$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0cbe70e0-5696-393a-9fc7-73ad4f3a0fcc.roa File: 0cbe70e0-5696-393a-9fc7-73ad4f3a0fcc.roa (raw, json) Hash identifier: GHy/oYNUdDXcACebNZfEQClBSz5hC9tfBMY2/xLYG8M= Subject key identifier: 48:C7:C6:09:F2:6C:54:00:45:38:DA:D5:B3:C9:6C:45:9E:63:56:44 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848960B4E64191481D8311A6D80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0cbe70e0-5696-393a-9fc7-73ad4f3a0fcc.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 202 IP address blocks: 20.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:4e:64:19:14:81:d8:31:1a:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=022f796d-e5cb-456c-8d8c-87e4e6984b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:5d:c5:3a:91:1e:26:77:76:69:93:54:99: 6a:8a:84:63:6e:c6:bc:30:ff:52:2e:f0:ba:ee:d6: e6:8f:31:c6:27:b2:95:46:7f:04:05:06:86:9a:12: ad:6a:84:c6:ea:fb:4e:dd:3f:d7:f0:f8:99:2e:a4: 09:5c:ce:12:15:73:0f:74:eb:58:32:64:f1:4b:b7: f7:1e:d0:18:03:87:f6:da:1d:bb:dc:6c:1c:4e:2f: a5:e1:3b:88:be:4c:89:0e:f9:18:1a:be:ce:4a:e4: 88:43:2a:54:22:9c:38:cb:0b:ac:0b:2d:a5:bf:e6: 9a:23:38:13:71:06:37:41:6f:01:99:c1:1f:86:6b: 27:e4:75:d1:1e:34:8d:11:f7:0f:3c:02:35:a8:b2: 5d:6e:3d:ae:27:b5:ff:91:4e:8f:f0:3b:11:1d:68: 01:8d:9e:c7:33:f9:a4:13:6c:bb:a6:ff:67:d3:79: 59:53:c8:50:b0:9d:2c:c8:b7:ec:da:de:69:d3:ee: 5b:8f:64:02:d1:84:2c:d1:2f:f0:9e:5f:c5:b7:bf: 94:06:bf:a3:66:b9:e5:f4:73:db:96:04:b8:87:73: 38:4e:0f:1f:5d:5d:70:aa:02:8c:d5:f8:b5:37:f3: 90:1b:f8:d3:2f:c6:53:89:95:80:02:bd:7e:06:01: 71:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C7:C6:09:F2:6C:54:00:45:38:DA:D5:B3:C9:6C:45:9E:63:56:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0cbe70e0-5696-393a-9fc7-73ad4f3a0fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f2:01:7a:4e:3d:ee:a7:89:b9:58:af:e8:70:a6:60:34:50: e2:4f:1d:cf:22:7d:61:4b:e6:a4:00:f2:42:a1:68:ad:49:df: 63:eb:7c:67:4f:62:88:39:d7:3d:f8:7a:f3:21:93:1d:c7:20: 61:31:31:71:de:2a:f8:17:fd:35:5b:ab:e3:c1:0b:24:a3:3c: e0:05:0b:ff:e4:bf:df:ba:e5:7a:e9:ba:4b:26:24:11:f0:c6: 50:69:d7:46:ea:ed:57:22:b7:48:f6:95:46:08:52:dd:72:74: 85:ad:97:83:e9:32:7c:5e:2d:91:02:d1:b4:e3:a4:6a:1c:eb: 8d:e6:7b:2c:86:19:b0:84:37:b1:db:64:f6:42:e5:4e:8b:ba: cc:31:79:51:97:f0:43:42:2d:bf:19:84:97:ed:50:24:bc:2d: 81:a8:cf:b6:bb:61:bd:48:de:bd:cf:c9:a1:c3:0e:49:3e:39: 67:96:2a:ba:47:a9:84:bb:d7:d9:93:da:80:0f:45:84:9b:f8: 3c:6f:a8:dc:00:6b:58:3e:86:d5:ba:c1:90:11:4a:3f:20:0d: 79:9e:34:56:a6:d8:14:97:cb:d5:29:71:c0:c5:17:f2:ee:54: 33:0a:b9:19:f5:d9:43:a3:08:62:c4:5b:5b:90:b0:54:09:7f: ba:f2:cf:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC05kGRSB2DEabYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk MDIyZjc5NmQtZTVjYi00NTZjLThkOGMtODdlNGU2OTg0YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP5dxTqRHiZ3dmmTVJlqioRjbsa8MP9SLvC6 7tbmjzHGJ7KVRn8EBQaGmhKtaoTG6vtO3T/X8PiZLqQJXM4SFXMPdOtYMmTxS7f3 HtAYA4f22h273GwcTi+l4TuIvkyJDvkYGr7OSuSIQypUIpw4ywusCy2lv+aaIzgT cQY3QW8BmcEfhmsn5HXRHjSNEfcPPAI1qLJdbj2uJ7X/kU6P8DsRHWgBjZ7HM/mk E2y7pv9n03lZU8hQsJ0syLfs2t5p0+5bj2QC0YQs0S/wnl/Ft7+UBr+jZrnl9HPb lgS4h3M4Tg8fXV1wqgKM1fi1N/OQG/jTL8ZTiZWAAr1+BgFxiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjHxgnybFQARTja1bPJbEWeY1ZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGNiZTcwZTAtNTY5Ni0z OTNhLTlmYzctNzNhZDRmM2EwZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTyAXpOPe6niblYr+hwpmA0UOJPHc8ifWFL5qQA8kKhaK1J32PrfGdP Yog51z34evMhkx3HIGExMXHeKvgX/TVbq+PBCySjPOAFC//kv9+65XrpuksmJBHw xlBp10bq7Vcit0j2lUYIUt1ydIWtl4PpMnxeLZEC0bTjpGoc643meyyGGbCEN7Hb ZPZC5U6LuswxeVGX8ENCLb8ZhJftUCS8LYGoz7a7Yb1I3r3PyaHDDkk+OWeWKrpH qYS719mT2oAPRYSb+DxvqNwAa1g+htW6wZARSj8gDXmeNFam2BSXy9UpccDFF/Lu VDMKuRn12UOjCGLEW1uQsFQJf7ryz+U= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:05 2025 by rpki-client