$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa File: f8da539f-a988-3038-8316-0c63126db070.roa (raw, json) Hash identifier: 8SyLdfmr4zd0UBh8neGFV5rkcuRIFMk2yG4KIDcqeWg= Subject key identifier: D1:26:F7:21:54:F3:0E:1F:4D:17:81:7E:FC:EE:85:48:94:BB:9F:20 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F5717CFAB88B45BFF980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 203 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f5:71:7c:fa:b8:8b:45:bf:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=e6fa27e8-a401-4279-9fb2-ad6830f5c040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:91:3b:b2:c2:29:69:34:ed:37:54:25:a4:7b: 1a:3b:43:63:e8:90:8f:8c:0a:ef:5d:9e:41:6b:cf: b5:48:94:ab:93:8b:78:46:8e:f3:5e:9a:15:60:82: 7a:4a:47:53:bf:4b:b8:14:1f:52:f1:12:f8:de:47: a0:66:b7:26:94:3c:79:c4:7a:18:d2:66:20:fc:72: 3e:79:e8:eb:16:d2:b6:a6:2b:7d:84:dd:09:e4:dd: 28:71:f0:72:6c:ec:ca:9f:a8:73:89:cc:ce:db:69: 75:d4:ba:90:7b:45:cf:4c:b2:93:73:66:f7:50:16: d2:7c:3a:95:95:cc:a3:10:36:ac:9f:24:c0:44:f7: 6b:6a:6e:0d:07:6e:6f:21:93:56:54:9b:9e:0e:a2: cd:e9:24:69:8b:ca:9b:a4:e0:cd:76:77:91:62:f7: 34:9c:30:6e:99:47:8f:d2:37:ed:d5:fb:8b:f8:14: f2:87:c1:e2:66:93:fe:12:f9:1a:f9:f6:3a:f2:98: 4a:1c:77:e6:de:7b:f0:d2:48:70:5f:f7:f2:71:47: 7d:eb:9f:4f:05:4f:d0:fd:b1:3a:f9:8d:63:ca:20: 6d:14:7e:1f:01:1a:8b:bb:ce:c3:f3:9d:6e:4c:df: e4:b1:ad:18:9a:e0:8b:9d:d5:6c:dc:c4:be:be:f6: a7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:26:F7:21:54:F3:0E:1F:4D:17:81:7E:FC:EE:85:48:94:BB:9F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:52:1d:f7:93:d2:57:09:d6:a7:1c:3e:74:18:a3:ee:e8:cd: 48:8a:b5:70:f8:4e:be:8a:fc:6f:b0:c0:4f:a8:d0:7c:35:3c: e6:61:35:f2:60:a8:cd:a6:d9:73:a4:ad:71:ff:57:51:12:c0: 29:70:b5:ff:8a:50:3c:25:76:c3:7e:53:e7:8a:db:2a:37:06: 93:a2:57:3e:d8:ee:24:89:4a:a4:8a:f5:be:b5:a2:a2:ec:93: 14:15:9c:c7:43:39:a4:ee:cd:24:a9:68:29:ed:28:a5:fa:52: f9:ed:d3:83:66:50:e2:e0:56:ee:4e:83:f8:7b:0a:a9:61:4d: 11:29:42:86:3e:39:0e:d2:b4:92:0f:55:95:5e:3b:ab:0a:49: 9d:56:3f:48:4e:ff:c5:46:a5:b6:d1:52:82:92:c9:43:1b:be: 87:0e:e2:f1:43:62:b9:d0:ce:7f:3b:cd:bb:05:fb:c6:18:66: b1:1d:5e:ca:13:11:f4:86:7c:74:af:44:48:51:83:f0:75:16: b9:e9:3e:27:56:2a:f1:50:43:67:ad:e1:2d:49:b3:8d:6b:66: 67:45:0a:b4:5c:99:ac:f8:8b:5f:7e:8a:a4:59:d1:93:ac:e7: 9e:d8:a6:b4:a1:02:c5:bb:11:29:46:89:a1:85:57:9b:f5:17: 8a:4a:48:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfVxfPq4i0W/+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ZTZmYTI3ZTgtYTQwMS00Mjc5LTlmYjItYWQ2ODMwZjVjMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpE7ssIpaTTtN1QlpHsaO0Nj6JCPjArvXZ5B a8+1SJSrk4t4Ro7zXpoVYIJ6SkdTv0u4FB9S8RL43kegZrcmlDx5xHoY0mYg/HI+ eejrFtK2pit9hN0J5N0ocfBybOzKn6hziczO22l11LqQe0XPTLKTc2b3UBbSfDqV lcyjEDasnyTARPdram4NB25vIZNWVJueDqLN6SRpi8qbpODNdneRYvc0nDBumUeP 0jft1fuL+BTyh8HiZpP+Evka+fY68phKHHfm3nvw0khwX/fycUd9659PBU/Q/bE6 +Y1jyiBtFH4fARqLu87D851uTN/ksa0YmuCLndVs3MS+vvanyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEm9yFU8w4fTReBfvzuhUiUu58gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjhkYTUzOWYtYTk4OC0z MDM4LTgzMTYtMGM2MzEyNmRiMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdSHfeT0lcJ1qccPnQYo+7ozUiKtXD4Tr6K/G+wwE+o0Hw1POZhNfJg qM2m2XOkrXH/V1ESwClwtf+KUDwldsN+U+eK2yo3BpOiVz7Y7iSJSqSK9b61oqLs kxQVnMdDOaTuzSSpaCntKKX6Uvnt04NmUOLgVu5Og/h7CqlhTREpQoY+OQ7StJIP VZVeO6sKSZ1WP0hO/8VGpbbRUoKSyUMbvocO4vFDYrnQzn87zbsF+8YYZrEdXsoT EfSGfHSvREhRg/B1FrnpPidWKvFQQ2et4S1Js41rZmdFCrRcmaz4i19+iqRZ0ZOs 557YprShAsW7ESlGiaGFV5v1F4pKSIY= -----END CERTIFICATE-----Generated at Sun May 11 12:36:30 2025 by rpki-client