$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18f19b2b-7308-3927-99da-a7932c313c1a.roa File: 18f19b2b-7308-3927-99da-a7932c313c1a.roa (raw, json) Hash identifier: BmwwBpGhXOKLnOTDDFSngtJ5hw03Axz7S/3WQN4PjMw= Subject key identifier: 12:AA:0A:A3:6F:20:C3:F4:42:82:28:29:DB:AE:FA:68:B6:EC:46:72 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13D1FB395CD47F49FDC00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18f19b2b-7308-3927-99da-a7932c313c1a.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 202 IP address blocks: 20.139.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3d:1f:b3:95:cd:47:f4:9f:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=d6e6149e-c66b-4ae1-90e2-0a4483d0a056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:5f:1b:a7:7e:b0:c1:c4:68:3a:23:87:10: be:8c:a0:e4:c4:2a:c0:06:3b:68:53:1a:a2:11:8e: 74:ec:81:14:74:25:ce:06:46:b6:eb:61:10:00:ca: 38:60:ae:e2:a2:7c:97:21:80:d8:6e:05:80:cb:ef: 5d:b1:e8:96:ec:8b:8e:95:a4:fd:1c:29:f4:16:6b: 03:a9:21:71:9c:6a:a7:d3:90:b0:13:63:cd:a4:23: 2e:0d:e8:11:dd:30:bc:5b:af:c3:8d:65:9e:39:75: fb:a0:30:5e:e1:63:1e:35:9f:a1:59:8a:c2:0c:5d: 17:3c:38:6b:a4:d0:ba:36:5a:71:6f:34:70:fe:98: 07:4c:06:a3:4a:7d:0b:26:dd:de:06:85:0e:3b:e0: 1b:ea:ec:b6:68:c5:0d:f9:25:80:fb:a0:33:7a:79: 14:2e:9a:37:10:04:ba:9c:2c:6b:88:32:4d:0b:50: 27:39:67:d9:6e:37:d2:33:63:2e:c4:32:74:f0:42: ae:07:b3:48:f3:7a:61:db:64:5d:18:92:6c:45:7b: f9:92:5d:9a:30:0f:90:3b:c4:a5:77:bc:44:b2:a5: dd:50:9f:3e:13:84:02:9b:07:0a:a6:c0:78:c2:45: bb:1b:0c:79:ef:70:01:1e:fd:59:09:dd:39:e8:1d: 3b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AA:0A:A3:6F:20:C3:F4:42:82:28:29:DB:AE:FA:68:B6:EC:46:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18f19b2b-7308-3927-99da-a7932c313c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e8:a2:28:89:bc:80:b9:7c:f9:29:67:2f:de:03:b5:3f:0c: 34:cc:64:ac:00:57:e1:39:14:2e:d2:cc:34:a8:42:89:79:a2: 50:29:37:f9:22:2a:44:6c:80:6b:72:95:88:cf:c7:0c:da:0d: 77:ad:d8:49:07:45:ca:f0:27:ce:3d:09:ba:00:d0:48:d0:7e: e9:b0:90:35:70:24:d3:14:1f:ce:b9:a6:60:dd:43:c0:fb:4b: 59:07:44:9d:6c:bd:58:57:f1:10:da:1c:42:c3:30:ec:59:0d: c5:5c:aa:11:48:73:7e:9b:bc:d3:58:1b:01:5e:cb:69:af:b0: 3a:90:13:ff:6e:cd:22:4c:b6:7b:3c:4a:4c:3e:46:bc:bb:b1: d2:35:c1:41:60:50:12:e6:71:ed:a4:94:06:07:ae:18:74:3a: 8d:18:3a:1e:a7:bc:7f:d1:e2:38:31:b3:17:8d:db:8e:66:f1: 8d:f8:bd:2e:a2:b8:ea:f6:b7:f0:3d:d8:83:9f:b1:8e:66:28: 47:e2:8c:a1:f7:39:56:cc:1e:ab:94:a8:9b:8a:42:80:39:e4: 09:b2:29:14:5b:c0:8a:b8:93:46:48:de:e0:d3:12:b9:ca:05: 86:34:1e:ad:ba:08:1c:f6:cc:53:3a:5a:6a:14:1d:87:f7:49: ef:90:aa:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wT0fs5XNR/Sf3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk ZDZlNjE0OWUtYzY2Yi00YWUxLTkwZTItMGE0NDgzZDBhMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4lfG6d+sMHEaDojhxC+jKDkxCrABjtoUxqi EY507IEUdCXOBka262EQAMo4YK7ionyXIYDYbgWAy+9dseiW7IuOlaT9HCn0FmsD qSFxnGqn05CwE2PNpCMuDegR3TC8W6/DjWWeOXX7oDBe4WMeNZ+hWYrCDF0XPDhr pNC6NlpxbzRw/pgHTAajSn0LJt3eBoUOO+Ab6uy2aMUN+SWA+6AzenkULpo3EAS6 nCxriDJNC1AnOWfZbjfSM2MuxDJ08EKuB7NI83ph22RdGJJsRXv5kl2aMA+QO8Sl d7xEsqXdUJ8+E4QCmwcKpsB4wkW7Gwx573ABHv1ZCd056B078wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKqCqNvIMP0QoIoKduu+mi27EZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMThmMTliMmItNzMwOC0z OTI3LTk5ZGEtYTc5MzJjMzEzYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnooiiJvIC5fPkpZy/eA7U/DDTMZKwAV+E5FC7SzDSoQol5olApN/ki KkRsgGtylYjPxwzaDXet2EkHRcrwJ849CboA0EjQfumwkDVwJNMUH865pmDdQ8D7 S1kHRJ1svVhX8RDaHELDMOxZDcVcqhFIc36bvNNYGwFey2mvsDqQE/9uzSJMtns8 Skw+Rry7sdI1wUFgUBLmce2klAYHrhh0Oo0YOh6nvH/R4jgxsxeN245m8Y34vS6i uOr2t/A92IOfsY5mKEfijKH3OVbMHquUqJuKQoA55AmyKRRbwIq4k0ZI3uDTErnK BYY0Hq26CBz2zFM6WmoUHYf3Se+Qqq4= -----END CERTIFICATE-----Generated at Fri Mar 14 13:42:20 2025 by rpki-client