$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa File: 094276eb-a22a-3e33-8c6d-37f68e1f7695.roa (raw, json) Hash identifier: Cz5AV3thuf597IwHu09X/UkPwaC4LkNN+km9TFUWcAE= Subject key identifier: A2:9C:0D:55:B1:B4:1D:AD:76:31:C0:4B:E8:72:56:7C:82:25:F9:2A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13B233AC7C53D7EEB2600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 203 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3b:23:3a:c7:c5:3d:7e:eb:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=7dff25a2-2864-46d9-bcd4-7487679c9b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8c:3e:07:65:b7:a8:ec:fc:09:dd:57:1c:2d: 82:73:36:8a:a0:cd:34:57:88:6e:cb:fc:e4:d1:0c: 90:4a:5c:ff:fc:e5:5e:84:1e:9d:b2:6c:37:1f:0b: 21:ed:6c:8c:b2:41:ed:35:b9:6d:88:f2:98:be:35: 34:b6:b7:9c:7a:47:4c:b9:02:71:40:19:3d:cb:45: 7b:94:7e:ae:68:3b:1a:48:f1:87:75:e8:85:8e:d7: 92:9a:92:ac:d2:7b:bc:7b:55:8c:af:cd:c5:e5:6f: 71:b8:c2:9c:a0:cd:f5:7f:a3:9f:07:89:90:d9:89: a7:b1:0a:bd:a0:5f:3c:7d:b7:ad:77:26:4f:ea:61: 7f:62:df:a2:27:9b:74:65:b8:9b:3d:74:76:40:b9: b5:89:c3:29:ad:f2:18:17:1b:79:c0:6d:1b:ae:ab: 80:02:67:25:c1:9b:e5:6a:39:70:98:1d:9c:3a:aa: de:91:87:6e:ad:98:67:e6:af:4e:c4:86:f4:f2:16: d1:31:58:19:43:b3:e0:0c:3c:91:32:46:3c:9c:a0: 81:f1:eb:f7:8c:57:e6:4b:16:fe:62:02:e0:78:fe: b5:45:f8:b8:16:0c:ca:2f:f4:26:17:44:e8:91:90: 53:a3:76:2b:40:43:0c:88:13:72:e8:52:17:1b:53: 7c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9C:0D:55:B1:B4:1D:AD:76:31:C0:4B:E8:72:56:7C:82:25:F9:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8f:7a:d0:7d:6f:ec:9f:b6:d6:35:ad:db:4d:94:cd:72:30: ef:b3:68:e9:47:72:00:a9:5c:70:94:ab:2e:f6:fd:41:2b:18: 14:ef:2e:d9:fa:43:9b:08:dc:0b:6c:42:9c:5c:9b:1f:d6:56: 93:28:e3:d0:e2:d3:11:8f:80:61:73:cf:20:3d:25:55:5c:19: 5c:26:fd:13:eb:5e:fb:14:1d:3d:ee:b3:28:9d:f5:0c:69:db: 01:ae:3d:e1:03:d4:24:ca:e9:80:ee:59:b7:75:b6:40:d9:db: e1:ca:df:7b:d7:2c:01:3c:48:1b:a4:ab:e0:62:03:46:9c:7e: 82:be:41:ef:63:45:e9:76:01:63:3e:1a:42:b7:06:b4:12:f5: eb:04:56:cb:de:1c:2e:7b:30:09:7e:66:b1:5a:ad:7c:09:bb: 59:84:08:d6:2f:7e:6c:b3:b6:09:9b:00:2f:65:bb:e2:3b:38: b1:b3:c6:e0:0b:71:9e:16:d7:75:aa:a3:8e:ed:d9:70:e0:36: e4:b3:be:79:82:e6:2c:53:62:8d:2d:e7:25:c2:7d:42:bd:40: 52:c7:25:86:59:c7:84:27:66:ca:52:3e:74:b4:18:71:69:21: d3:02:5c:bf:92:44:4f:1b:6b:83:3c:8a:94:62:df:b2:bd:4b: a6:bc:01:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTsjOsfFPX7rJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk N2RmZjI1YTItMjg2NC00NmQ5LWJjZDQtNzQ4NzY3OWM5YjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4w+B2W3qOz8Cd1XHC2CczaKoM00V4huy/zk 0QyQSlz//OVehB6dsmw3Hwsh7WyMskHtNbltiPKYvjU0trecekdMuQJxQBk9y0V7 lH6uaDsaSPGHdeiFjteSmpKs0nu8e1WMr83F5W9xuMKcoM31f6OfB4mQ2YmnsQq9 oF88fbetdyZP6mF/Yt+iJ5t0ZbibPXR2QLm1icMprfIYFxt5wG0brquAAmclwZvl ajlwmB2cOqrekYdurZhn5q9OxIb08hbRMVgZQ7PgDDyRMkY8nKCB8ev3jFfmSxb+ YgLgeP61Rfi4FgzKL/QmF0TokZBTo3YrQEMMiBNy6FIXG1N8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKcDVWxtB2tdjHAS+hyVnyCJfkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDk0Mjc2ZWItYTIyYS0z ZTMzLThjNmQtMzdmNjhlMWY3Njk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCPetB9b+yfttY1rdtNlM1yMO+zaOlHcgCpXHCUqy72/UErGBTvLtn6 Q5sI3AtsQpxcmx/WVpMo49Di0xGPgGFzzyA9JVVcGVwm/RPrXvsUHT3usyid9Qxp 2wGuPeED1CTK6YDuWbd1tkDZ2+HK33vXLAE8SBukq+BiA0acfoK+Qe9jRel2AWM+ GkK3BrQS9esEVsveHC57MAl+ZrFarXwJu1mECNYvfmyztgmbAC9lu+I7OLGzxuAL cZ4W13Wqo47t2XDgNuSzvnmC5ixTYo0t5yXCfUK9QFLHJYZZx4QnZspSPnS0GHFp IdMCXL+SRE8ba4M8ipRi37K9S6a8Ack= -----END CERTIFICATE-----Generated at Fri Apr 11 22:17:50 2025 by rpki-client