$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa File: 21be8a54-9d15-3bcf-b328-06e1c263d460.roa (raw, json) Hash identifier: JUgOI8Vxr6e/fteOiYhR/8O650sGXq0cWwLsVVHTbWY= Subject key identifier: 2D:C3:63:76:94:9E:38:45:6A:9E:59:09:06:2D:23:69:01:94:01:16 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848B35B6C1EA02694351642E140 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 3356 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6c:1e:a0:26:94:35:16:42:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=271ee4aa-1974-47c2-b97f-3efc57b18512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ae:0e:6f:b0:0d:17:6b:b7:a9:07:d2:f8:00: 63:13:30:9b:df:97:df:10:c2:a0:21:71:d3:0a:0a: e5:31:11:e7:87:68:c8:8d:95:23:ea:c3:54:62:d9: cf:5d:40:2b:6f:6c:d3:3f:e3:f6:95:fe:9d:6c:61: 36:e2:e6:9b:0b:22:75:d9:5f:23:39:3b:76:9d:d6: 69:43:e3:a2:27:b4:0d:3a:e5:d7:c1:ef:35:b6:82: 9e:03:49:95:1d:a5:d4:13:37:b0:4c:8c:eb:e2:f8: f3:08:f3:3b:6a:2c:e8:71:a4:67:1f:50:cb:0b:73: 08:d6:a4:73:d2:25:b7:17:13:8a:9e:81:68:7b:8b: d8:97:81:f3:31:2c:3e:8a:1a:e3:96:92:36:fa:8e: 64:08:ef:40:e7:d0:36:17:63:0b:e4:f3:e1:7c:16: e0:8e:59:63:a1:68:09:8f:5a:f1:3c:21:c1:eb:db: b4:17:61:73:3e:ff:22:a0:6b:fe:bc:3f:c0:44:91: 83:60:8c:4b:24:c4:65:1e:a5:a2:47:7a:43:92:d5: 7f:d2:ec:d1:f8:2d:77:0b:71:34:1a:38:b8:de:25: 8a:87:24:1a:06:97:d9:e4:06:7f:14:0a:f9:19:bd: de:3c:79:bd:3f:f2:db:bb:d6:82:fa:b5:b8:da:0d: 6f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C3:63:76:94:9E:38:45:6A:9E:59:09:06:2D:23:69:01:94:01:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f1:80:44:49:97:a7:28:06:dd:75:c4:09:7a:0b:97:bd:82: d1:33:73:f2:57:94:ec:28:11:6d:e1:81:f7:ee:80:98:3f:43: e3:55:41:db:22:b1:49:82:1f:1d:23:40:14:7a:78:a5:57:58: aa:23:9e:5e:2e:55:3f:1e:27:f7:c6:06:55:f4:71:7e:47:1c: 4e:a7:6c:61:d8:3a:27:51:78:3b:fc:1a:08:59:64:e2:47:05: 4a:52:3d:84:6f:62:ff:a0:74:09:e7:0b:4d:3a:24:69:79:e5: 54:08:7d:40:33:e6:80:88:29:07:61:62:a9:58:6e:89:03:6a: 01:b6:d9:c0:2c:34:23:69:e4:00:17:0b:01:d0:79:10:31:c2: a8:08:a3:c1:99:d4:11:83:66:94:ea:d2:49:d0:43:5f:46:e6: fb:56:f2:ad:6c:f9:7d:86:1d:ef:04:72:82:ce:9a:16:ac:ff: f8:71:7d:5e:65:22:92:45:e6:87:23:37:43:06:da:35:17:18: e7:df:ac:a7:ce:53:57:c5:59:9d:e9:b4:c6:c9:e9:11:db:aa: 36:1e:01:6b:aa:98:82:92:78:71:87:79:ed:b1:3c:1b:4c:8e: bd:0e:12:f7:4d:25:72:93:47:65:cc:ed:3e:25:d3:12:b7:ea: 32:75:8e:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2weoCaUNRZC4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk MjcxZWU0YWEtMTk3NC00N2MyLWI5N2YtM2VmYzU3YjE4NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga4Ob7ANF2u3qQfS+ABjEzCb35ffEMKgIXHT CgrlMRHnh2jIjZUj6sNUYtnPXUArb2zTP+P2lf6dbGE24uabCyJ12V8jOTt2ndZp Q+OiJ7QNOuXXwe81toKeA0mVHaXUEzewTIzr4vjzCPM7aizocaRnH1DLC3MI1qRz 0iW3FxOKnoFoe4vYl4HzMSw+ihrjlpI2+o5kCO9A59A2F2ML5PPhfBbgjlljoWgJ j1rxPCHB69u0F2FzPv8ioGv+vD/ARJGDYIxLJMRlHqWiR3pDktV/0uzR+C13C3E0 Gji43iWKhyQaBpfZ5AZ/FAr5Gb3ePHm9P/Lbu9aC+rW42g1vZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3DY3aUnjhFap5ZCQYtI2kBlAEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjFiZThhNTQtOWQxNS0z YmNmLWIzMjgtMDZlMWMyNjNkNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPxgERJl6coBt11xAl6C5e9gtEzc/JXlOwoEW3hgffugJg/Q+NVQdsi sUmCHx0jQBR6eKVXWKojnl4uVT8eJ/fGBlX0cX5HHE6nbGHYOidReDv8GghZZOJH BUpSPYRvYv+gdAnnC006JGl55VQIfUAz5oCIKQdhYqlYbokDagG22cAsNCNp5AAX CwHQeRAxwqgIo8GZ1BGDZpTq0knQQ19G5vtW8q1s+X2GHe8EcoLOmhas//hxfV5l IpJF5ocjN0MG2jUXGOffrKfOU1fFWZ3ptMbJ6RHbqjYeAWuqmIKSeHGHee2xPBtM jr0OEvdNJXKTR2XM7T4l0xK36jJ1jrg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:21 2025 by rpki-client