$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa File: 2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa (raw, json) Hash identifier: 7z1j0KfLsgp7Q62MKCh5EaTCKOGTXCwBpAcWZ2PWEpE= Subject key identifier: DE:91:29:D6:E4:3E:7D:E4:C2:43:CA:A0:F7:83:28:BD:94:A8:C5:01 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F4F6A5152429FB87DC427A80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 3360 IP address blocks: 20.154.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a5:15:24:29:fb:87:dc:42:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=080cb50a-60d6-4331-a9f7-e1bd7de7320a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:8f:10:c0:fd:d1:f7:99:df:00:b6:57:86: 46:6c:02:79:3a:42:40:c6:5b:59:f2:8e:84:00:fb: 59:9d:c9:5d:14:6f:e3:d8:0b:2c:3f:1a:9d:dc:bc: a2:db:74:da:4b:0c:96:1c:6e:ff:15:6a:1c:bb:cc: 9a:a4:0d:21:25:06:22:54:1f:68:a1:5a:d1:27:70: 7a:a7:47:a6:37:6d:73:a7:05:bb:9b:25:82:0c:1f: cb:8e:55:1f:39:c2:76:87:ce:61:03:f0:bb:38:54: 5b:f2:4a:c8:f6:9c:ab:e6:bc:d1:bc:f9:34:8a:35: 12:d1:a2:cc:e5:a1:b3:f5:3a:6a:ab:3b:f9:e1:18: 65:37:36:70:be:f8:a4:ef:8a:a7:ed:82:c5:4f:ef: e1:ee:08:a3:93:f2:e6:c5:dd:73:b6:11:6c:22:31: 67:5c:b9:95:36:46:b6:9e:30:00:e1:4f:22:40:c8: 0a:80:ea:50:33:1f:a3:35:7f:2e:f6:36:7b:b1:64: 1d:35:8c:dc:9c:ae:6b:49:e1:88:ca:f5:86:ae:f7: 35:92:88:8f:45:59:60:cc:0e:35:af:dd:29:29:4d: cc:f9:39:f9:25:40:29:49:76:49:2a:55:55:5c:80: c2:ef:5e:97:8d:34:49:e7:fe:bc:28:25:c6:27:8e: a3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:91:29:D6:E4:3E:7D:E4:C2:43:CA:A0:F7:83:28:BD:94:A8:C5:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.154.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:20:cf:aa:c7:25:ce:d8:73:fd:59:e9:3b:a7:48:7b:2e:d7: de:6e:27:7f:f5:5b:91:f1:6b:44:6f:c9:22:2a:dd:a0:48:64: f8:34:e8:c9:02:b9:be:43:cd:7d:11:c0:7d:02:6e:9f:4d:5e: 74:2d:10:8f:02:4a:23:db:e3:ca:f1:a5:83:2b:2f:d3:fe:58: 20:ce:cb:81:12:d8:b9:b2:b2:7e:ea:92:ed:5e:26:c6:a0:ac: 02:5b:03:a8:d5:56:0c:a0:17:c2:dd:ec:66:17:fe:93:d9:e6: 51:bb:ab:84:fa:fd:1e:0d:92:d4:f9:99:1a:ab:c2:60:27:e3: 24:5c:29:7b:26:23:fa:24:51:98:49:dd:32:a5:53:e6:a0:6e: 57:44:b6:30:05:37:c4:3c:66:36:27:e3:bc:65:d3:8b:e0:06: 75:b3:42:5a:10:9f:5d:0d:01:b2:60:71:62:f3:b4:44:e9:6c: 63:c1:69:44:b2:49:df:2e:d9:ad:53:96:75:ad:a4:c0:4a:a1: 37:83:c8:d7:da:1a:03:69:de:75:d3:86:f6:e5:6c:d9:27:8d: a2:c1:ec:35:af:99:7f:4e:02:c8:04:be:a9:d5:53:4a:48:c8: 4d:3d:54:8c:2f:7b:84:2f:14:49:c4:e7:93:e3:e4:5d:db:7c: a9:6f:32:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qUVJCn7h9xCeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MDgwY2I1MGEtNjBkNi00MzMxLWE5ZjctZTFiZDdkZTczMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MyPEMD90feZ3wC2V4ZGbAJ5OkJAxltZ8o6E APtZncldFG/j2AssPxqd3Lyi23TaSwyWHG7/FWocu8yapA0hJQYiVB9ooVrRJ3B6 p0emN21zpwW7myWCDB/LjlUfOcJ2h85hA/C7OFRb8krI9pyr5rzRvPk0ijUS0aLM 5aGz9Tpqqzv54RhlNzZwvvik74qn7YLFT+/h7gijk/Lmxd1zthFsIjFnXLmVNka2 njAA4U8iQMgKgOpQMx+jNX8u9jZ7sWQdNYzcnK5rSeGIyvWGrvc1koiPRVlgzA41 r90pKU3M+Tn5JUApSXZJKlVVXIDC716XjTRJ5/68KCXGJ46jhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6RKdbkPn3kwkPKoPeDKL2UqMUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMmVhOTdkMjctYjM1Zi0z OWRkLWE4YTEtYWU5NTQwOTg2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJpaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIgz6rHJc7Yc/1Z6TunSHsu195uJ3/1W5Hxa0RvySIq3aBIZPg06MkC ub5DzX0RwH0Cbp9NXnQtEI8CSiPb48rxpYMrL9P+WCDOy4ES2Lmysn7qku1eJsag rAJbA6jVVgygF8Ld7GYX/pPZ5lG7q4T6/R4NktT5mRqrwmAn4yRcKXsmI/okUZhJ 3TKlU+agbldEtjAFN8Q8ZjYn47xl04vgBnWzQloQn10NAbJgcWLztETpbGPBaUSy Sd8u2a1TlnWtpMBKoTeDyNfaGgNp3nXThvblbNknjaLB7DWvmX9OAsgEvqnVU0pI yE09VIwve4QvFEnE55Pj5F3bfKlvMnM= -----END CERTIFICATE-----Generated at Sun Apr 6 12:04:45 2025 by rpki-client