$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/14492d73-bb4b-3884-90c9-534d3264bff4.roa File: 14492d73-bb4b-3884-90c9-534d3264bff4.roa (raw, json) Hash identifier: Kb4xPwXCFFhR9QtXHXBLh0Ah0N9xdJTrYAqB5dJ8kUs= Subject key identifier: F5:CB:31:32:24:CF:E2:1B:32:5F:05:A6:55:55:A9:3A:D2:48:DC:EE Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13C6F8411D2ECA27A6C80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/14492d73-bb4b-3884-90c9-534d3264bff4.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.134.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3c:6f:84:11:d2:ec:a2:7a:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=aa0833e3-7ce1-4d37-9688-6b5097cd3f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:85:02:d6:cb:81:6c:83:9a:bd:20:92:22:07: a5:a9:c0:4f:94:2c:35:c6:91:b0:3a:50:d3:30:d9: 4f:12:ed:32:09:df:f1:e7:16:93:1a:06:b5:60:17: a5:53:0a:c0:18:02:c2:2e:37:44:c8:68:d5:5d:30: 3a:38:00:63:11:0d:b3:f7:6a:d2:d2:0a:a9:bf:e2: 90:3c:74:a6:66:9e:8b:20:99:b7:27:14:80:ab:8b: 54:9a:65:d9:67:30:c1:db:e4:4c:b9:20:ff:c9:77: 4f:5c:db:af:4a:cf:5f:4c:57:74:a8:9e:a3:7a:ca: 62:d8:1e:eb:d2:64:4f:ff:a4:6d:1f:e9:7f:43:40: 83:25:7d:fb:95:fb:95:c8:17:00:bf:eb:aa:2c:51: b9:28:e8:64:62:08:73:f2:e4:9b:04:85:29:3b:90: 32:28:78:e8:39:0c:4d:90:10:3e:76:51:59:2d:3b: 68:6e:3e:02:7e:d7:eb:31:82:2a:cb:bf:f1:fb:d7: 0a:36:27:f3:43:53:5a:10:21:78:c2:cd:dc:f0:9b: fa:b4:75:88:ac:58:c8:f4:3f:79:2c:7d:76:b6:12: f9:a2:d3:c3:a9:81:89:da:85:3d:d5:c9:52:11:bb: 28:a3:83:b6:2e:2e:71:54:d0:ba:af:ad:24:70:2a: 4e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CB:31:32:24:CF:E2:1B:32:5F:05:A6:55:55:A9:3A:D2:48:DC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/14492d73-bb4b-3884-90c9-534d3264bff4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:6b:de:3b:c4:c0:7b:a2:59:9d:3b:3c:87:7b:af:50:a8:19: c4:68:11:89:0d:08:c7:3f:19:02:07:5d:95:dc:f0:8a:10:3f: f7:4d:15:f1:e0:22:c4:63:4f:31:59:ce:38:c9:88:f5:87:4b: a3:2f:d5:61:35:ae:9b:6f:90:79:0c:08:8c:68:88:e6:11:7b: 3f:20:00:97:aa:cf:11:18:b1:41:94:2b:23:18:f7:bc:b9:e3: 87:14:06:cd:a7:bb:24:66:bd:1f:18:e4:94:bf:31:1d:1f:5f: 34:35:37:ec:58:64:4e:21:a5:a9:30:6c:34:38:4b:f3:f3:bd: 53:c0:2f:e8:48:39:4a:97:b1:bd:b5:39:40:a4:d7:14:2c:16: fc:97:8d:c5:06:1b:4f:71:8c:ff:3b:e6:97:ca:c0:fb:dc:3b: 6d:50:5a:1c:23:d8:41:10:6a:56:66:7c:ed:86:76:26:9e:38: 47:ee:24:ca:4b:ad:5b:a8:80:41:6c:7d:59:c2:47:c6:10:5a: 81:68:dd:54:00:f9:a2:19:30:5a:fd:e6:eb:94:f2:cd:0c:f3: 0a:61:d8:af:ab:0c:ea:0a:ed:92:28:9a:4b:31:a9:2a:6c:6d: 5a:58:a4:f1:14:35:35:3f:09:6a:46:a8:1a:f0:1e:e4:8e:2f: 2d:c0:43:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTxvhBHS7KJ6bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk YWEwODMzZTMtN2NlMS00ZDM3LTk2ODgtNmI1MDk3Y2QzZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4UC1suBbIOavSCSIgelqcBPlCw1xpGwOlDT MNlPEu0yCd/x5xaTGga1YBelUwrAGALCLjdEyGjVXTA6OABjEQ2z92rS0gqpv+KQ PHSmZp6LIJm3JxSAq4tUmmXZZzDB2+RMuSD/yXdPXNuvSs9fTFd0qJ6jespi2B7r 0mRP/6RtH+l/Q0CDJX37lfuVyBcAv+uqLFG5KOhkYghz8uSbBIUpO5AyKHjoOQxN kBA+dlFZLTtobj4CftfrMYIqy7/x+9cKNifzQ1NaECF4ws3c8Jv6tHWIrFjI9D95 LH12thL5otPDqYGJ2oU91clSEbsoo4O2Li5xVNC6r60kcCpOQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXLMTIkz+IbMl8FplVVqTrSSNzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTQ0OTJkNzMtYmI0Yi0z ODg0LTkwYzktNTM0ZDMyNjRiZmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBr3jvEwHuiWZ07PId7r1CoGcRoEYkNCMc/GQIHXZXc8IoQP/dNFfHg IsRjTzFZzjjJiPWHS6Mv1WE1rptvkHkMCIxoiOYRez8gAJeqzxEYsUGUKyMY97y5 44cUBs2nuyRmvR8Y5JS/MR0fXzQ1N+xYZE4hpakwbDQ4S/PzvVPAL+hIOUqXsb21 OUCk1xQsFvyXjcUGG09xjP875pfKwPvcO21QWhwj2EEQalZmfO2GdiaeOEfuJMpL rVuogEFsfVnCR8YQWoFo3VQA+aIZMFr95uuU8s0M8wph2K+rDOoK7ZIomksxqSps bVpYpPEUNTU/CWpGqBrwHuSOLy3AQ+A= -----END CERTIFICATE-----Generated at Fri Mar 14 08:49:39 2025 by rpki-client