$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa File: 023b5472-f6c0-3095-80c3-7b022b15a339.roa (raw, json) Hash identifier: IDFRv/4zwKuDyEluY1AiaqWGPcAi65ZZ9CZyiW7QbRc= Subject key identifier: DD:53:08:C7:19:B4:FC:0F:E2:27:58:7C:29:DF:42:2E:76:18:0A:57 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848B35B6C3FAB4526AB7FBD3800 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 203 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6c:3f:ab:45:26:ab:7f:bd:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=321536b2-f820-439e-988c-2b4d2b5fa608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5e:44:c7:d8:70:0f:d5:97:af:67:4a:55:80: 18:d5:25:b0:43:6b:02:dc:ce:2b:59:83:5c:7f:fd: 81:3e:9e:20:7b:28:5f:b4:a0:5c:8d:98:7c:53:25: 01:e3:d9:b5:08:d0:66:b0:89:4a:47:35:58:b2:c8: a3:0c:dc:eb:88:e0:ec:a4:1c:c6:33:d8:1d:4d:59: 33:ea:34:6f:e4:fd:92:3b:7f:15:79:e9:57:1d:f7: 61:1e:84:7c:bd:a4:a8:a6:22:69:d9:9c:dd:52:1f: 59:98:2d:a7:bd:e6:ee:13:c8:b8:a0:7d:7e:c9:e1: dd:74:2c:a1:f9:af:c8:25:99:9d:f1:91:86:b3:b2: e7:7a:04:f0:d2:54:f1:b4:43:3a:8e:31:14:e4:96: b0:69:68:a3:38:3b:cd:82:de:38:ef:fe:3b:a8:54: 0d:46:7e:4a:45:75:91:97:f0:eb:11:1c:09:19:26: 34:70:97:c9:4c:c8:ae:f0:f8:03:ce:3c:06:22:f9: f6:8b:c0:b0:32:9b:9a:53:80:43:ac:8d:56:8c:49: ad:55:26:d0:9e:bb:99:80:e5:1f:b2:ed:ce:17:59: cb:58:49:f1:47:ef:65:c8:2d:7d:db:62:3c:e2:90: e8:b5:d7:ee:cd:40:99:e5:3b:47:0c:22:51:30:e0: 39:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:08:C7:19:B4:FC:0F:E2:27:58:7C:29:DF:42:2E:76:18:0A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/023b5472-f6c0-3095-80c3-7b022b15a339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ef:71:07:4a:2a:d7:8a:1d:f2:6f:78:7e:3c:ea:a2:9c:12: c6:d8:6d:1c:f3:92:06:c1:52:c9:c4:2f:32:a6:15:19:8a:84: a8:f9:35:5d:0e:31:82:d0:61:c4:d4:55:f0:5c:13:95:08:97: c6:25:aa:92:3a:fa:2b:e7:45:47:9a:76:83:04:85:6b:60:d5: 45:67:f3:c9:ee:0e:02:24:4a:13:3e:af:a6:15:d3:87:24:43: bf:ac:c7:d8:54:a0:fb:7a:26:30:e1:a8:8e:fd:e0:86:04:ff: ca:7c:b3:aa:25:0b:68:97:ed:c2:44:83:78:78:45:b3:cf:36: 68:38:1c:dc:9c:d8:d9:b6:be:3a:95:e5:71:49:a2:ae:ec:68: f1:42:9f:21:91:4c:63:b9:20:81:03:16:e5:6c:51:67:33:81: a5:fb:3f:3b:1e:4b:8a:f0:4f:15:57:dc:13:8d:a8:b1:e5:cd: 3e:5f:db:87:46:be:79:75:ca:c9:32:db:1d:3f:d8:6b:c0:94: a8:1c:1e:3e:e9:f8:65:18:b6:15:d6:86:cb:c6:62:2b:6b:dd: 88:49:c8:09:a0:05:8c:49:ab:68:fa:5e:a5:87:c9:f7:61:6d: 4e:bc:f4:de:e3:da:5f:e6:68:ce:2a:42:19:c7:40:60:45:19: c6:9e:b1:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2w/q0Umq3+9OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk MzIxNTM2YjItZjgyMC00MzllLTk4OGMtMmI0ZDJiNWZhNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV5Ex9hwD9WXr2dKVYAY1SWwQ2sC3M4rWYNc f/2BPp4geyhftKBcjZh8UyUB49m1CNBmsIlKRzVYssijDNzriODspBzGM9gdTVkz 6jRv5P2SO38VeelXHfdhHoR8vaSopiJp2ZzdUh9ZmC2nvebuE8i4oH1+yeHddCyh +a/IJZmd8ZGGs7LnegTw0lTxtEM6jjEU5JawaWijODvNgt447/47qFQNRn5KRXWR l/DrERwJGSY0cJfJTMiu8PgDzjwGIvn2i8CwMpuaU4BDrI1WjEmtVSbQnruZgOUf su3OF1nLWEnxR+9lyC1922I84pDotdfuzUCZ5TtHDCJRMOA5iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1TCMcZtPwP4idYfCnfQi52GApXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDIzYjU0NzItZjZjMC0z MDk1LTgwYzMtN2IwMjJiMTVhMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXvcQdKKteKHfJveH486qKcEsbYbRzzkgbBUsnELzKmFRmKhKj5NV0O MYLQYcTUVfBcE5UIl8YlqpI6+ivnRUeadoMEhWtg1UVn88nuDgIkShM+r6YV04ck Q7+sx9hUoPt6JjDhqI794IYE/8p8s6olC2iX7cJEg3h4RbPPNmg4HNyc2Nm2vjqV 5XFJoq7saPFCnyGRTGO5IIEDFuVsUWczgaX7PzseS4rwTxVX3BONqLHlzT5f24dG vnl1ysky2x0/2GvAlKgcHj7p+GUYthXWhsvGYitr3YhJyAmgBYxJq2j6XqWHyfdh bU689N7j2l/maM4qQhnHQGBFGcaesU0= -----END CERTIFICATE-----Generated at Fri Apr 11 23:23:03 2025 by rpki-client