$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa File: f68ba57f-5e4d-33d2-960d-57b417d05011.roa (raw, json) Hash identifier: cYZA4xUvyjTU6crksJ3YfPjvbLNQB+FWplqSMh3Kbo8= Subject key identifier: 3C:F4:FB:D3:B5:F9:E0:3A:63:AB:5C:8A:61:02:40:21:CF:A5:80:FC Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F542DA263A81C8BC11C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 3356 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f5:42:da:26:3a:81:c8:bc:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=8ede126a-0c74-4f6c-bf65-ce1f04551c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:6e:3a:00:a6:98:bd:42:88:c4:83:65:0d: a3:ab:cf:a2:10:4e:86:a2:af:37:16:fa:c1:c7:ec: b4:62:d5:09:6c:af:75:69:e5:42:19:c4:fd:21:0d: 83:66:5f:c2:3a:f1:45:2d:c5:de:59:82:92:48:e8: 69:5d:f6:b2:e7:1b:6a:6d:c0:fe:5e:c8:b9:0b:6d: 71:4a:fb:6f:fa:ac:cd:d8:9f:28:4f:ea:81:61:cc: 6a:e7:ee:76:ce:ac:4c:3f:9a:95:18:68:d7:b0:4d: 00:c0:a2:73:b6:9f:76:b5:35:f8:62:c8:fb:95:01: 1c:5d:c3:a5:db:65:df:5b:4a:71:c8:56:6e:37:ae: 54:b9:4a:3e:a8:31:7b:1c:8a:d1:81:92:04:7b:f5: 8d:2d:ff:aa:19:6e:37:90:37:23:84:dd:27:8c:fa: 0d:5a:bd:66:e5:6b:87:20:ab:51:0e:db:c8:22:f8: e6:52:b7:a0:93:a1:dd:af:c1:cc:ce:b0:fd:af:5c: db:0d:43:33:3c:f1:3f:3a:cb:b1:ae:0e:22:35:37: ce:eb:03:5b:6b:e4:ea:9b:5d:a9:6c:c5:3f:2c:2b: 40:2b:ca:4a:a9:d6:c1:20:33:1e:14:46:cd:90:e5: a0:f5:3b:74:0e:74:18:7d:0e:22:83:8f:a1:0d:13: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F4:FB:D3:B5:F9:E0:3A:63:AB:5C:8A:61:02:40:21:CF:A5:80:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:26:27:2c:ef:ff:a4:08:50:b1:bd:8f:05:3d:2c:b8:44:02: 94:6f:49:78:ed:60:e7:78:ba:01:e2:6b:84:7c:64:81:5a:6c: be:0a:9e:c9:64:a1:5b:fc:c9:f0:d2:aa:23:8c:ed:32:d2:6a: 29:b0:86:4e:55:ff:3a:4e:ff:a5:6d:44:8f:a7:44:bf:d0:7e: ae:38:94:a8:40:e9:52:d2:a0:5c:1b:16:c8:3a:b4:60:a9:4c: 9c:6a:ed:a2:10:ba:b3:13:4e:ae:4e:72:e0:93:df:0f:de:ec: f6:e5:e5:f8:62:67:83:3d:d8:03:a0:61:4b:16:a2:e1:f5:77: 4d:26:91:de:56:4e:06:2f:d5:91:08:46:19:3e:41:fb:76:e4: ed:3e:0f:ad:ef:2c:21:a5:90:92:6b:b3:2f:f3:92:7f:90:bf: e9:46:51:4f:c8:19:e1:21:34:04:5b:c2:8c:5f:ef:95:9f:de: 44:e0:1e:63:3b:9e:9d:aa:53:70:c3:42:18:94:15:91:b4:dc: 7f:70:49:62:f1:d5:07:73:ce:84:55:47:f2:38:d7:ce:88:df: 5c:46:f6:45:46:2e:43:e7:e1:05:5c:bb:0e:ba:78:5f:ec:ab: 34:ae:6b:08:92:ae:39:8d:b5:90:88:61:4f:80:0b:91:5b:91: a3:26:6e:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfVC2iY6gci8EcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk OGVkZTEyNmEtMGM3NC00ZjZjLWJmNjUtY2UxZjA0NTUxYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSJuOgCmmL1CiMSDZQ2jq8+iEE6Goq83FvrB x+y0YtUJbK91aeVCGcT9IQ2DZl/COvFFLcXeWYKSSOhpXfay5xtqbcD+Xsi5C21x Svtv+qzN2J8oT+qBYcxq5+52zqxMP5qVGGjXsE0AwKJztp92tTX4Ysj7lQEcXcOl 22XfW0pxyFZuN65UuUo+qDF7HIrRgZIEe/WNLf+qGW43kDcjhN0njPoNWr1m5WuH IKtRDtvIIvjmUregk6Hdr8HMzrD9r1zbDUMzPPE/Osuxrg4iNTfO6wNba+Tqm12p bMU/LCtAK8pKqdbBIDMeFEbNkOWg9Tt0DnQYfQ4ig4+hDRMekwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDz0+9O1+eA6Y6tcimECQCHPpYD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjY4YmE1N2YtNWU0ZC0z M2QyLTk2MGQtNTdiNDE3ZDA1MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUmJyzv/6QIULG9jwU9LLhEApRvSXjtYOd4ugHia4R8ZIFabL4Knslk oVv8yfDSqiOM7TLSaimwhk5V/zpO/6VtRI+nRL/Qfq44lKhA6VLSoFwbFsg6tGCp TJxq7aIQurMTTq5OcuCT3w/e7Pbl5fhiZ4M92AOgYUsWouH1d00mkd5WTgYv1ZEI Rhk+Qft25O0+D63vLCGlkJJrsy/zkn+Qv+lGUU/IGeEhNARbwoxf75Wf3kTgHmM7 np2qU3DDQhiUFZG03H9wSWLx1QdzzoRVR/I4186I31xG9kVGLkPn4QVcuw66eF/s qzSuawiSrjmNtZCIYU+AC5FbkaMmbpU= -----END CERTIFICATE-----Generated at Sun May 11 01:06:52 2025 by rpki-client