$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa File: da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa (raw, json) Hash identifier: OzX2+GQ7mXe6/EUhPumn3uc8JPChMRC2MjSLv4YqBHg= Subject key identifier: 36:04:D2:CC:77:77:DD:00:F5:72:F0:BD:34:D6:BC:EC:44:F2:18:46 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F63F78E65208F4C5C320 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 203 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f6:3f:78:e6:52:08:f4:c5:c3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=c4c4af5e-d6f4-49b1-98b4-8163b602f9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:fd:89:52:3e:57:71:1e:c0:2a:c7:b7:85: 9f:60:d0:75:08:bb:bd:65:b0:04:dc:a8:9b:9a:d7: f3:cd:5d:82:ee:ac:e6:71:d2:73:98:64:85:a8:1b: 5b:fe:6b:13:a2:cd:16:d8:0f:5b:d0:2d:89:a8:8a: 48:b6:52:2c:09:91:78:f4:5b:58:b6:8c:10:f8:5c: 4a:fa:c1:00:6d:fa:07:ad:0e:bc:8e:5b:b6:9b:e0: 13:55:34:f1:5d:65:8f:d9:64:d8:52:9d:d4:a0:be: e0:e2:bc:e6:44:b7:7a:c4:5a:31:6c:20:8c:c4:1a: 33:fb:9a:5b:c3:fc:21:67:ba:36:52:d8:f7:45:55: 8b:02:2c:e6:65:46:7c:2a:9b:8d:d0:19:03:71:3f: 48:67:13:77:f1:72:1e:d5:02:47:c5:f4:ae:81:52: 3a:59:4e:51:92:f2:18:5d:3b:ff:6c:ec:91:bc:d2: cd:6d:60:a9:4d:6b:22:92:37:79:36:9d:7b:24:6a: 4c:38:ef:14:8b:4b:c9:81:4b:e6:c9:54:20:88:fe: df:8d:30:a1:23:e0:75:6d:ea:81:8d:bf:b2:ad:ab: 62:ac:90:06:00:e8:3f:d6:e9:9c:75:8d:59:78:1f: 98:a6:cd:21:b5:fe:bd:9d:a2:9e:4a:65:f2:09:28: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:04:D2:CC:77:77:DD:00:F5:72:F0:BD:34:D6:BC:EC:44:F2:18:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d9:7a:ea:84:6c:55:36:ea:d1:a2:97:27:0f:e2:b4:2e:90: 47:72:93:d2:f8:6c:dd:29:9d:c9:45:30:ca:39:c0:81:a9:f5: 95:22:b4:f0:ae:0c:71:63:e2:3e:72:f6:49:1a:95:3f:f7:46: 20:03:4a:ff:aa:b6:93:d7:8d:7e:e3:25:f9:6c:a6:17:10:4e: ce:16:43:1c:ea:5d:3d:d9:cd:6f:77:f3:90:c1:7e:e8:04:5a: 39:94:43:29:c6:5f:75:b6:58:8e:20:c4:82:87:36:8f:2f:5f: 0a:4c:ac:80:ef:96:51:6a:15:4e:15:a4:4a:15:48:cf:4c:62: 5f:72:d5:79:14:44:50:e1:d6:59:c8:1b:f8:1c:89:de:58:8b: 55:76:fb:13:b9:59:ee:28:ba:eb:31:87:00:d6:68:a9:84:9d: 76:98:86:20:59:f9:35:fc:10:36:3a:2f:52:9f:4e:d8:f2:66: 39:ab:d7:16:f8:73:27:16:7e:29:0f:d0:e9:38:43:56:a1:af: 2b:b9:64:96:90:02:18:dd:ef:5b:8f:07:7f:51:e3:75:44:79: 41:c3:0a:9a:51:f6:6e:8b:17:1e:11:61:2d:25:d0:8c:1d:ae: ea:eb:a5:a2:82:d2:1e:68:a9:b7:eb:8e:cf:e4:36:d8:0c:87: 77:67:e0:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfY/eOZSCPTFwyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk YzRjNGFmNWUtZDZmNC00OWIxLTk4YjQtODE2M2I2MDJmOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvr9iVI+V3EewCrHt4WfYNB1CLu9ZbAE3Kib mtfzzV2C7qzmcdJzmGSFqBtb/msTos0W2A9b0C2JqIpItlIsCZF49FtYtowQ+FxK +sEAbfoHrQ68jlu2m+ATVTTxXWWP2WTYUp3UoL7g4rzmRLd6xFoxbCCMxBoz+5pb w/whZ7o2Utj3RVWLAizmZUZ8KpuN0BkDcT9IZxN38XIe1QJHxfSugVI6WU5RkvIY XTv/bOyRvNLNbWCpTWsikjd5Np17JGpMOO8Ui0vJgUvmyVQgiP7fjTChI+B1beqB jb+yratirJAGAOg/1umcdY1ZeB+Yps0htf69naKeSmXyCSjjNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYE0sx3d90A9XLwvTTWvOxE8hhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwYWE1ZjEtNTllNi0z ZmRkLTgyYmItYTA0OTI0MWY2MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnZeuqEbFU26tGilycP4rQukEdyk9L4bN0pnclFMMo5wIGp9ZUitPCu DHFj4j5y9kkalT/3RiADSv+qtpPXjX7jJflsphcQTs4WQxzqXT3ZzW9385DBfugE WjmUQynGX3W2WI4gxIKHNo8vXwpMrIDvllFqFU4VpEoVSM9MYl9y1XkURFDh1lnI G/gcid5Yi1V2+xO5We4ouusxhwDWaKmEnXaYhiBZ+TX8EDY6L1KfTtjyZjmr1xb4 cycWfikP0Ok4Q1ahryu5ZJaQAhjd71uPB39R43VEeUHDCppR9m6LFx4RYS0l0Iwd rurrpaKC0h5oqbfrjs/kNtgMh3dn4KM= -----END CERTIFICATE-----Generated at Sun May 11 22:03:07 2025 by rpki-client