$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/139461b3-4ec1-33e8-a7d7-ec786d8e1d4f.roa File: 139461b3-4ec1-33e8-a7d7-ec786d8e1d4f.roa (raw, json) Hash identifier: Z1in9ZlzUe1r6yOLbryY+3OSRbZcJqXXhaRPMuaZfB4= Subject key identifier: B1:3F:AA:FB:9D:4C:84:7D:52:2C:5C:57:F3:DB:FA:81:94:C9:75:6D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D947ED4A66DE5AF809679380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/139461b3-4ec1-33e8-a7d7-ec786d8e1d4f.roa Signing time: Tue 11 Feb 2025 16:02:13 +0000 ROA not before: Tue 11 Feb 2025 16:02:13 +0000 ROA not after: Mon 12 May 2025 15:02:13 +0000 asID: 3356 IP address blocks: 20.149.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:47:ed:4a:66:de:5a:f8:09:67:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 16:02:13 2025 GMT Not After : May 12 15:02:13 2025 GMT Subject: CN=38fe9dd5-309e-4381-9a3b-858842cedf2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2e:38:4c:7a:19:72:c2:e8:49:32:05:a6:21: 18:19:d6:a4:c1:a8:bd:06:19:49:54:85:d5:2e:87: b6:de:95:ef:db:44:6d:18:60:cb:68:73:21:d3:95: 28:e1:36:7c:79:e7:75:5c:f6:97:bd:51:35:ce:ad: ba:18:4a:cc:a2:99:59:66:4b:07:39:d0:3a:06:ee: 3d:b4:88:fb:77:6f:b6:26:93:03:aa:c1:12:ff:37: 95:eb:bb:2a:33:62:e2:26:b2:a2:1b:73:30:a6:75: 31:c6:32:9d:21:52:c7:a1:db:5e:0e:0a:84:ac:fe: a9:65:61:b2:7c:94:ee:08:62:b7:48:4f:1b:7e:aa: 92:23:03:bd:c1:a1:a9:f2:d3:2c:46:2e:97:e3:37: 3d:50:05:05:fb:af:9a:9b:f2:23:fc:34:d6:0c:7c: fb:0f:89:90:61:3d:a4:0b:7a:a4:75:4b:7b:e0:d9: 35:bf:7f:4b:c0:f3:ed:27:03:03:0c:7f:95:bf:71: f3:9d:06:ec:99:e7:63:97:d0:e5:fc:dd:64:16:3c: bf:32:6f:fa:9d:b9:12:15:f4:08:39:92:97:9f:76: fe:f4:1b:85:13:a1:2c:f7:36:76:0d:08:9a:2c:80: 64:a9:37:78:61:e0:89:e1:47:86:5b:70:55:8c:1c: 51:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3F:AA:FB:9D:4C:84:7D:52:2C:5C:57:F3:DB:FA:81:94:C9:75:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/139461b3-4ec1-33e8-a7d7-ec786d8e1d4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:42:7d:5d:ed:d1:1c:73:c4:58:50:a4:3c:6e:d2:d1:32:5c: ad:62:18:6b:42:48:8f:17:97:17:c7:5c:29:26:5c:97:e3:81: 96:a6:b8:53:36:b0:f2:d7:6d:4b:d9:dd:5c:5d:35:ef:78:e6: a4:57:23:9f:f3:0f:e8:d8:4c:fa:43:45:54:cb:81:2d:e9:a2: 20:e7:c7:0f:7d:df:0a:1f:91:d5:20:8d:3a:01:02:86:f6:e4: 0c:99:90:b5:e1:1f:02:56:dd:3f:6f:dc:ae:76:ed:83:88:f3: 06:8d:7e:a5:a6:a4:80:06:97:a0:53:43:6e:c5:b3:97:13:3d: 5b:e7:ac:39:1d:71:50:98:1d:d7:1a:0c:d0:f7:a9:53:67:ed: da:60:e1:53:13:4e:5e:b3:2a:06:20:db:b8:2b:38:3d:12:0b: 1f:9d:b0:e5:49:b8:fb:de:59:22:e0:26:b0:1a:2d:bc:9f:30: b8:2d:bf:c0:5a:bc:95:5b:5e:43:dc:db:37:9e:de:67:aa:73: 9e:88:c9:f3:77:57:67:ab:f0:2f:89:db:35:57:98:b3:81:5e: ba:53:65:67:03:90:66:2d:40:30:72:2a:94:82:3a:61:2c:cb: ef:1f:ff:95:d9:bd:7f:db:8b:19:20:8b:57:a2:84:0e:78:99: 97:93:fb:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZR+1KZt5a+Alnk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE2MDIxM1oXDTI1MDUxMjE1MDIxM1owLzEtMCsGA1UEAxMk MzhmZTlkZDUtMzA5ZS00MzgxLTlhM2ItODU4ODQyY2VkZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC44THoZcsLoSTIFpiEYGdakwai9BhlJVIXV Loe23pXv20RtGGDLaHMh05Uo4TZ8eed1XPaXvVE1zq26GErMoplZZksHOdA6Bu49 tIj7d2+2JpMDqsES/zeV67sqM2LiJrKiG3MwpnUxxjKdIVLHodteDgqErP6pZWGy fJTuCGK3SE8bfqqSIwO9waGp8tMsRi6X4zc9UAUF+6+am/Ij/DTWDHz7D4mQYT2k C3qkdUt74Nk1v39LwPPtJwMDDH+Vv3HznQbsmedjl9Dl/N1kFjy/Mm/6nbkSFfQI OZKXn3b+9BuFE6Es9zZ2DQiaLIBkqTd4YeCJ4UeGW3BVjBxRUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE/qvudTIR9UixcV/Pb+oGUyXVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTM5NDYxYjMtNGVjMS0z M2U4LWE3ZDctZWM3ODZkOGUxZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpCfV3t0RxzxFhQpDxu0tEyXK1iGGtCSI8XlxfHXCkmXJfjgZamuFM2 sPLXbUvZ3VxdNe945qRXI5/zD+jYTPpDRVTLgS3poiDnxw993wofkdUgjToBAob2 5AyZkLXhHwJW3T9v3K527YOI8waNfqWmpIAGl6BTQ27Fs5cTPVvnrDkdcVCYHdca DND3qVNn7dpg4VMTTl6zKgYg27grOD0SCx+dsOVJuPveWSLgJrAaLbyfMLgtv8Ba vJVbXkPc2zee3meqc56IyfN3V2er8C+J2zVXmLOBXrpTZWcDkGYtQDByKpSCOmEs y+8f/5XZvX/bixkgi1eihA54mZeT+xY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:30 2025 by rpki-client