$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/382f88bf-202b-36d2-b132-4cab93ad15d5.roa File: 382f88bf-202b-36d2-b132-4cab93ad15d5.roa (raw, json) Hash identifier: c+o8r9/nfsxCWeIRPoIpxR1agAVS8s5o+KWcJdUDk8c= Subject key identifier: D8:73:BE:C3:B2:8C:F5:25:45:80:AF:4D:09:4C:FC:E9:FD:D7:C3:50 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848960B4F3CECED63E5CE2209C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/382f88bf-202b-36d2-b132-4cab93ad15d5.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 4237 IP address blocks: 20.137.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:4f:3c:ec:ed:63:e5:ce:22:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=a37febd1-b786-42ea-9527-4962459a9dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f5:bd:8e:d5:4b:b8:57:af:c3:43:07:f9:ce: de:3a:76:23:bd:8b:83:d8:36:be:55:fc:f7:ca:33: ed:2c:81:8b:9e:30:f6:21:33:b7:ea:a6:d9:19:af: e1:63:70:6b:50:76:a5:ef:82:73:52:7e:55:78:00: 3e:a1:9f:41:f7:b8:91:ca:ff:d6:71:82:62:0e:11: a0:14:4d:1c:4b:b5:8b:d7:13:e9:c9:6c:23:fa:29: 96:cd:62:3d:6b:3c:20:ab:97:52:ba:64:27:6f:62: 0a:c4:a2:fd:ae:a0:e0:1a:68:59:3e:b9:28:02:e0: 92:af:8a:b5:ad:02:0c:49:68:3e:5b:91:26:e1:cb: f4:30:71:65:c9:d5:95:01:b1:b4:d6:28:e6:29:f7: c7:75:93:b2:45:bb:1f:44:5c:88:f3:5f:35:01:56: 61:b6:7e:67:a4:1d:d7:56:43:08:f3:cf:60:d7:a5: 23:eb:d7:59:47:40:07:3a:85:09:0d:c2:6b:9c:6a: 71:1c:0e:a7:12:00:1c:8a:4c:3d:36:c2:6e:97:f5: 70:a7:3a:d9:8b:dd:11:52:2f:79:b3:ce:ff:60:71: 9a:61:c1:a2:c2:df:db:bb:1e:82:54:12:71:b1:ec: 16:a9:b5:06:7a:8d:cb:cd:25:b4:f7:60:ab:9c:2f: d3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:73:BE:C3:B2:8C:F5:25:45:80:AF:4D:09:4C:FC:E9:FD:D7:C3:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/382f88bf-202b-36d2-b132-4cab93ad15d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:23:99:47:3d:09:d9:7e:9c:fa:68:4e:fb:2b:8a:cc:75:32: 2c:68:54:c1:40:49:b2:d9:0f:2b:40:d8:0d:3c:bb:97:cf:01: 28:a6:93:65:45:1e:c4:4b:8f:0e:f5:38:ae:3d:e7:8a:b0:02: 19:f6:2a:10:e0:81:25:70:a6:11:57:c2:a4:5d:0a:1a:f9:2e: 1c:a7:01:c7:94:9b:d4:0f:44:53:cb:c8:81:1e:8e:dd:70:64: 42:04:17:9d:4e:2d:61:96:de:6b:5e:5d:96:f9:72:7b:aa:5c: b7:d7:ab:33:c5:cf:c6:24:56:3f:79:b9:b4:77:af:40:1c:32: 29:90:b9:2c:37:35:67:98:aa:56:22:ef:73:3e:e3:3a:d1:30: 98:e0:2f:23:74:7d:47:a6:98:fe:f5:c9:85:06:e8:fe:af:3f: 2c:de:6f:ec:35:79:86:38:b3:e6:ea:17:27:30:62:de:d3:72: 76:46:45:34:4c:2d:94:e9:05:f5:97:85:a1:92:54:01:aa:7f: 30:04:e0:54:40:2f:e8:ea:22:5e:a3:dc:d7:35:c6:26:f7:f8: bc:e4:fb:cb:73:5e:c9:ab:14:b4:f9:35:a2:d3:56:5a:49:b2: c2:99:75:d0:c5:4b:07:1d:2b:09:59:b0:4c:14:38:fe:40:76: d0:dc:dc:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC0887O1j5c4iCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk YTM3ZmViZDEtYjc4Ni00MmVhLTk1MjctNDk2MjQ1OWE5ZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vW9jtVLuFevw0MH+c7eOnYjvYuD2Da+Vfz3 yjPtLIGLnjD2ITO36qbZGa/hY3BrUHal74JzUn5VeAA+oZ9B97iRyv/WcYJiDhGg FE0cS7WL1xPpyWwj+imWzWI9azwgq5dSumQnb2IKxKL9rqDgGmhZPrkoAuCSr4q1 rQIMSWg+W5Em4cv0MHFlydWVAbG01ijmKffHdZOyRbsfRFyI8181AVZhtn5npB3X VkMI889g16Uj69dZR0AHOoUJDcJrnGpxHA6nEgAcikw9NsJul/VwpzrZi90RUi95 s87/YHGaYcGiwt/bux6CVBJxsewWqbUGeo3LzSW092CrnC/TmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhzvsOyjPUlRYCvTQlM/On918NQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzgyZjg4YmYtMjAyYi0z NmQyLWIxMzItNGNhYjkzYWQxNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFInwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEojmUc9Cdl+nPpoTvsrisx1MixoVMFASbLZDytA2A08u5fPASimk2VF HsRLjw71OK4954qwAhn2KhDggSVwphFXwqRdChr5LhynAceUm9QPRFPLyIEejt1w ZEIEF51OLWGW3mteXZb5cnuqXLfXqzPFz8YkVj95ubR3r0AcMimQuSw3NWeYqlYi 73M+4zrRMJjgLyN0fUemmP71yYUG6P6vPyzeb+w1eYY4s+bqFycwYt7TcnZGRTRM LZTpBfWXhaGSVAGqfzAE4FRAL+jqIl6j3Nc1xib3+Lzk+8tzXsmrFLT5NaLTVlpJ ssKZddDFSwcdKwlZsEwUOP5AdtDc3FA= -----END CERTIFICATE-----Generated at Sun Apr 6 08:55:46 2025 by rpki-client