$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/196e1976-14cd-3c8e-933a-dac31649a3e1.roa File: 196e1976-14cd-3c8e-933a-dac31649a3e1.roa (raw, json) Hash identifier: N5Xv+oReFJzdZAMf05TxTziOM3dC5YLHxP+O5Wn7V1I= Subject key identifier: 27:EB:67:BB:EF:4A:79:5D:8F:A6:31:1B:9E:27:7B:FF:06:7E:E0:60 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848960B4F26B0A2704FD76DA680 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/196e1976-14cd-3c8e-933a-dac31649a3e1.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 203 IP address blocks: 20.137.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:4f:26:b0:a2:70:4f:d7:6d:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=e5ad2cf5-40d5-4ff7-a71d-c0fbff7b8818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:63:b2:bd:ec:b1:b6:eb:40:50:0e:e3:32: d8:59:a2:e6:8c:fc:df:43:88:fa:69:3e:b2:e5:84: a7:d3:00:7e:7f:d8:0e:30:46:eb:e9:a2:04:0d:95: 28:9a:04:d5:6f:64:de:4e:12:7f:2e:64:37:b3:da: 02:ec:d0:d6:40:c5:07:0f:b4:f7:80:71:0d:14:b2: db:c4:e5:eb:a5:db:e1:1d:63:a5:73:a9:ca:c6:55: bd:53:e6:35:5b:da:ce:52:34:63:40:3f:0e:c5:cd: b4:28:bd:7c:b4:e4:57:1d:cc:64:e8:6c:29:48:aa: 6e:14:ca:c8:b0:3e:d3:01:a7:f0:aa:81:5b:68:e8: 69:7a:5e:62:e6:6d:99:6a:34:3c:1e:66:6d:05:c9: 04:7d:8f:53:13:e6:8a:fa:75:93:ba:3e:d2:3d:ac: a4:d1:00:40:d0:8b:90:10:bb:c6:d4:16:2c:07:c6: d7:e5:24:78:0c:9c:37:bb:47:38:ea:40:5e:a3:2d: 8f:74:6f:e4:fd:da:ae:f1:d6:0f:57:a8:ec:51:32: 3a:60:cb:c3:67:a3:76:47:b1:37:c8:f5:ad:98:23: c4:de:2c:e8:d4:25:3f:43:49:29:ab:82:00:f5:3f: c7:bb:91:52:c9:b0:82:dd:87:7a:a0:a1:76:cc:00: 80:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EB:67:BB:EF:4A:79:5D:8F:A6:31:1B:9E:27:7B:FF:06:7E:E0:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/196e1976-14cd-3c8e-933a-dac31649a3e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ba:3e:ee:89:08:9f:f2:70:2e:2a:2b:84:91:5a:4c:b6:5d: 77:1c:92:f6:1b:69:76:85:24:d0:45:23:04:01:f5:bc:1e:27: 60:ec:18:83:33:36:80:6e:41:be:a5:ee:81:62:d1:0a:a1:f8: 88:e9:25:ca:2c:22:5f:10:4f:84:e3:f7:eb:20:c1:9e:83:eb: 52:75:f9:31:81:21:83:5c:6c:f5:58:13:20:1b:53:24:5e:a1: 5d:e1:af:ad:e3:71:82:be:6f:7b:92:6b:d8:ed:b0:30:db:e1: 5b:66:dc:88:8a:f3:74:44:21:45:f1:31:35:a9:00:de:2c:9a: 37:be:9d:04:f9:eb:8c:61:65:f2:50:57:25:8e:11:e7:13:c5: a1:e4:4e:f4:c2:a7:0d:64:57:cc:0a:a9:3d:28:95:97:fc:03: fc:da:52:cf:ae:9b:bc:14:f0:26:fc:a8:14:51:31:1d:c7:a8: 9d:b1:53:34:a6:8e:47:0b:c4:c7:f7:5a:70:75:3c:89:65:48: 2c:56:d0:b7:b0:5d:c3:bb:db:6a:dd:00:ec:9f:8f:79:21:c8: 08:64:96:81:fe:0e:d5:61:3e:d7:cc:f1:c3:f7:5e:ef:ee:15: c1:d5:ea:55:29:2c:11:4b:fb:2d:7a:f4:aa:12:bd:1e:57:f3: 37:e3:62:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC08msKJwT9dtpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk ZTVhZDJjZjUtNDBkNS00ZmY3LWE3MWQtYzBmYmZmN2I4ODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmNjsr3ssbbrQFAO4zLYWaLmjPzfQ4j6aT6y 5YSn0wB+f9gOMEbr6aIEDZUomgTVb2TeThJ/LmQ3s9oC7NDWQMUHD7T3gHENFLLb xOXrpdvhHWOlc6nKxlW9U+Y1W9rOUjRjQD8Oxc20KL18tORXHcxk6GwpSKpuFMrI sD7TAafwqoFbaOhpel5i5m2ZajQ8HmZtBckEfY9TE+aK+nWTuj7SPayk0QBA0IuQ ELvG1BYsB8bX5SR4DJw3u0c46kBeoy2PdG/k/dqu8dYPV6jsUTI6YMvDZ6N2R7E3 yPWtmCPE3izo1CU/Q0kpq4IA9T/Hu5FSybCC3Yd6oKF2zACANwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfrZ7vvSnldj6YxG54ne/8GfuBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTk2ZTE5NzYtMTRjZC0z YzhlLTkzM2EtZGFjMzE2NDlhM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm6Pu6JCJ/ycC4qK4SRWky2XXcckvYbaXaFJNBFIwQB9bweJ2DsGIMz NoBuQb6l7oFi0Qqh+IjpJcosIl8QT4Tj9+sgwZ6D61J1+TGBIYNcbPVYEyAbUyRe oV3hr63jcYK+b3uSa9jtsDDb4Vtm3IiK83REIUXxMTWpAN4smje+nQT564xhZfJQ VyWOEecTxaHkTvTCpw1kV8wKqT0olZf8A/zaUs+um7wU8Cb8qBRRMR3HqJ2xUzSm jkcLxMf3WnB1PIllSCxW0LewXcO722rdAOyfj3khyAhkloH+DtVhPtfM8cP3Xu/u FcHV6lUpLBFL+y169KoSvR5X8zfjYus= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:39 2025 by rpki-client