$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa File: c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa (raw, json) Hash identifier: DFrg3zUKy+NSJUIMqziJq3rW/sfM1z71EhVFxxjLUFk= Subject key identifier: 13:9E:E8:C2:9C:F8:F0:BB:28:A4:7F:63:66:98:92:CA:8E:BC:76:FB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F4F43E62A8E39517B740 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 202 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f4:f4:3e:62:a8:e3:95:17:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=cb12acff-9226-433c-93e4-43c8a4ca05dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3a:a8:79:40:ca:c1:5e:2b:1c:0c:8a:2e:be: 03:11:c9:66:ea:52:bc:b4:c0:20:2a:2b:82:17:cb: ee:c1:e9:0b:66:4e:bb:77:61:53:85:5f:42:1c:f2: 35:13:19:e9:f4:12:30:6c:70:eb:b4:7b:d3:82:f3: b5:80:a6:13:2d:10:5d:cd:34:ef:4c:f1:13:57:f2: 00:e3:26:96:d0:37:0b:a3:59:69:b2:1b:a2:56:ac: b1:47:5a:3c:1e:0a:e2:11:03:fe:55:d0:fb:c0:53: eb:59:29:7f:06:3e:6c:93:6d:89:e5:40:6b:cc:1d: 0f:39:f3:8d:d4:76:de:d6:cb:70:fa:1c:6d:7a:42: c2:04:f1:77:51:1f:bc:1e:59:f3:02:de:10:5b:0f: 81:51:68:47:62:64:81:e9:8f:35:ff:1e:27:c7:9e: b8:7e:e6:1d:ea:f3:60:05:bc:69:55:a5:8d:d5:89: b4:1c:e1:30:46:23:1b:ef:3f:c7:aa:df:76:bd:84: 4a:8a:96:e7:ba:63:e1:1b:d7:70:e2:ee:51:b9:d5: 82:cb:d5:9b:ef:6b:b5:b4:7b:ad:14:57:61:fe:a2: b9:a1:13:c4:54:ec:93:08:e0:a4:e8:50:96:fb:11: 7c:c0:26:11:c3:0e:0d:6c:5a:69:8a:4a:07:ee:5d: 80:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9E:E8:C2:9C:F8:F0:BB:28:A4:7F:63:66:98:92:CA:8E:BC:76:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:97:09:db:80:c6:76:49:66:4d:21:58:86:21:85:fa:1f:34: de:76:fb:5c:87:d6:4b:50:52:1a:ed:57:70:fd:31:18:cf:af: ca:5e:77:6e:6e:52:32:fa:6f:40:f9:88:a3:60:a9:f0:3f:28: f0:9d:b1:ad:9d:99:75:9f:fd:2d:38:35:f4:59:41:c5:44:9c: 90:ae:e9:4f:19:7b:31:98:f8:de:87:33:3c:17:8b:91:44:a1: e8:f1:7a:51:f6:66:32:ea:c3:e4:e0:ac:a1:2e:d2:5c:73:1c: 7a:15:79:26:6d:46:6a:d8:f8:5b:36:14:a6:6c:a5:a2:80:19: 5e:4e:50:8f:a3:9e:a9:30:1d:81:e0:94:11:21:67:24:6c:85: 0f:06:df:1c:80:59:d9:2b:ee:c3:68:28:43:50:81:11:4a:34: b8:01:95:d3:ea:64:5d:ad:ee:55:6c:74:6c:df:8f:2a:63:57: d2:1c:cd:b1:2a:1a:45:ec:79:72:aa:89:42:c6:82:54:12:43: 67:0a:ed:b2:6c:72:0b:21:f8:f8:56:51:00:95:75:16:e8:5d: 4c:92:af:ed:d0:5e:7e:0c:79:25:46:74:10:a4:27:ff:98:68: 48:2d:33:37:86:c0:1a:fc:ff:52:04:62:20:c2:1a:e7:0c:be: 7c:bf:c7:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfT0PmKo45UXt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk Y2IxMmFjZmYtOTIyNi00MzNjLTkzZTQtNDNjOGE0Y2EwNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTqoeUDKwV4rHAyKLr4DEclm6lK8tMAgKiuC F8vuwekLZk67d2FThV9CHPI1Exnp9BIwbHDrtHvTgvO1gKYTLRBdzTTvTPETV/IA 4yaW0DcLo1lpshuiVqyxR1o8HgriEQP+VdD7wFPrWSl/Bj5sk22J5UBrzB0POfON 1Hbe1stw+hxtekLCBPF3UR+8HlnzAt4QWw+BUWhHYmSB6Y81/x4nx564fuYd6vNg BbxpVaWN1Ym0HOEwRiMb7z/Hqt92vYRKipbnumPhG9dw4u5RudWCy9Wb72u1tHut FFdh/qK5oRPEVOyTCOCk6FCW+xF8wCYRww4NbFppikoH7l2AyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOe6MKc+PC7KKR/Y2aYksqOvHb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzQ4Y2M3MzAtOWE4Yi0z Mzc2LWFiNTctOWY0YWFmYzc5MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaXCduAxnZJZk0hWIYhhfofNN52+1yH1ktQUhrtV3D9MRjPr8ped25u UjL6b0D5iKNgqfA/KPCdsa2dmXWf/S04NfRZQcVEnJCu6U8ZezGY+N6HMzwXi5FE oejxelH2ZjLqw+TgrKEu0lxzHHoVeSZtRmrY+Fs2FKZspaKAGV5OUI+jnqkwHYHg lBEhZyRshQ8G3xyAWdkr7sNoKENQgRFKNLgBldPqZF2t7lVsdGzfjypjV9IczbEq GkXseXKqiULGglQSQ2cK7bJscgsh+PhWUQCVdRboXUySr+3QXn4MeSVGdBCkJ/+Y aEgtMzeGwBr8/1IEYiDCGucMvny/x6w= -----END CERTIFICATE-----Generated at Sun May 11 14:44:02 2025 by rpki-client