$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa File: bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa (raw, json) Hash identifier: g+bSabK4qt2NE9N5V6olWQtg5qV91oxQiL1E2Lhm6EY= Subject key identifier: 5E:F0:08:3C:93:C7:5F:0A:6C:7F:EA:79:0B:D3:A1:50:76:9D:04:F8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F4AC2DB6D772ECC83100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 203 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f4:ac:2d:b6:d7:72:ec:c8:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=7884aa3b-2a70-4d65-a499-7618e933e5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:74:31:91:d9:eb:3e:ce:17:57:1e:a6:45: a8:55:21:a1:8a:51:9a:22:70:41:fb:f7:57:0e:b6: d9:16:6b:24:b0:6c:30:06:22:ac:2e:4f:cd:0c:1f: cb:a5:cd:bc:e4:8e:66:72:19:12:56:7f:9c:8f:ed: b2:8c:82:77:76:0d:45:01:08:51:ca:dd:75:fd:b4: a4:a6:9c:5d:42:6c:87:ff:1c:7d:f7:6d:d9:fa:19: 46:5f:ef:a2:af:5c:62:cb:9d:1e:ae:52:d3:c3:87: a4:0a:d2:e0:a4:dc:66:bc:fb:41:51:c9:d7:f7:42: 44:19:6e:a8:02:95:b6:70:7e:6e:f5:c4:70:84:17: f2:80:88:b1:a8:c8:5d:e3:e3:72:c0:8b:1a:bd:56: da:8d:bb:a5:33:7c:ef:d8:70:37:fd:5e:b1:8f:46: a3:0d:8e:85:88:77:b6:1e:5d:68:d4:b5:23:7a:6d: 25:98:27:6c:04:39:0f:4d:cd:e9:7c:98:85:ff:90: f0:d4:f4:b9:63:0d:cc:fe:aa:cd:44:67:50:38:46: ed:3e:ae:8a:75:93:99:61:49:7a:30:27:c6:77:cc: 34:b1:7f:03:a7:ca:f6:e0:ad:48:4b:08:52:50:9b: 73:9e:6b:1f:7c:d9:05:1e:5e:b2:41:e8:30:c2:a1: 72:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F0:08:3C:93:C7:5F:0A:6C:7F:EA:79:0B:D3:A1:50:76:9D:04:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c8:41:96:6b:f6:20:fc:e3:bf:1e:9a:3e:4d:36:d5:fb:70: fb:1a:20:ab:6f:45:77:80:43:ae:f5:db:4a:37:15:ca:32:6e: d3:62:69:e6:15:9f:af:32:0e:7d:d7:db:1c:16:5a:88:c7:ed: 1b:1f:89:04:5b:bc:63:9c:a8:67:a8:e7:54:10:2d:1e:02:0f: ac:e0:f4:b1:1a:84:23:82:a2:e8:38:78:bc:09:8d:13:f3:e3: 36:98:ea:a8:c6:08:9f:a4:2f:2e:50:a1:58:e1:07:67:ff:cd: ff:88:21:ec:04:ab:8d:7a:04:de:4d:93:4a:68:2d:cf:79:49: 53:a2:4f:ef:f6:b9:29:7f:d3:a9:db:2c:66:4b:cf:e4:d4:a7: 0b:a6:9a:21:53:fb:62:83:9e:91:e0:ed:d3:04:23:c9:5f:68: a7:b5:7f:42:92:25:eb:1e:42:fa:26:75:39:90:6d:e4:e2:91: 2f:3f:4d:a7:1f:b7:67:11:d8:19:39:2a:72:61:10:a8:c4:ec: 46:32:57:5e:00:8c:ff:0e:34:b7:d6:3a:5c:97:66:21:c5:3f: 62:61:fd:d0:51:1e:a4:66:fa:6a:31:11:66:ed:9f:6c:3d:93: 15:00:ba:d6:46:ae:ef:24:f6:19:52:1c:99:b9:9c:9b:fe:03: b6:94:6a:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfSsLbbXcuzIMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk Nzg4NGFhM2ItMmE3MC00ZDY1LWE0OTktNzYxOGU5MzNlNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4J0MZHZ6z7OF1cepkWoVSGhilGaInBB+/dX DrbZFmsksGwwBiKsLk/NDB/Lpc285I5mchkSVn+cj+2yjIJ3dg1FAQhRyt11/bSk ppxdQmyH/xx9923Z+hlGX++ir1xiy50erlLTw4ekCtLgpNxmvPtBUcnX90JEGW6o ApW2cH5u9cRwhBfygIixqMhd4+NywIsavVbajbulM3zv2HA3/V6xj0ajDY6FiHe2 Hl1o1LUjem0lmCdsBDkPTc3pfJiF/5Dw1PS5Yw3M/qrNRGdQOEbtPq6KdZOZYUl6 MCfGd8w0sX8Dp8r24K1ISwhSUJtznmsffNkFHl6yQegwwqFyLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7wCDyTx18KbH/qeQvToVB2nQT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmNkMDhmN2QtODAwNC0z MjdiLTkyZDMtODdiYzdjZmI0NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnIQZZr9iD8478emj5NNtX7cPsaIKtvRXeAQ67120o3FcoybtNiaeYV n68yDn3X2xwWWojH7RsfiQRbvGOcqGeo51QQLR4CD6zg9LEahCOCoug4eLwJjRPz 4zaY6qjGCJ+kLy5QoVjhB2f/zf+IIewEq416BN5Nk0poLc95SVOiT+/2uSl/06nb LGZLz+TUpwummiFT+2KDnpHg7dMEI8lfaKe1f0KSJeseQvomdTmQbeTikS8/Tacf t2cR2Bk5KnJhEKjE7EYyV14AjP8ONLfWOlyXZiHFP2Jh/dBRHqRm+moxEWbtn2w9 kxUAutZGru8k9hlSHJm5nJv+A7aUanQ= -----END CERTIFICATE-----Generated at Fri May 9 10:23:50 2025 by rpki-client