$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219fc05e-aabc-31b2-b3c0-3fa093865751.roa File: 219fc05e-aabc-31b2-b3c0-3fa093865751.roa (raw, json) Hash identifier: jHPN0PW0wsTW319mAamF3HVs/NSJwWocTDgQ05dpMDg= Subject key identifier: E0:C5:2F:F5:6A:DB:DF:C6:F6:CC:C5:3B:BB:9D:5B:A6:F7:33:E6:1A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858484C1015EBC70840F421B6EA80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219fc05e-aabc-31b2-b3c0-3fa093865751.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 202 IP address blocks: 20.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:15:eb:c7:08:40:f4:21:b6:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=b4e8aa83-ba31-4656-85ea-546a4f864c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a2:29:19:1b:5b:bd:48:f0:e1:2a:0a:e5:7f: 27:95:a6:49:fc:fa:63:30:eb:c6:ad:0b:05:8d:2c: ac:f3:50:70:02:dc:3b:68:db:c9:44:cb:ba:09:de: 61:32:a2:b8:2c:c7:59:6d:6a:56:69:f2:8f:66:cb: c7:8e:84:1b:bd:55:27:a9:cc:ab:c3:f4:51:24:f4: 46:16:d2:88:25:ff:35:5f:ba:c1:d1:4c:e8:64:26: 4c:e5:63:ef:c7:81:68:8d:8d:6b:ad:66:17:da:c0: 7c:34:85:b8:91:f1:a4:5f:49:e5:92:50:ec:d9:d3: 58:9e:0a:ed:8f:9a:dd:2f:ca:7b:c1:2b:1c:cc:0d: 61:dd:cd:51:cf:b0:01:bd:b5:7a:10:85:80:76:c2: f0:f6:38:5a:5a:36:cc:a6:37:17:24:dd:07:79:9d: 96:8a:01:6f:85:bb:ce:27:c3:c7:0a:58:40:c0:23: 6d:82:3a:c5:ce:c5:e5:aa:46:97:1a:97:b7:8c:6a: 41:6d:03:a8:44:d3:01:4f:e5:86:d4:96:c5:59:95: 86:be:23:3e:52:af:59:51:e6:27:9a:e2:b5:27:44: 3f:ed:f5:f7:ce:69:33:46:64:1e:bd:e8:c1:4a:bd: 43:2a:ec:74:78:e8:31:b3:e6:2c:22:15:42:36:11: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C5:2F:F5:6A:DB:DF:C6:F6:CC:C5:3B:BB:9D:5B:A6:F7:33:E6:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219fc05e-aabc-31b2-b3c0-3fa093865751.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:22:e2:7c:c6:89:d6:fb:69:7d:4d:a9:fd:14:48:b6:67:85: 77:5c:c4:d5:bf:e6:94:4a:4a:08:8b:ca:86:6d:7d:dd:5b:6a: 66:4c:7b:62:ec:32:03:54:da:78:f9:05:2f:99:98:9d:52:78: 8a:00:1e:28:c3:a6:fd:1d:84:e8:41:08:02:3a:1d:0e:f0:9f: 5b:f6:9e:04:1b:d8:65:63:6c:e0:9b:3e:78:c8:36:aa:78:f8: f4:5b:cf:77:c8:dc:20:8d:8e:d1:85:50:e2:87:54:bf:c8:ad: 19:0d:91:61:cb:ee:90:cc:98:2e:58:26:ee:a9:5a:f9:1c:52: b2:f8:48:38:67:3a:0a:35:2e:7c:84:47:f1:48:82:7b:b6:3c: 9c:a0:04:bc:cc:39:f9:97:f2:04:99:ff:a4:03:be:11:c7:b5: 9f:e5:33:77:d2:5c:01:00:ad:cb:e2:d5:97:ee:b5:bb:fc:d6: 75:a8:39:90:01:33:5d:b5:34:8f:16:3a:24:66:eb:bc:15:33: 2f:de:e1:04:8e:5e:bd:20:f9:69:6d:e0:61:28:59:8c:9c:11: 93:10:29:cd:7a:a1:05:82:b7:c1:52:45:f5:98:56:6c:e5:e2: b7:24:e5:c3:e6:44:5e:85:47:97:3d:b2:92:2d:71:6f:c0:66: 44:b9:f8:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEBXrxwhA9CG26oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk YjRlOGFhODMtYmEzMS00NjU2LTg1ZWEtNTQ2YTRmODY0YzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KIpGRtbvUjw4SoK5X8nlaZJ/PpjMOvGrQsF jSys81BwAtw7aNvJRMu6Cd5hMqK4LMdZbWpWafKPZsvHjoQbvVUnqcyrw/RRJPRG FtKIJf81X7rB0UzoZCZM5WPvx4FojY1rrWYX2sB8NIW4kfGkX0nlklDs2dNYngrt j5rdL8p7wSsczA1h3c1Rz7ABvbV6EIWAdsLw9jhaWjbMpjcXJN0HeZ2WigFvhbvO J8PHClhAwCNtgjrFzsXlqkaXGpe3jGpBbQOoRNMBT+WG1JbFWZWGviM+Uq9ZUeYn muK1J0Q/7fX3zmkzRmQevejBSr1DKux0eOgxs+YsIhVCNhHo6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODFL/Vq29/G9szFO7udW6b3M+YaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjE5ZmMwNWUtYWFiYy0z MWIyLWIzYzAtM2ZhMDkzODY1NzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFInYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsi4nzGidb7aX1Nqf0USLZnhXdcxNW/5pRKSgiLyoZtfd1bamZMe2Ls MgNU2nj5BS+ZmJ1SeIoAHijDpv0dhOhBCAI6HQ7wn1v2ngQb2GVjbOCbPnjINqp4 +PRbz3fI3CCNjtGFUOKHVL/IrRkNkWHL7pDMmC5YJu6pWvkcUrL4SDhnOgo1LnyE R/FIgnu2PJygBLzMOfmX8gSZ/6QDvhHHtZ/lM3fSXAEArcvi1Zfutbv81nWoOZAB M121NI8WOiRm67wVMy/e4QSOXr0g+Wlt4GEoWYycEZMQKc16oQWCt8FSRfWYVmzl 4rck5cPmRF6FR5c9spItcW/AZkS5+E0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:40 2025 by rpki-client