba:e0:55:de:15:ca:cc:13:a1: ff:83:f3:15:dd:73:30:11:3d:13:32:8b:f0:8a:65: 9c:78:15:75:91:52:c4:e2:56:01:eb:7d:cb:f1:26: a1:4c:72:38:a8:7b:22:1d:88:11:7d:fe:f9:ea:16: 1e:0a:67:04:3e:63:16:ee:40:76:7a:87:7e:c4:6d: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BF:FD:9B:15:DC:7C:15:F4:14:82:3D:10:19:52:99:7F:4C:45:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d0:48:05:1b:70:c2:0a:9b:af:40:26:0b:64:f5:93:7c:50: d5:75:4b:29:7e:eb:d1:a8:67:a5:d9:7c:ab:bd:a4:85:87:80: f2:45:25:d1:32:b1:18:c2:63:4b:e2:4f:49:d6:f7:9f:76:02: 50:56:60:6f:9d:27:e9:4f:70:19:61:ea:d0:97:72:ca:3d:94: 47:22:df:8d:f8:9d:8f:bf:62:5f:cf:ad:85:e5:8a:80:0f:21: 66:6f:8a:69:bf:6a:7c:da:bd:52:db:c4:e1:99:32:e4:57:3f: 98:ad:61:85:36:f5:6e:04:5b:77:d6:cd:ab:b7:f1:41:10:85: b5:3b:68:35:9b:3f:43:3d:35:93:b5:a0:86:f0:b8:27:ec:f9: 31:20:8f:92:15:23:c1:6c:86:b7:01:fc:30:58:06:11:8f:43: 24:ff:89:b7:54:25:20:60:15:bb:f1:e0:9f:46:81:a2:10:32: 7f:38:3d:0f:0a:68:2a:46:92:e5:11:ae:0b:0b:ea:15:62:8e: 6b:22:a1:33:58:cf:5d:12:b5:3f:d9:96:dc:cc:6b:f9:1e:db: d7:9d:cd:1a:fd:5a:db:e3:0b:76:e6:67:89:44:99:c0:31:11: 46:21:0c:6b:de:c7:8e:2d:c0:ae:53:84:ff:95:27:2a:8e:da: 98:31:55:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfTcarvkmEmCjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk NmVmMzZiZTAtYWU2MC00NTk0LTg0ODUtZjQ0NWNlNzkzN2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdr583/IIcWRydfUnHM7EueYE8uSI2XTWTMK QnpOR/kWo0zPL32IiNwIqo/DDqqGtG+s3VlMKSbbhp2BihVU0LmuGotKqycvpT0p G9qXuS1UXn6G8tKVErbxIDmjNvBJ9OeHOzAntq6aIlhxF0EcqQCOwsqsRrJHDRnQ Yz3uoOp7CvxRctV9G5B2KYBJPe1iaIItarZ4hKOa9Gl3yd/BIMUCRjd9OTNzPBFy eHStaeVtwhZETOO+aZm64FXeFcrME6H/g/MV3XMwET0TMovwimWceBV1kVLE4lYB 633L8SahTHI4qHsiHYgRff756hYeCmcEPmMW7kB2eod+xG3jxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG//ZsV3HwV9BSCPRAZUpl/TEVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjliZmMzMGMtNGQyNS0z YmQwLTkzMjQtY2NjYmJkZTE2MjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHQSAUbcMIKm69AJgtk9ZN8UNV1Syl+69GoZ6XZfKu9pIWHgPJFJdEy sRjCY0viT0nW9592AlBWYG+dJ+lPcBlh6tCXcso9lEci3434nY+/Yl/PrYXlioAP IWZvimm/anzavVLbxOGZMuRXP5itYYU29W4EW3fWzau38UEQhbU7aDWbP0M9NZO1 oIbwuCfs+TEgj5IVI8FshrcB/DBYBhGPQyT/ibdUJSBgFbvx4J9GgaIQMn84PQ8K aCpGkuURrgsL6hVijmsioTNYz10StT/ZltzMa/ke29edzRr9WtvjC3bmZ4lEmcAx EUYhDGvex44twK5ThP+VJyqO2pgxVSI= -----END CERTIFICATE-----Generated at Sat May 10 21:09:47 2025 by rpki-client