$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/01a58354-6718-38cb-adc5-f6f4e562db01.roa File: 01a58354-6718-38cb-adc5-f6f4e562db01.roa (raw, json) Hash identifier: seYEmj3TBauijpthvKEIMwRD3g5Kukwmgugoms/2+lo= Subject key identifier: 28:1F:DF:F4:1F:32:5D:AC:8C:5D:B8:DA:D9:98:BD:9A:0F:4A:21:4C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848170510B920A91784B6499C20 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/01a58354-6718-38cb-adc5-f6f4e562db01.roa Signing time: Wed 04 Dec 2024 02:00:39 +0000 ROA not before: Wed 04 Dec 2024 02:00:39 +0000 ROA not after: Tue 04 Mar 2025 02:00:39 +0000 asID: 202 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:17:05:10:b9:20:a9:17:84:b6:49:9c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 4 02:00:39 2024 GMT Not After : Mar 4 02:00:39 2025 GMT Subject: CN=2d30fc85-8a1a-4268-b841-a9d9380fef64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:2c:ed:7f:be:53:f9:6d:40:60:39:9f:97: e5:3d:a0:ef:ad:14:b7:f7:10:9d:9c:8b:94:7d:dd: 07:da:88:a4:84:3c:df:46:52:ae:99:94:cd:c8:45: e0:d6:1c:75:a6:eb:d9:9f:03:aa:1f:27:30:75:ff: c0:d4:b3:9b:55:d5:2c:0a:8e:1f:e0:5e:89:ab:e0: 20:2d:61:e9:b1:e5:f6:e8:34:a9:a4:1a:ef:95:29: dd:f9:94:4c:99:d9:bc:2c:86:a9:26:3a:4e:c5:1f: 0e:b4:ec:fd:97:23:f3:97:5f:18:ef:10:94:cb:0f: 20:d2:49:90:ae:8c:1f:b3:41:53:87:d6:96:c8:a0: 56:ee:49:f4:a8:a1:d7:06:f3:a7:c5:13:85:d0:54: 5e:4e:07:d2:d1:04:08:32:0a:7c:f2:aa:cb:ee:03: 47:27:fa:a8:c6:ee:c2:e3:6c:8d:ff:79:f5:e3:88: 38:1f:53:01:7d:d5:8b:8a:02:c0:9d:62:b9:7a:58: ce:42:f1:cd:ae:25:a3:80:a8:70:e6:6c:97:c1:80: 8e:9c:d1:7e:d6:87:ee:25:53:13:41:cd:ca:c0:6c: e4:af:ee:c4:82:c6:1e:65:34:28:86:1e:86:1e:b2: cd:1f:64:8e:e7:4d:ca:96:90:41:f6:c9:20:34:cd: 4e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1F:DF:F4:1F:32:5D:AC:8C:5D:B8:DA:D9:98:BD:9A:0F:4A:21:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/01a58354-6718-38cb-adc5-f6f4e562db01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d5:21:e1:9d:a5:f8:a3:70:f4:f0:e1:02:bd:49:9a:8f:ed: b9:9f:03:df:64:69:2b:4b:75:f0:5c:c7:9e:0d:31:c8:86:6a: 54:cc:8a:00:c1:4d:f0:2d:c6:63:29:e3:8c:a6:2c:80:e9:b3: bc:f0:a9:92:57:33:a5:ac:56:b6:53:4f:10:4d:c4:d6:11:d6: fb:8b:9a:11:56:da:2d:96:2f:8c:38:6e:12:79:41:1f:f3:32: fa:8a:b1:c5:df:6d:e4:40:2a:5f:f6:52:60:4d:9c:24:df:4e: c3:b2:e7:de:d5:a5:19:1c:8a:d9:7a:c7:51:9c:03:cf:e4:da: ea:92:1c:55:d9:1d:b7:68:d7:ef:cc:c5:b4:a9:54:cd:53:ac: 31:c6:87:fd:18:6c:25:b2:55:34:02:f3:e7:25:36:97:95:3a: 8c:f0:d4:fc:fd:b5:3b:87:b5:b0:e7:5c:4f:1a:68:db:e7:b1: a2:b9:2e:6e:aa:39:23:8b:aa:52:21:20:be:1f:c1:25:6a:c0: 07:7a:92:42:58:a9:81:f7:c0:3f:ef:a5:da:4d:22:ae:0e:8c: 68:6b:6e:54:11:29:70:ec:15:ba:f2:13:c1:9e:db:99:cb:6a: 1a:0f:82:76:c8:d1:a6:47:48:30:a8:52:95:ca:1a:2d:fb:dc: 07:08:d0:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXBRC5IKkXhLZJnCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIwNDAyMDAzOVoXDTI1MDMwNDAyMDAzOVowLzEtMCsGA1UEAxMk MmQzMGZjODUtOGExYS00MjY4LWI4NDEtYTlkOTM4MGZlZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Es7X++U/ltQGA5n5flPaDvrRS39xCdnIuU fd0H2oikhDzfRlKumZTNyEXg1hx1puvZnwOqHycwdf/A1LObVdUsCo4f4F6Jq+Ag LWHpseX26DSppBrvlSnd+ZRMmdm8LIapJjpOxR8OtOz9lyPzl18Y7xCUyw8g0kmQ rowfs0FTh9aWyKBW7kn0qKHXBvOnxROF0FReTgfS0QQIMgp88qrL7gNHJ/qoxu7C 42yN/3n144g4H1MBfdWLigLAnWK5eljOQvHNriWjgKhw5myXwYCOnNF+1ofuJVMT Qc3KwGzkr+7EgsYeZTQohh6GHrLNH2SO503KlpBB9skgNM1ObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgf3/QfMl2sjF242tmYvZoPSiFMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDFhNTgzNTQtNjcxOC0z OGNiLWFkYzUtZjZmNGU1NjJkYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnVIeGdpfijcPTw4QK9SZqP7bmfA99kaStLdfBcx54NMciGalTMigDB TfAtxmMp44ymLIDps7zwqZJXM6WsVrZTTxBNxNYR1vuLmhFW2i2WL4w4bhJ5QR/z MvqKscXfbeRAKl/2UmBNnCTfTsOy597VpRkcitl6x1GcA8/k2uqSHFXZHbdo1+/M xbSpVM1TrDHGh/0YbCWyVTQC8+clNpeVOozw1Pz9tTuHtbDnXE8aaNvnsaK5Lm6q OSOLqlIhIL4fwSVqwAd6kkJYqYH3wD/vpdpNIq4OjGhrblQRKXDsFbryE8Ge25nL ahoPgnbI0aZHSDCoUpXKGi373AcI0GY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:34 2025 by rpki-client