$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c193add7-7c7f-32cc-b611-e12c586e5ada.roa File: c193add7-7c7f-32cc-b611-e12c586e5ada.roa (raw, json) Hash identifier: YKjZuLIdSOd+i60zdiidRG+bOIyTlF+bwK7/I9fr8O4= Subject key identifier: 5C:F5:5E:FD:5B:D9:37:76:9C:E8:44:2B:2F:27:58:BD:50:A9:15:C7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D945AC8DEAAEC7F90B076FA0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c193add7-7c7f-32cc-b611-e12c586e5ada.roa Signing time: Tue 11 Feb 2025 15:57:41 +0000 ROA not before: Tue 11 Feb 2025 15:57:41 +0000 ROA not after: Mon 12 May 2025 14:57:41 +0000 asID: 3360 IP address blocks: 20.149.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:45:ac:8d:ea:ae:c7:f9:0b:07:6f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 15:57:41 2025 GMT Not After : May 12 14:57:41 2025 GMT Subject: CN=6b429564-f527-4414-8d33-10248ec3c1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:bf:7b:d7:93:ec:53:8c:f4:74:84:0c:90: cf:20:7c:5c:3e:4d:e7:9d:e0:0b:b4:41:2f:05:5f: 1f:a9:48:eb:10:7c:03:2d:74:bc:8e:d8:8c:56:3d: 38:a9:37:76:09:bd:81:92:a1:0a:76:39:a9:a5:5e: d5:6a:4a:14:36:52:72:f0:44:f4:44:f2:49:d7:70: 3d:eb:e0:1b:46:10:ae:3c:cb:8c:d6:f2:a5:d5:a1: 4c:ac:5e:23:90:cd:28:9d:15:59:2c:a2:1e:fc:70: 5f:dd:12:d8:ae:85:fe:b6:e8:65:bb:27:5b:d2:e6: 94:78:78:43:61:eb:dc:3e:cc:c7:1b:d8:6c:5e:03: 56:a7:4e:04:7a:2a:8f:99:85:23:5a:3e:3b:ae:f0: 2b:ae:6b:94:d0:d9:f4:9a:98:8b:a7:f3:27:b3:aa: 97:bd:bb:1c:94:b9:a8:67:95:dc:25:94:63:a6:73: 33:34:f2:c5:f7:37:30:13:1e:51:66:2a:7d:94:36: c5:6b:b4:4e:55:f4:e2:23:3c:fa:32:41:a6:16:88: 27:8e:44:98:1d:65:2a:ad:94:c6:3c:2c:98:ed:f5: bc:f7:fb:71:47:dc:7c:7e:c0:5d:c9:34:3e:e7:27: 04:6c:bb:1e:b5:13:f2:32:55:2d:c0:1b:cf:93:ca: 16:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F5:5E:FD:5B:D9:37:76:9C:E8:44:2B:2F:27:58:BD:50:A9:15:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c193add7-7c7f-32cc-b611-e12c586e5ada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:13:65:c7:83:c1:b2:07:7a:a6:a9:e2:1b:b9:7b:f1:68:58: 5a:bc:7d:73:40:f4:7f:78:d3:82:96:28:18:b1:1a:e8:f9:0f: 4a:25:bc:a7:b0:53:26:46:06:ec:3f:26:0e:43:8d:c8:33:24: 40:93:11:fa:b2:42:af:66:b2:bc:f1:f4:c4:47:a2:72:2d:d0: 31:49:bb:6b:e1:14:5b:20:15:97:e7:db:15:68:4f:7a:e8:be: 3f:32:22:3d:e5:41:06:7c:c2:c6:d5:02:7f:02:60:d0:00:c8: fb:d7:59:91:8e:f0:35:21:0c:e2:49:04:b7:a3:c3:e6:74:b2: 27:a0:48:2f:08:71:f8:66:b0:ee:f5:26:51:8c:60:f3:e5:b7: 8c:5e:01:8b:55:c5:ea:e8:de:c1:9b:63:d2:7d:80:5f:82:9e: 78:27:c2:ee:c3:69:92:1d:0e:9c:f5:73:78:f5:b4:b0:2e:a2: ed:e3:7e:73:4e:2f:33:58:3b:b8:55:de:74:e0:1b:73:e6:89: 27:88:4d:1a:31:ee:02:5a:6d:47:2f:0a:e9:ff:01:0c:cd:6a: 01:4f:e5:ba:e3:9d:bc:c2:37:ba:67:f9:2c:3d:85:86:af:51: 12:3a:78:97:9b:d4:4c:5c:6e:bc:94:0d:48:c1:81:a4:5d:b2: 5c:27:8e:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZRayN6q7H+QsHb6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE1NTc0MVoXDTI1MDUxMjE0NTc0MVowLzEtMCsGA1UEAxMk NmI0Mjk1NjQtZjUyNy00NDE0LThkMzMtMTAyNDhlYzNjMWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHm/e9eT7FOM9HSEDJDPIHxcPk3nneALtEEv BV8fqUjrEHwDLXS8jtiMVj04qTd2Cb2BkqEKdjmppV7VakoUNlJy8ET0RPJJ13A9 6+AbRhCuPMuM1vKl1aFMrF4jkM0onRVZLKIe/HBf3RLYroX+tuhluydb0uaUeHhD YevcPszHG9hsXgNWp04EeiqPmYUjWj47rvArrmuU0Nn0mpiLp/Mns6qXvbsclLmo Z5XcJZRjpnMzNPLF9zcwEx5RZip9lDbFa7ROVfTiIzz6MkGmFognjkSYHWUqrZTG PCyY7fW89/txR9x8fsBdyTQ+5ycEbLsetRPyMlUtwBvPk8oWiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFz1Xv1b2Td2nOhEKy8nWL1QqRXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzE5M2FkZDctN2M3Zi0z MmNjLWI2MTEtZTEyYzU4NmU1YWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkTZceDwbIHeqap4hu5e/FoWFq8fXNA9H9404KWKBixGuj5D0olvKew UyZGBuw/Jg5DjcgzJECTEfqyQq9msrzx9MRHonIt0DFJu2vhFFsgFZfn2xVoT3ro vj8yIj3lQQZ8wsbVAn8CYNAAyPvXWZGO8DUhDOJJBLejw+Z0siegSC8IcfhmsO71 JlGMYPPlt4xeAYtVxero3sGbY9J9gF+Cnngnwu7DaZIdDpz1c3j1tLAuou3jfnNO LzNYO7hV3nTgG3PmiSeITRox7gJabUcvCun/AQzNagFP5brjnbzCN7pn+Sw9hYav URI6eJeb1ExcbryUDUjBgaRdslwnjoo= -----END CERTIFICATE-----Generated at Sun Apr 6 13:46:46 2025 by rpki-client