$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa File: d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa (raw, json) Hash identifier: 6pdCOg9hdhcJ+5yRG0CTDgeh6CA4KJICVHpNbXjkE8Y= Subject key identifier: 14:23:84:65:C0:46:45:DE:11:6E:05:F3:A5:C1:4F:67:0B:E4:A7:A8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F4652BF482CD49741900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 3360 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f4:65:2b:f4:82:cd:49:74:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=98dea208-66d1-41bd-9628-cbb0dcf9dd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1f:da:58:fd:b9:e4:70:b7:e0:b5:9c:64:e7: 4a:11:88:a2:10:24:9a:c3:c1:ff:4c:5f:f3:25:05: c9:f8:fb:e0:00:15:78:37:4d:10:bd:38:e1:d4:5f: a7:3a:4b:fe:79:9b:50:d1:94:28:b7:0c:02:75:4d: 53:d3:a9:c1:6f:ce:69:5d:f9:46:a8:1d:08:f9:bb: 1d:64:f3:e0:92:06:44:ff:7e:90:13:d8:b0:6d:1e: cd:fd:fd:c8:56:04:3b:ac:58:fa:c3:ff:fb:3f:ca: b2:92:f1:e4:e0:75:e9:19:db:a9:fe:c1:81:af:23: c3:2d:cf:a5:ce:02:1b:ce:ec:a5:ba:8d:ba:16:62: 2e:ca:e3:ba:2d:1a:dd:5f:cc:a9:fb:d8:47:53:d0: 63:79:9f:d3:d6:4a:b7:50:1f:89:96:9e:4d:2d:f8: 04:f2:0b:ff:92:f3:51:ea:fc:10:ed:ce:1d:1b:e9: af:7c:a6:9b:0e:6d:f2:19:80:b4:fe:35:c7:fa:95: 69:97:8b:c5:95:2e:b4:02:20:6b:a5:03:92:03:14: 3e:ef:5a:05:02:6f:a6:3a:0e:e9:d6:d7:99:dd:be: d4:35:02:ee:2e:79:09:e9:59:e3:5e:7f:7e:fd:73: 93:dd:1e:e0:1c:4f:1d:41:c7:47:28:d4:e1:24:1c: 27:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:23:84:65:C0:46:45:DE:11:6E:05:F3:A5:C1:4F:67:0B:E4:A7:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:14:24:fe:d1:0d:9c:8e:bf:f5:1e:8a:c3:d1:1c:76:35:22: cc:c4:62:e2:86:0b:3c:58:3f:d1:6e:3c:64:11:bc:3f:55:b3: a4:06:9f:79:89:60:46:61:39:d4:22:84:e9:8a:53:db:72:e5: 58:fb:0c:c5:d1:f6:4c:e7:11:ad:91:23:f4:2e:5e:dc:81:f7: 1f:de:f9:b8:85:dd:bf:88:60:f3:84:e9:7a:6d:e4:29:17:1b: 42:5f:7b:af:57:d0:41:da:0e:b0:dd:66:eb:b7:86:29:96:d7: 10:ef:94:87:0c:b5:0a:11:8b:23:d7:ea:f5:ec:c3:36:a2:d7: ac:a8:96:74:42:7c:ef:6a:fb:5d:b6:b4:0e:b9:bb:70:af:5d: dd:53:18:5f:b4:32:e5:7d:ba:18:9c:37:9c:53:d4:6d:f4:df: 5a:67:d9:be:e9:42:86:53:ec:0c:87:20:17:7e:f6:96:19:13: 3c:d4:02:1a:00:31:cc:d6:65:31:9b:33:54:9f:31:42:c9:42: 7c:64:46:86:0b:73:f2:98:dc:5c:24:65:4e:b7:3e:cd:26:74: 69:d1:c4:d4:3e:f7:b3:20:05:dc:8e:4b:8e:45:a6:92:4a:5b: d8:88:67:6a:ef:0c:e8:5a:e2:f5:b7:e4:c4:ad:7e:fc:65:8e: 83:6d:25:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfRlK/SCzUl0GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk OThkZWEyMDgtNjZkMS00MWJkLTk2MjgtY2JiMGRjZjlkZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7B/aWP255HC34LWcZOdKEYiiECSaw8H/TF/z JQXJ+PvgABV4N00QvTjh1F+nOkv+eZtQ0ZQotwwCdU1T06nBb85pXflGqB0I+bsd ZPPgkgZE/36QE9iwbR7N/f3IVgQ7rFj6w//7P8qykvHk4HXpGdup/sGBryPDLc+l zgIbzuyluo26FmIuyuO6LRrdX8yp+9hHU9BjeZ/T1kq3UB+Jlp5NLfgE8gv/kvNR 6vwQ7c4dG+mvfKabDm3yGYC0/jXH+pVpl4vFlS60AiBrpQOSAxQ+71oFAm+mOg7p 1teZ3b7UNQLuLnkJ6VnjXn9+/XOT3R7gHE8dQcdHKNThJBwnJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQjhGXARkXeEW4F86XBT2cL5KeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDhhODg5NGQtZDAzNC0z OWM3LWFhNzEtY2UzOWZiMGQ4YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4UJP7RDZyOv/UeisPRHHY1IszEYuKGCzxYP9FuPGQRvD9Vs6QGn3mJ YEZhOdQihOmKU9ty5Vj7DMXR9kznEa2RI/QuXtyB9x/e+biF3b+IYPOE6Xpt5CkX G0Jfe69X0EHaDrDdZuu3himW1xDvlIcMtQoRiyPX6vXswzai16yolnRCfO9q+122 tA65u3CvXd1TGF+0MuV9uhicN5xT1G3031pn2b7pQoZT7AyHIBd+9pYZEzzUAhoA MczWZTGbM1SfMULJQnxkRoYLc/KY3FwkZU63Ps0mdGnRxNQ+97MgBdyOS45FppJK W9iIZ2rvDOha4vW35MStfvxljoNtJdw= -----END CERTIFICATE-----Generated at Sat May 10 09:57:12 2025 by rpki-client