$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cccc300f-4729-3b3c-b680-5303ebeca2ca.roa File: cccc300f-4729-3b3c-b680-5303ebeca2ca.roa (raw, json) Hash identifier: eZbW2ihjzXh8+1Pbg+UAIXfAebfjyCzlKaQ0H6G1Ofo= Subject key identifier: 61:2F:4F:93:E1:A9:7E:33:F4:89:F9:D7:A8:85:06:9A:9D:C7:3C:4E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE951AE5B94D6456916900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cccc300f-4729-3b3c-b680-5303ebeca2ca.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 4237 IP address blocks: 20.148.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:95:1a:e5:b9:4d:64:56:91:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=82126c56-90bf-49d1-bfe6-30bb6fe7e32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:b1:36:01:da:f5:09:30:86:31:d5:2f:d9: 51:94:2b:e7:af:fa:ac:17:d4:49:94:d8:75:48:0d: df:81:6b:10:95:e2:2e:d3:78:f7:32:cd:d3:7f:fd: ec:23:93:64:30:c0:22:4f:68:b3:6c:53:80:67:e7: 2b:57:86:d9:a9:e2:23:30:bd:56:98:a1:0b:7a:4d: 6a:e0:b9:45:a2:e2:43:6f:a7:97:2a:c9:05:64:d6: 02:84:af:e5:34:93:ac:82:83:b7:63:a6:9f:0a:38: 91:96:ab:e2:b5:72:81:b7:7d:af:1d:b1:2e:a6:48: a1:ea:44:14:ba:d8:c7:4f:da:95:aa:89:5f:0d:99: 0d:51:e4:76:37:0a:cb:0b:a4:3b:c7:43:dc:74:65: fa:64:dd:dd:7b:37:00:93:55:86:b1:60:fb:0b:8c: 45:93:6c:37:7e:11:c9:ac:47:96:47:7c:5f:31:53: 63:9e:9a:fc:3a:e4:a0:dc:86:19:6c:ed:24:98:75: 8d:6c:1c:60:8e:bb:0d:1f:c4:10:2e:20:57:de:b6: 2b:3b:a9:aa:cd:4d:54:00:ed:40:83:e9:9c:83:d6: f7:53:46:db:b6:52:5d:31:63:45:f8:89:68:9a:0c: cd:3e:ab:99:6e:4f:c3:44:72:d7:b8:b4:01:10:cd: 69:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2F:4F:93:E1:A9:7E:33:F4:89:F9:D7:A8:85:06:9A:9D:C7:3C:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cccc300f-4729-3b3c-b680-5303ebeca2ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e7:5f:fc:22:a5:5b:2d:5e:d1:a3:d5:72:24:f7:60:03:e5: e0:4c:24:3e:38:06:96:b7:a8:a6:5d:d2:1f:d1:2a:79:fa:00: c4:81:47:7a:4f:d2:2b:56:93:dc:8b:71:dd:9f:67:68:d5:45: f4:aa:96:f2:eb:da:f0:88:fd:61:11:a0:8a:88:cc:c7:fc:87: 3c:bb:c1:e3:fe:5e:21:7d:21:0c:f9:cb:ce:06:3f:7b:81:e2: 75:2a:47:cf:f9:51:e9:99:95:4d:ba:03:a6:21:46:c0:cc:86: a5:a4:c5:47:e4:0c:e2:a9:0f:0f:65:71:35:dd:ea:ed:e4:3a: fb:0b:e7:ca:20:6a:71:b2:8a:7d:ef:f9:30:21:5b:d4:f2:21: 5c:68:21:86:b2:7e:7f:71:57:b8:cf:e9:03:9f:b8:f6:fa:43: a5:50:29:b6:47:ef:b4:e1:55:d4:5d:06:b9:91:a6:a2:1d:5a: a2:8b:96:59:78:92:79:c1:6f:83:2e:23:ad:9d:a2:20:3e:df: 6f:20:19:2b:c9:9e:8d:4d:ae:7d:7a:6c:f2:91:17:36:a0:b7: 1e:10:0b:ea:3f:b4:0a:ac:6a:05:7a:83:a0:18:db:92:d6:88: 0f:8b:c0:1b:c0:ba:11:90:8d:21:d1:d2:2f:dc:3c:75:a5:52: 9a:0f:43:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpUa5blNZFaRaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODIxMjZjNTYtOTBiZi00OWQxLWJmZTYtMzBiYjZmZTdlMzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44+xNgHa9QkwhjHVL9lRlCvnr/qsF9RJlNh1 SA3fgWsQleIu03j3Ms3Tf/3sI5NkMMAiT2izbFOAZ+crV4bZqeIjML1WmKELek1q 4LlFouJDb6eXKskFZNYChK/lNJOsgoO3Y6afCjiRlqvitXKBt32vHbEupkih6kQU utjHT9qVqolfDZkNUeR2NwrLC6Q7x0PcdGX6ZN3dezcAk1WGsWD7C4xFk2w3fhHJ rEeWR3xfMVNjnpr8OuSg3IYZbO0kmHWNbBxgjrsNH8QQLiBX3rYrO6mqzU1UAO1A g+mcg9b3U0bbtlJdMWNF+IlomgzNPquZbk/DRHLXuLQBEM1ptwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEvT5PhqX4z9In516iFBpqdxzxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvY2NjYzMwMGYtNDcyOS0z YjNjLWI2ODAtNTMwM2ViZWNhMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfnX/wipVstXtGj1XIk92AD5eBMJD44Bpa3qKZd0h/RKnn6AMSBR3pP 0itWk9yLcd2fZ2jVRfSqlvLr2vCI/WERoIqIzMf8hzy7weP+XiF9IQz5y84GP3uB 4nUqR8/5UemZlU26A6YhRsDMhqWkxUfkDOKpDw9lcTXd6u3kOvsL58oganGyin3v +TAhW9TyIVxoIYayfn9xV7jP6QOfuPb6Q6VQKbZH77ThVdRdBrmRpqIdWqKLlll4 knnBb4MuI62doiA+328gGSvJno1Nrn16bPKRFzagtx4QC+o/tAqsagV6g6AY25LW iA+LwBvAuhGQjSHR0i/cPHWlUpoPQ04= -----END CERTIFICATE-----Generated at Sun Apr 6 13:54:27 2025 by rpki-client