$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa File: 0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa (raw, json) Hash identifier: ZHvFGb8gpIaGe+38YOcBxFIWnKAHtfxx1iuFoXsKYok= Subject key identifier: FE:37:85:35:74:86:E9:D0:84:10:5D:E6:AF:B0:95:CE:01:65:C1:7F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13CABACF39BBFD654DFC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3c:ab:ac:f3:9b:bf:d6:54:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=fd397da0-1143-4a2b-a090-dbf333b6f2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fa:4f:e9:02:8b:b0:a6:9b:4d:ae:d3:de:94: 54:48:df:d8:bd:62:c4:65:88:74:a1:ed:bb:c1:19: 9c:f4:f8:52:e1:47:41:a0:43:fb:fe:d8:62:ca:30: e2:b8:72:07:87:36:a4:21:8c:51:63:d7:f3:65:84: 4c:56:fb:f6:a3:a9:dc:4e:f5:97:0c:62:79:5b:95: 08:4b:fb:39:12:18:7b:40:fa:78:7f:89:2a:1a:30: da:dd:29:08:b4:fc:7a:53:dc:8a:e6:2f:85:bd:53: 7b:80:aa:7b:65:d4:da:a7:fa:62:73:6b:b6:54:dc: 7c:86:be:cf:63:65:96:75:c3:49:95:1e:29:8d:0d: f2:05:3d:43:05:54:5d:da:ef:7a:2f:8b:be:6b:55: e1:3b:6d:c0:a6:2e:a8:4f:24:79:95:31:63:5e:72: 57:1c:60:fa:04:52:e9:55:6e:5a:3b:e6:4e:47:a0: 75:69:60:48:bb:49:1d:f9:e6:3e:73:15:74:c4:60: 84:b2:64:12:2b:30:4b:fc:3d:38:ca:41:3f:7f:e2: 61:63:89:5c:b7:02:59:d0:f8:bc:a2:47:e7:0c:b2: 00:fa:95:b6:79:25:4c:f0:76:1b:e4:2f:7e:49:3c: c6:b3:98:de:71:26:b4:c1:b5:e8:9f:1f:c8:fb:ba: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:37:85:35:74:86:E9:D0:84:10:5D:E6:AF:B0:95:CE:01:65:C1:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b3:8c:d9:42:6b:5b:5d:13:4a:4c:7d:f8:88:55:9a:b5:49: 9b:41:d1:ab:9d:45:c5:89:d0:2d:05:c0:6d:b1:9d:e3:4c:82: f5:96:47:4a:e0:56:56:55:a1:9c:12:74:09:11:48:c5:5c:a9: 71:61:9c:c1:01:93:a3:68:15:7e:6b:58:62:0f:11:06:d5:6a: 8b:f9:3d:c2:2b:02:e9:ce:e7:13:b8:7b:af:43:94:ef:dd:d8: 02:d7:47:ed:d5:c9:6c:40:c2:6b:61:7b:e6:38:43:af:a3:0f: 7b:99:24:cc:7c:9c:b2:76:aa:93:4c:bb:c3:00:c3:ac:20:17: aa:7a:f0:e7:96:11:a5:c9:e2:d1:bd:ce:cd:dc:bf:4d:a1:cc: bb:71:e9:e6:72:d3:4a:45:e1:bc:78:ce:ed:76:f9:7c:de:3d: 53:18:d0:e7:51:c4:7f:37:c0:43:d6:e9:1d:bc:2c:94:8a:e9: 65:60:cd:06:53:91:bb:41:fc:87:ff:92:be:7f:62:14:77:7e: 5e:90:d3:f3:5a:af:25:9f:12:d3:42:39:8d:9a:47:54:a5:37: c6:31:30:6c:94:da:92:60:b0:44:7b:0a:11:14:fb:c1:98:69: c1:c0:cd:a1:d0:ba:c1:2b:f5:ab:71:fd:79:22:76:cb:2d:a1: 1e:bc:8d:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTyrrPObv9ZU38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk ZmQzOTdkYTAtMTE0My00YTJiLWEwOTAtZGJmMzMzYjZmMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/pP6QKLsKabTa7T3pRUSN/YvWLEZYh0oe27 wRmc9PhS4UdBoEP7/thiyjDiuHIHhzakIYxRY9fzZYRMVvv2o6ncTvWXDGJ5W5UI S/s5Ehh7QPp4f4kqGjDa3SkItPx6U9yK5i+FvVN7gKp7ZdTap/pic2u2VNx8hr7P Y2WWdcNJlR4pjQ3yBT1DBVRd2u96L4u+a1XhO23Api6oTyR5lTFjXnJXHGD6BFLp VW5aO+ZOR6B1aWBIu0kd+eY+cxV0xGCEsmQSKzBL/D04ykE/f+JhY4lctwJZ0Pi8 okfnDLIA+pW2eSVM8HYb5C9+STzGs5jecSa0wbXonx/I+7rnxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP43hTV0hunQhBBd5q+wlc4BZcF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGFjMGE5ZWYtNjY1ZS0z MjRjLWI3MGQtZTU2ZjViZDNhOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqzjNlCa1tdE0pMffiIVZq1SZtB0audRcWJ0C0FwG2xneNMgvWWR0rg VlZVoZwSdAkRSMVcqXFhnMEBk6NoFX5rWGIPEQbVaov5PcIrAunO5xO4e69DlO/d 2ALXR+3VyWxAwmthe+Y4Q6+jD3uZJMx8nLJ2qpNMu8MAw6wgF6p68OeWEaXJ4tG9 zs3cv02hzLtx6eZy00pF4bx4zu12+XzePVMY0OdRxH83wEPW6R28LJSK6WVgzQZT kbtB/If/kr5/YhR3fl6Q0/NaryWfEtNCOY2aR1SlN8YxMGyU2pJgsER7ChEU+8GY acHAzaHQusEr9atx/XkidsstoR68jTM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:59 2025 by rpki-client