$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa File: 0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa (raw, json) Hash identifier: VpUJCMqpx7heQ1g3E3PB2Sc3dDBeneNIAIUN1iV18rE= Subject key identifier: EC:C4:D9:C0:2D:4D:81:99:38:55:33:2C:EF:F0:44:EA:EC:6C:A7:D3 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848B35B6C2F6DB097F163756800 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 202 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6c:2f:6d:b0:97:f1:63:75:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=481cec80-29b1-4b20-84c8-05c336ab3502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6d:63:17:34:4f:d9:5a:8b:33:3c:cb:95:ce: da:00:30:97:cc:cf:21:68:f9:2f:d4:af:a7:15:29: 6e:4f:ca:28:1f:af:92:33:68:11:a3:db:21:82:b0: 31:4a:34:d9:64:e6:57:97:46:45:76:f1:03:b6:93: 1d:50:9b:76:80:0d:83:e8:fb:66:93:c6:e2:43:fb: 9b:a7:82:5d:93:44:0a:1d:7d:b6:d5:85:62:73:c5: 06:9d:dd:cb:77:c0:cc:b1:cc:14:4a:85:4e:91:90: 4f:47:37:0f:8c:d2:bb:f0:35:9c:3f:a1:6f:5a:7a: 1f:e7:7a:9a:21:86:c5:16:55:ca:7a:08:ac:a6:f1: 30:aa:09:1e:49:99:62:74:4f:35:ab:2b:5d:43:4e: f3:54:95:1e:d9:dc:fd:44:41:1f:9a:07:b4:19:68: aa:28:7c:52:3e:93:b3:59:96:30:e8:a1:a2:0c:2a: ed:81:40:ef:3a:0f:13:c7:f1:63:72:7a:bb:da:5c: bf:aa:1c:87:21:5e:07:b5:3b:b4:16:29:52:e8:16: 7e:29:a6:7a:51:26:3d:64:3e:2f:b4:d6:ae:90:c1: 26:4d:cc:45:bf:08:4c:0d:64:e0:a9:54:d4:2a:07: f7:6f:51:c7:a9:32:b3:c1:a4:cb:ce:e5:d1:b2:5b: 5e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C4:D9:C0:2D:4D:81:99:38:55:33:2C:EF:F0:44:EA:EC:6C:A7:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c3:bf:c1:e5:92:10:d3:82:b8:e7:01:4e:94:ab:be:d5:6d: 89:62:15:3f:82:06:48:bb:bc:f6:94:73:62:70:c8:85:24:33: 68:b4:f0:93:70:40:22:b5:c2:8b:92:5d:a0:22:5f:ee:cd:aa: d2:35:09:0c:00:82:79:01:96:73:d5:01:fc:73:f8:00:ee:d8: ff:71:93:d0:6c:c0:3b:91:ad:6a:42:ce:f4:05:3a:cc:ba:4d: 58:02:18:49:76:8e:6e:ad:22:bd:a9:cc:17:34:e8:c3:6c:22: 03:25:d3:c6:f3:28:43:33:6a:27:57:0c:e6:58:d5:1c:c9:e0: 7a:88:ac:49:92:4d:e1:1a:39:15:15:8c:a5:77:ae:6e:ba:5e: 1f:20:02:30:c0:97:f9:62:e1:38:96:37:db:93:40:a9:9e:fe: c4:34:e9:ca:6a:36:ba:7f:f5:f6:bb:63:15:05:e6:e9:58:01: b6:31:46:da:b9:be:ec:89:01:72:05:40:92:5f:e6:34:40:a8: 28:06:07:3d:dd:87:19:51:c8:fc:b6:a2:f2:b7:6f:65:4a:f3: 29:af:08:71:b8:99:45:14:5e:a9:00:8d:38:01:29:f8:a4:2d: 35:13:52:cb:c1:96:09:26:94:ec:57:68:f1:34:a8:7b:cd:60: f5:b4:00:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2wvbbCX8WN1aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk NDgxY2VjODAtMjliMS00YjIwLTg0YzgtMDVjMzM2YWIzNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG1jFzRP2VqLMzzLlc7aADCXzM8haPkv1K+n FSluT8ooH6+SM2gRo9shgrAxSjTZZOZXl0ZFdvEDtpMdUJt2gA2D6Ptmk8biQ/ub p4Jdk0QKHX221YVic8UGnd3Ld8DMscwUSoVOkZBPRzcPjNK78DWcP6FvWnof53qa IYbFFlXKegispvEwqgkeSZlidE81qytdQ07zVJUe2dz9REEfmge0GWiqKHxSPpOz WZYw6KGiDCrtgUDvOg8Tx/Fjcnq72ly/qhyHIV4HtTu0FilS6BZ+KaZ6USY9ZD4v tNaukMEmTcxFvwhMDWTgqVTUKgf3b1HHqTKzwaTLzuXRslteMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzE2cAtTYGZOFUzLO/wROrsbKfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGI1YjVmMDMtODFmMy0z YzgzLThiZWYtNDM1MDNkMjFjYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvDv8HlkhDTgrjnAU6Uq77VbYliFT+CBki7vPaUc2JwyIUkM2i08JNw QCK1wouSXaAiX+7NqtI1CQwAgnkBlnPVAfxz+ADu2P9xk9BswDuRrWpCzvQFOsy6 TVgCGEl2jm6tIr2pzBc06MNsIgMl08bzKEMzaidXDOZY1RzJ4HqIrEmSTeEaORUV jKV3rm66Xh8gAjDAl/li4TiWN9uTQKme/sQ06cpqNrp/9fa7YxUF5ulYAbYxRtq5 vuyJAXIFQJJf5jRAqCgGBz3dhxlRyPy2ovK3b2VK8ymvCHG4mUUUXqkAjTgBKfik LTUTUsvBlgkmlOxXaPE0qHvNYPW0AGo= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:09 2025 by rpki-client