$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/fbcfb683-1a6c-31f1-96a1-8ca387179584.roa File: fbcfb683-1a6c-31f1-96a1-8ca387179584.roa (raw, json) Hash identifier: iTA5hUMt09OEHXAJ9OPI5fSyiqL0hgmHcDOpm1VSX5Y= Subject key identifier: F6:24:53:8A:32:C7:02:DB:FD:75:37:9B:85:99:69:4A:26:52:44:B5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858499294A52D69F6089D4CBDB930 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/fbcfb683-1a6c-31f1-96a1-8ca387179584.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 3360 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a5:2d:69:f6:08:9d:4c:bd:b9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=2a9fcbdb-b94d-4271-a9e3-fd016e5c390b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:42:c0:33:4a:f9:41:77:d1:f0:cc:0f:17:44: 9c:b8:6d:27:a3:31:7a:a0:91:13:63:1a:90:36:15: d8:2a:fa:e0:3a:08:e6:0c:ab:5c:1f:c0:cd:42:28: 50:a0:1b:9b:00:5e:7b:6f:b3:52:35:6f:e2:86:2b: c5:c0:3b:fd:ab:d9:df:60:3f:a6:1e:99:6d:0c:ea: 13:02:1d:6b:ad:ad:7b:6b:03:28:30:fa:2a:98:05: 81:1b:05:50:ce:16:e2:98:81:91:8e:90:a8:8f:7b: 31:6d:46:3a:36:35:6a:8a:53:c8:98:6b:9b:e9:48: 47:72:ad:98:17:54:db:04:8a:85:b3:7a:e4:c7:7e: 15:1b:5b:1a:65:dd:f1:23:01:8b:31:41:ca:10:e3: b5:7f:a1:d0:b0:d9:b3:67:44:bb:ae:a9:16:72:6a: 35:0b:59:b9:23:fb:ff:28:8a:e4:e8:59:10:5e:e3: 8b:3d:88:63:46:7d:e9:71:20:1c:bc:54:4b:99:e7: 5f:a9:15:c6:4f:60:cc:24:e1:f6:72:f8:06:ff:d6: 67:78:d1:9a:93:8e:c9:8c:da:cb:4a:a9:11:17:44: e3:50:f0:2c:51:97:40:70:f3:cb:d6:7b:0e:78:b3: 1d:e3:71:59:31:b2:90:65:97:5e:0d:b6:c8:26:9d: c9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:24:53:8A:32:C7:02:DB:FD:75:37:9B:85:99:69:4A:26:52:44:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/fbcfb683-1a6c-31f1-96a1-8ca387179584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:48:57:3e:b7:bf:0c:66:86:dd:94:07:f8:94:9e:2a:37:c6: 4a:2f:62:8e:df:9f:5b:3a:b1:5c:22:82:c6:c0:ce:74:77:6f: 22:b5:3a:68:c1:68:e3:8b:15:48:49:80:6f:58:39:23:c8:79: 00:74:62:02:78:9a:24:5c:07:ee:bd:34:28:76:c7:df:18:00: eb:2a:14:d0:4b:9d:ec:a9:2b:50:e0:3c:3b:bb:34:17:61:22: 0a:d5:23:a3:54:4c:06:d7:71:4f:43:1e:bc:60:60:92:1d:a0: 29:2c:29:ce:40:12:f9:b5:bd:1d:88:67:e3:ca:42:9a:99:9f: 43:e4:1c:48:bf:37:38:17:9e:7d:70:5f:57:cd:30:12:ba:06: 92:2e:9c:06:cd:b5:87:79:be:5b:34:88:16:ee:de:bf:72:6b: eb:04:ba:72:92:83:d9:3f:c8:3a:f8:4c:49:6a:b0:1b:f4:b6: 18:e4:e8:4a:ff:f0:85:ab:ab:d4:36:35:c4:54:d5:d1:96:12: a5:d2:b3:b6:b9:9d:12:43:76:6b:41:dd:45:a5:1e:7b:9c:02: 2f:2e:28:bb:05:91:1a:6e:7a:b7:16:5b:8a:40:cd:6f:26:18: 72:ee:20:e0:1e:bc:2f:c5:97:ae:0b:74:9c:8c:7c:f5:7a:7b: 82:02:5c:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKUtafYInUy9uTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MmE5ZmNiZGItYjk0ZC00MjcxLWE5ZTMtZmQwMTZlNWMzOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmELAM0r5QXfR8MwPF0ScuG0nozF6oJETYxqQ NhXYKvrgOgjmDKtcH8DNQihQoBubAF57b7NSNW/ihivFwDv9q9nfYD+mHpltDOoT Ah1rra17awMoMPoqmAWBGwVQzhbimIGRjpCoj3sxbUY6NjVqilPImGub6UhHcq2Y F1TbBIqFs3rkx34VG1saZd3xIwGLMUHKEOO1f6HQsNmzZ0S7rqkWcmo1C1m5I/v/ KIrk6FkQXuOLPYhjRn3pcSAcvFRLmedfqRXGT2DMJOH2cvgG/9ZneNGak47JjNrL SqkRF0TjUPAsUZdAcPPL1nsOeLMd43FZMbKQZZdeDbbIJp3JkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYkU4oyxwLb/XU3m4WZaUomUkS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZmJjZmI2ODMtMWE2Yy0z MWYxLTk2YTEtOGNhMzg3MTc5NTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhIVz63vwxmht2UB/iUnio3xkovYo7fn1s6sVwigsbAznR3byK1OmjB aOOLFUhJgG9YOSPIeQB0YgJ4miRcB+69NCh2x98YAOsqFNBLneypK1DgPDu7NBdh IgrVI6NUTAbXcU9DHrxgYJIdoCksKc5AEvm1vR2IZ+PKQpqZn0PkHEi/NzgXnn1w X1fNMBK6BpIunAbNtYd5vls0iBbu3r9ya+sEunKSg9k/yDr4TElqsBv0thjk6Er/ 8IWrq9Q2NcRU1dGWEqXSs7a5nRJDdmtB3UWlHnucAi8uKLsFkRpuercWW4pAzW8m GHLuIOAevC/Fl64LdJyMfPV6e4ICXD0= -----END CERTIFICATE-----Generated at Sun May 11 09:22:19 2025 by rpki-client