$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/14492d73-bb4b-3884-90c9-534d3264bff4.roa File: 14492d73-bb4b-3884-90c9-534d3264bff4.roa (raw, json) Hash identifier: mc1e7mg319qd+FgGzEPDjHKk/ZXtWsNBJAT3gfrkL3g= Subject key identifier: 02:7D:8E:2D:21:D9:16:D8:52:14:65:1C:2F:BF:9D:6B:23:63:23:A5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858481705108E542FDBD9A94E1280 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/14492d73-bb4b-3884-90c9-534d3264bff4.roa Signing time: Wed 04 Dec 2024 02:00:39 +0000 ROA not before: Wed 04 Dec 2024 02:00:39 +0000 ROA not after: Tue 04 Mar 2025 02:00:39 +0000 asID: 3356 IP address blocks: 20.134.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:17:05:10:8e:54:2f:db:d9:a9:4e:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 4 02:00:39 2024 GMT Not After : Mar 4 02:00:39 2025 GMT Subject: CN=31d6d2d7-45e6-44dc-9190-4abcaae39f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:f9:6f:46:8f:a5:58:63:30:8c:7b:68:59: e7:a0:61:80:4b:ad:f6:7c:bc:cc:ba:12:b8:e5:57: fa:8c:59:94:35:ce:fa:15:ad:3d:8b:7a:de:c7:e2: 99:79:d2:78:a7:24:2b:8b:cb:7a:40:16:79:e4:85: 1a:ce:be:3a:ba:77:62:e1:1c:f1:83:e4:55:b1:2e: d1:00:78:d7:dc:9a:da:6a:ed:b5:8c:54:2b:51:b5: e2:df:48:bd:34:22:cb:d7:f3:ef:53:4f:45:f4:b8: ad:cf:a4:6b:ae:ce:5f:05:bb:8d:4e:82:f8:54:00: cb:97:7c:57:7d:34:e5:39:26:c9:13:de:46:ed:c3: c5:51:26:f2:0a:30:46:df:b5:d4:3a:00:16:8b:80: 0c:13:19:6e:e0:f6:54:0d:2f:c6:05:d2:c7:17:38: 42:f5:2c:08:e1:6f:18:c3:d2:e3:7a:65:7d:c6:1b: 82:75:bd:ab:b8:eb:3b:73:18:dd:f8:f4:54:e8:2c: 49:de:d3:ec:61:93:0c:de:67:d6:0d:7b:f2:8d:15: 51:6d:c9:73:84:08:96:25:6e:5b:a9:b1:6c:16:f8: d1:71:9d:d9:30:1d:c1:da:95:13:a9:6d:03:67:60: 56:bd:af:04:b4:60:f8:85:27:29:58:18:75:ed:16: ca:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7D:8E:2D:21:D9:16:D8:52:14:65:1C:2F:BF:9D:6B:23:63:23:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/14492d73-bb4b-3884-90c9-534d3264bff4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8a:63:04:73:c9:b4:a0:a5:fb:3c:0b:85:0e:31:e8:67:29: 58:27:0d:1e:53:27:b5:ca:80:1f:f0:81:cc:44:ab:cf:ca:e7: 13:cd:ee:10:39:fa:59:3a:83:29:b2:39:19:fe:bc:3f:96:ad: 79:77:2c:8a:c4:d7:71:74:f8:81:af:fe:ae:f5:1e:40:e8:0f: 30:a4:6a:21:d9:65:6b:15:8c:72:92:b5:f3:dd:86:4a:34:44: 28:54:07:be:95:ae:0a:55:df:ee:03:94:60:25:be:a3:ae:61: dc:a0:80:3b:6d:d9:7d:55:ad:95:6a:e7:ee:cf:1e:44:10:15: 90:84:26:20:c3:75:6a:eb:fc:16:b6:fa:ba:39:0b:d9:ab:96: eb:14:dc:96:90:a0:82:f4:ba:b8:6e:13:05:ef:26:e8:f0:85: cb:36:d6:5c:3d:97:6f:88:04:ed:20:d9:9a:d3:09:ef:c6:e0: 2f:98:df:48:7c:63:23:e8:69:ff:75:21:3f:11:d0:04:fb:b5: b6:12:bd:75:d2:5c:c6:af:2d:cd:58:c1:ab:a9:23:1c:f2:43: ca:52:c0:ce:1f:be:b8:a2:36:59:ba:58:0b:82:7b:d5:82:20: 1c:43:fb:f7:e1:48:ad:9d:22:e2:a7:d9:84:1d:b7:33:07:5c: fe:0e:49:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXBRCOVC/b2alOEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIwNDAyMDAzOVoXDTI1MDMwNDAyMDAzOVowLzEtMCsGA1UEAxMk MzFkNmQyZDctNDVlNi00NGRjLTkxOTAtNGFiY2FhZTM5ZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscv5b0aPpVhjMIx7aFnnoGGAS632fLzMuhK4 5Vf6jFmUNc76Fa09i3rex+KZedJ4pyQri8t6QBZ55IUazr46undi4Rzxg+RVsS7R AHjX3Jraau21jFQrUbXi30i9NCLL1/PvU09F9Litz6Rrrs5fBbuNToL4VADLl3xX fTTlOSbJE95G7cPFUSbyCjBG37XUOgAWi4AMExlu4PZUDS/GBdLHFzhC9SwI4W8Y w9LjemV9xhuCdb2ruOs7cxjd+PRU6CxJ3tPsYZMM3mfWDXvyjRVRbclzhAiWJW5b qbFsFvjRcZ3ZMB3B2pUTqW0DZ2BWva8EtGD4hScpWBh17RbKNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJ9ji0h2RbYUhRlHC+/nWsjYyOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTQ0OTJkNzMtYmI0Yi0z ODg0LTkwYzktNTM0ZDMyNjRiZmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaKYwRzybSgpfs8C4UOMehnKVgnDR5TJ7XKgB/wgcxEq8/K5xPN7hA5 +lk6gymyORn+vD+WrXl3LIrE13F0+IGv/q71HkDoDzCkaiHZZWsVjHKStfPdhko0 RChUB76VrgpV3+4DlGAlvqOuYdyggDtt2X1VrZVq5+7PHkQQFZCEJiDDdWrr/Ba2 +ro5C9mrlusU3JaQoIL0urhuEwXvJujwhcs21lw9l2+IBO0g2ZrTCe/G4C+Y30h8 YyPoaf91IT8R0AT7tbYSvXXSXMavLc1YwaupIxzyQ8pSwM4fvriiNlm6WAuCe9WC IBxD+/fhSK2dIuKn2YQdtzMHXP4OSVk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:22 2025 by rpki-client