$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa File: 5d2179de-2db2-31e0-91ae-22d99860f145.roa (raw, json) Hash identifier: q2aYQTTWBpdHzERHRKrfy82CnY+4HVH8Vaiygx2sYuA= Subject key identifier: FD:73:5B:80:F6:D7:37:AA:8C:3E:8C:DC:7B:46:A3:14:A8:D0:C1:FD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D93CEE9894BE17E0485BD100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa Signing time: Tue 11 Feb 2025 15:40:04 +0000 ROA not before: Tue 11 Feb 2025 15:40:04 +0000 ROA not after: Mon 12 May 2025 14:40:04 +0000 asID: 3360 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:3c:ee:98:94:be:17:e0:48:5b:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 15:40:04 2025 GMT Not After : May 12 14:40:04 2025 GMT Subject: CN=b48fd49f-3997-4408-8c90-7824c16a2c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:27:ec:c4:04:6f:06:23:db:29:d1:f6:ad: 40:3b:b0:da:d2:43:75:e3:35:82:c1:86:b2:78:7b: 81:45:2f:8d:20:e4:27:f0:f5:0f:6a:c0:5f:a3:a2: 91:1a:52:9e:c9:40:62:3d:f1:c6:ba:e6:19:df:66: c8:e8:29:e9:79:9f:ab:7e:4e:f5:76:72:51:c9:d6: ec:61:0e:5a:95:28:91:8a:9d:60:fa:49:22:ff:26: b4:84:96:6b:3e:69:75:c1:e6:32:90:c1:99:bd:58: 10:7b:b1:aa:52:cb:5d:d4:1d:a2:f5:8b:6c:d7:2e: 59:12:3e:b4:f0:4a:15:28:08:74:94:0b:e9:1a:82: 51:d0:f2:65:9f:d0:a1:60:f6:2a:2a:df:64:20:9e: 43:f0:56:0c:d1:d9:19:c8:31:0c:89:e7:39:dd:bf: db:e1:18:58:08:73:e8:50:25:11:0a:89:37:13:2d: e9:29:52:83:08:33:46:3d:a5:da:f1:10:b5:d0:72: 1c:af:d3:43:10:5f:1e:a2:ea:cf:50:fc:39:37:94: 7b:bf:e2:0f:bd:c5:49:2e:88:c9:53:d7:2b:d4:51: 11:52:b6:3a:8c:14:8b:1b:5d:7e:8e:12:3c:3e:36: 27:87:9b:7a:ca:6a:c6:02:3f:c3:cb:3e:e6:ba:8c: 0d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:73:5B:80:F6:D7:37:AA:8C:3E:8C:DC:7B:46:A3:14:A8:D0:C1:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:25:46:bc:ff:91:46:df:4e:86:54:15:9c:01:02:44:49:51: de:ab:fe:c2:b0:df:06:72:b6:78:fa:84:8b:65:37:50:a4:a0: a3:5f:92:e3:c2:da:24:c6:f9:da:4a:c8:7b:6e:5e:c4:da:bc: 48:54:f4:ae:1c:59:99:cc:e7:27:69:f9:dd:73:fb:85:6c:16: 30:1a:5e:31:ed:e2:a1:4f:e8:29:13:8e:45:dc:c3:94:de:8c: 11:2d:8c:d1:3f:70:1c:94:b8:ab:a9:e8:56:17:c1:2f:34:7c: 56:77:0c:50:22:87:00:82:b6:f3:f5:15:e7:9a:f1:e3:2e:12: fc:cf:15:48:c4:2d:3a:ae:4f:a3:86:71:86:97:e8:0f:3b:7b: f3:86:ed:f0:4a:09:c9:7d:17:7b:9d:3d:22:4a:cc:6a:29:91: 51:e3:4b:9a:c4:fe:45:4e:7c:f6:db:cb:8f:eb:7e:de:20:c5: 37:5d:80:62:ab:97:a5:fd:eb:0f:e8:4f:33:6d:6f:52:01:13: 02:23:56:14:d7:76:ae:2c:54:b6:57:b8:c0:f3:9a:57:bb:3e: f1:61:f0:a0:2f:b3:16:4c:a2:39:8a:d8:fc:8d:e5:13:16:7f: b5:de:f7:ce:06:fd:42:8f:01:63:08:73:d3:a4:0d:78:aa:77: c5:0c:92:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZPO6YlL4X4Ehb0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE1NDAwNFoXDTI1MDUxMjE0NDAwNFowLzEtMCsGA1UEAxMk YjQ4ZmQ0OWYtMzk5Ny00NDA4LThjOTAtNzgyNGMxNmEyYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D0n7MQEbwYj2ynR9q1AO7Da0kN14zWCwYay eHuBRS+NIOQn8PUPasBfo6KRGlKeyUBiPfHGuuYZ32bI6CnpeZ+rfk71dnJRydbs YQ5alSiRip1g+kki/ya0hJZrPml1weYykMGZvVgQe7GqUstd1B2i9Yts1y5ZEj60 8EoVKAh0lAvpGoJR0PJln9ChYPYqKt9kIJ5D8FYM0dkZyDEMiec53b/b4RhYCHPo UCURCok3Ey3pKVKDCDNGPaXa8RC10HIcr9NDEF8eourPUPw5N5R7v+IPvcVJLojJ U9cr1FERUrY6jBSLG11+jhI8PjYnh5t6ymrGAj/Dyz7muowN1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1zW4D21zeqjD6M3HtGoxSo0MH9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWQyMTc5ZGUtMmRiMi0z MWUwLTkxYWUtMjJkOTk4NjBmMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQlRrz/kUbfToZUFZwBAkRJUd6r/sKw3wZytnj6hItlN1CkoKNfkuPC 2iTG+dpKyHtuXsTavEhU9K4cWZnM5ydp+d1z+4VsFjAaXjHt4qFP6CkTjkXcw5Te jBEtjNE/cByUuKup6FYXwS80fFZ3DFAihwCCtvP1Feea8eMuEvzPFUjELTquT6OG cYaX6A87e/OG7fBKCcl9F3udPSJKzGopkVHjS5rE/kVOfPbby4/rft4gxTddgGKr l6X96w/oTzNtb1IBEwIjVhTXdq4sVLZXuMDzmle7PvFh8KAvsxZMojmK2PyN5RMW f7Xe984G/UKPAWMIc9OkDXiqd8UMkg8= -----END CERTIFICATE-----Generated at Sun Apr 6 07:48:21 2025 by rpki-client