$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa File: e3806760-7d79-3d01-859b-ff7d8faa361a.roa (raw, json) Hash identifier: jJjLKvWM0x1xhBZB0fxCJrnxpzabhc1Txdn63shNsj0= Subject key identifier: CD:D7:E9:66:DA:D7:C7:EA:39:C0:1F:50:25:89:68:CE:05:92:4C:75 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F44B1F3F55EE2970AA80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 203 IP address blocks: 20.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f4:4b:1f:3f:55:ee:29:70:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=bb3c0610-3efc-4042-b567-12c1a986b443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:4b:73:7a:ce:d2:ec:40:0e:49:3c:14:d3: 44:23:c7:21:82:bc:7f:8a:00:ac:65:ac:2e:be:1b: e5:8d:8f:86:8d:d0:cf:e3:16:14:9f:9a:c7:fb:94: 22:4d:44:2d:39:18:68:f6:2a:63:cd:be:69:b8:fb: b0:0e:cb:50:12:4e:8f:79:45:b3:ed:d3:ba:73:08: 8f:d7:91:1d:98:d6:ad:a5:2d:5a:89:ca:16:a1:ac: 91:5b:6c:46:11:86:f9:fa:02:d4:28:b0:de:0a:a0: 4b:66:d4:de:fd:48:4c:cb:cf:d6:28:0d:b4:a1:ea: fe:0e:3f:9e:02:db:64:3c:09:66:f4:6e:05:45:be: 85:45:7b:88:81:b3:79:b3:27:f6:d7:f8:73:d7:79: 90:04:47:38:4e:9b:ee:81:2d:bf:e3:74:5a:c1:8f: 08:4d:b3:8b:54:bb:70:06:81:3f:54:a6:71:d8:c8: f5:68:f1:4c:26:10:7e:a9:ee:3e:78:2a:d2:64:11: 9e:ae:75:db:49:33:d1:3e:94:e3:8c:8f:d2:c7:b7: 17:83:d1:8f:e4:2d:c3:87:17:0e:70:01:ba:3e:42: d2:16:5a:78:fc:99:1d:84:7f:59:5f:a4:67:20:9a: 8d:30:18:ac:1a:fa:bc:b2:f3:84:3e:29:56:52:77: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D7:E9:66:DA:D7:C7:EA:39:C0:1F:50:25:89:68:CE:05:92:4C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:cc:c1:34:fa:2c:64:b0:5b:0a:6b:fd:16:d5:79:8e:75:ff: 3e:0d:a8:72:eb:a5:65:e6:08:51:1e:ed:2d:7e:8d:d8:a9:52: 2e:dc:4a:00:fc:2d:e5:ec:33:fc:33:14:c2:84:79:dd:65:47: 35:8c:c4:11:a4:74:8b:1e:20:e8:16:df:de:6d:6c:bd:b4:cf: 37:8c:0f:30:56:27:f9:6b:ef:b4:a1:9d:ec:39:e2:38:2b:36: ee:31:5e:ee:a3:bd:8b:80:fd:8c:87:dc:6d:da:e5:e4:b3:8b: 5d:49:c3:45:f4:66:26:a6:1b:1c:48:93:e4:99:a5:01:b7:3e: 7e:e4:8c:a5:09:b8:db:45:0e:19:35:f3:22:87:37:34:a4:f3: 70:d2:17:a9:0a:9e:6d:e2:85:97:36:67:3c:bc:fd:1c:40:28: de:ac:f0:02:9a:5a:2f:4b:2e:1f:1d:8d:39:ea:5f:9c:dc:2e: 5f:db:2b:6c:a0:6e:fe:38:d5:80:29:c5:26:d0:9d:e0:44:af: 70:91:68:07:26:47:62:4c:a3:5f:df:da:54:44:5d:58:07:e2: 9a:a3:e0:b4:96:b1:33:93:62:50:b9:60:85:d7:d7:43:d8:ee: 79:f3:19:44:0f:9c:e5:ac:a2:2d:a1:3b:07:22:5f:ef:b7:a4: 55:28:94:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfRLHz9V7ilwqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk YmIzYzA2MTAtM2VmYy00MDQyLWI1NjctMTJjMWE5ODZiNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8BLc3rO0uxADkk8FNNEI8chgrx/igCsZawu vhvljY+GjdDP4xYUn5rH+5QiTUQtORho9ipjzb5puPuwDstQEk6PeUWz7dO6cwiP 15EdmNatpS1aicoWoayRW2xGEYb5+gLUKLDeCqBLZtTe/UhMy8/WKA20oer+Dj+e AttkPAlm9G4FRb6FRXuIgbN5syf21/hz13mQBEc4TpvugS2/43RawY8ITbOLVLtw BoE/VKZx2Mj1aPFMJhB+qe4+eCrSZBGernXbSTPRPpTjjI/Sx7cXg9GP5C3DhxcO cAG6PkLSFlp4/JkdhH9ZX6RnIJqNMBisGvq8svOEPilWUnfsswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3X6Wba18fqOcAfUCWJaM4Fkkx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTM4MDY3NjAtN2Q3OS0z ZDAxLTg1OWItZmY3ZDhmYWEzNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrMwTT6LGSwWwpr/RbVeY51/z4NqHLrpWXmCFEe7S1+jdipUi7cSgD8 LeXsM/wzFMKEed1lRzWMxBGkdIseIOgW395tbL20zzeMDzBWJ/lr77Shnew54jgr Nu4xXu6jvYuA/YyH3G3a5eSzi11Jw0X0ZiamGxxIk+SZpQG3Pn7kjKUJuNtFDhk1 8yKHNzSk83DSF6kKnm3ihZc2Zzy8/RxAKN6s8AKaWi9LLh8djTnqX5zcLl/bK2yg bv441YApxSbQneBEr3CRaAcmR2JMo1/f2lREXVgH4pqj4LSWsTOTYlC5YIXX10PY 7nnzGUQPnOWsoi2hOwciX++3pFUolFo= -----END CERTIFICATE-----Generated at Fri May 9 08:01:19 2025 by rpki-client