$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7a103545-6613-3147-9308-1839fdacc155.roa File: 7a103545-6613-3147-9308-1839fdacc155.roa (raw, json) Hash identifier: RQdkE19lGGv8UVFIHR8eDdhqhkYKOeOTCX+j0pAopC0= Subject key identifier: 2B:CB:B6:C8:72:F9:2F:7C:86:28:B9:34:E3:9B:EC:B9:4D:14:BF:3D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D940C2AE4B6F0FC8E98900C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7a103545-6613-3147-9308-1839fdacc155.roa Signing time: Tue 11 Feb 2025 15:47:47 +0000 ROA not before: Tue 11 Feb 2025 15:47:47 +0000 ROA not after: Mon 12 May 2025 14:47:47 +0000 asID: 3360 IP address blocks: 20.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:40:c2:ae:4b:6f:0f:c8:e9:89:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 15:47:47 2025 GMT Not After : May 12 14:47:47 2025 GMT Subject: CN=480460cd-9dd7-46f7-aaea-519cd913be10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c4:22:fd:b6:6b:54:df:3a:42:7b:d2:04:f4: 49:f2:e5:26:da:c2:42:d7:d6:85:70:60:a0:a7:02: f1:33:07:86:93:37:70:d0:7f:0a:b3:dc:b7:6a:ed: 27:8b:6e:5d:95:6a:0f:39:a9:8b:fc:ee:00:1e:19: 53:e7:4b:0d:83:69:4f:0c:9e:76:16:40:bb:54:25: c7:67:27:98:39:8a:0c:ef:50:97:11:2f:f4:06:62: d8:17:7b:f8:23:75:5f:05:68:9a:a4:85:9e:23:03: 49:9f:27:7a:37:a0:c5:da:f2:58:43:fa:e4:a3:cf: 0f:a6:ca:67:f7:65:54:3c:6a:05:c9:df:fc:27:82: ad:83:81:f0:ac:e5:43:bb:f7:60:2c:34:a1:e3:ec: 5c:1a:b8:80:a5:55:4f:95:5d:07:20:06:b0:2a:97: 4b:f9:e8:63:78:44:34:e9:4f:13:f0:8b:9f:79:14: 5d:ed:74:9f:dc:10:46:a6:4e:5b:56:8c:46:4c:21: 5d:30:42:1c:fc:63:4d:4b:e5:36:83:b8:44:12:62: f5:59:64:3e:78:5e:47:98:1b:52:ea:b8:13:c2:40: 01:36:55:3b:73:1c:d2:09:dc:59:97:ac:de:ae:14: b8:21:ec:87:91:44:18:23:8e:b6:ec:4b:37:45:ad: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CB:B6:C8:72:F9:2F:7C:86:28:B9:34:E3:9B:EC:B9:4D:14:BF:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7a103545-6613-3147-9308-1839fdacc155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0c:95:94:51:b0:86:8a:1e:f4:07:df:b9:87:cb:b7:7a:84: b5:8e:aa:27:8d:2f:f9:0b:55:d6:07:d6:1c:6b:c3:aa:fe:cd: 14:54:99:03:dd:5b:b1:fe:74:82:90:e2:8f:98:87:93:4e:0d: 23:ea:2b:24:60:a3:70:77:7d:cd:88:1d:29:6b:29:8a:0b:21: a6:83:a5:f2:54:10:2b:a8:2a:fa:21:4f:7e:a6:df:43:38:9c: 07:fb:6d:59:42:81:bc:e9:34:d8:46:2e:7a:53:4c:27:65:ad: 9d:83:fe:e0:97:db:9f:6e:30:cb:b8:f8:a8:ad:ae:c5:6d:9b: 29:3c:3d:59:22:af:20:37:ac:94:53:86:cd:9f:e8:b6:3f:ed: 6c:b1:42:2c:37:0c:27:dc:e0:fd:05:08:d0:ff:2e:83:6e:03: 9e:ce:57:1a:33:38:3a:a7:a5:04:a5:ab:cb:53:0c:b4:5f:90: ba:ae:fd:63:61:20:36:28:8f:fb:f7:6f:2d:fc:36:a5:03:de: ee:a5:14:98:79:95:a6:f7:5a:85:1c:d9:32:0a:1e:4b:48:01: ac:19:5b:61:6d:21:08:c0:87:aa:c4:57:09:d0:06:37:22:f5: 41:eb:a5:17:76:df:a5:e8:cc:04:63:fd:20:a7:47:9b:88:14: cc:4b:20:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZQMKuS28PyOmJAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE1NDc0N1oXDTI1MDUxMjE0NDc0N1owLzEtMCsGA1UEAxMk NDgwNDYwY2QtOWRkNy00NmY3LWFhZWEtNTE5Y2Q5MTNiZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcQi/bZrVN86QnvSBPRJ8uUm2sJC19aFcGCg pwLxMweGkzdw0H8Ks9y3au0ni25dlWoPOamL/O4AHhlT50sNg2lPDJ52FkC7VCXH ZyeYOYoM71CXES/0BmLYF3v4I3VfBWiapIWeIwNJnyd6N6DF2vJYQ/rko88Ppspn 92VUPGoFyd/8J4Ktg4HwrOVDu/dgLDSh4+xcGriApVVPlV0HIAawKpdL+ehjeEQ0 6U8T8IufeRRd7XSf3BBGpk5bVoxGTCFdMEIc/GNNS+U2g7hEEmL1WWQ+eF5HmBtS 6rgTwkABNlU7cxzSCdxZl6zerhS4IeyHkUQYI4627Es3Ra3qowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvLtshy+S98hii5NOOb7LlNFL89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2ExMDM1NDUtNjYxMy0z MTQ3LTkzMDgtMTgzOWZkYWNjMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgMlZRRsIaKHvQH37mHy7d6hLWOqieNL/kLVdYH1hxrw6r+zRRUmQPd W7H+dIKQ4o+Yh5NODSPqKyRgo3B3fc2IHSlrKYoLIaaDpfJUECuoKvohT36m30M4 nAf7bVlCgbzpNNhGLnpTTCdlrZ2D/uCX259uMMu4+KitrsVtmyk8PVkiryA3rJRT hs2f6LY/7WyxQiw3DCfc4P0FCND/LoNuA57OVxozODqnpQSlq8tTDLRfkLqu/WNh IDYoj/v3by38NqUD3u6lFJh5lab3WoUc2TIKHktIAawZW2FtIQjAh6rEVwnQBjci 9UHrpRd236XozARj/SCnR5uIFMxLIP0= -----END CERTIFICATE-----Generated at Sun Apr 6 07:53:15 2025 by rpki-client