$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa File: 2358e127-b9cd-321b-a2ed-09882df26c20.roa (raw, json) Hash identifier: zhqMgbN9y/i56hTQxY7lheRHBfmJqTsM2Enu6chgJ+Y= Subject key identifier: FB:1F:E1:77:36:DF:E5:86:CF:EA:6D:88:EA:00:9F:BB:56:D7:7C:3F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848960B4EB08454938371838DC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 202 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:4e:b0:84:54:93:83:71:83:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=e2bcae0f-d677-4ae2-9d19-fc24c8301bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:a9:f0:7f:ba:61:f0:43:c3:35:fe:00:ce: 9b:f8:a4:16:de:a6:5c:26:44:ed:f1:a3:7e:c2:a8: 73:1e:85:79:61:6b:e5:fa:8f:e3:9e:d0:31:29:bc: 07:2e:0c:25:d9:08:6c:27:79:09:85:db:20:39:10: ff:26:e4:b6:14:b6:3c:6a:1f:02:d9:e4:09:3a:da: 18:fc:03:eb:76:e1:b9:cc:a0:26:b8:01:93:d9:5f: d7:fd:2a:3c:4f:2d:23:33:bb:1c:26:bd:d7:8a:c5: 28:7d:fb:5e:9e:fc:a3:5d:97:be:ab:aa:b9:87:eb: 8a:34:ff:56:0e:49:27:32:e2:a5:30:40:e7:41:a2: eb:00:d1:74:9c:75:1f:ca:a9:53:74:a6:75:f3:bd: 20:ae:c0:52:9f:51:08:9b:a1:4e:34:39:8a:39:41: 96:11:e7:2f:34:47:e6:db:1d:54:15:39:24:c2:e0: 72:5e:ac:5d:c1:e5:ad:ac:2a:25:68:0d:a7:75:bb: ad:e1:3f:2f:8c:e7:16:b0:88:4a:b1:43:19:8a:ca: 97:20:00:e3:7e:3d:83:e9:74:3e:f6:e9:99:50:72: 3e:71:10:76:27:a6:f8:13:6d:cb:16:36:d7:04:09: bd:d8:0c:fe:2b:c3:18:31:6d:0b:c8:53:dd:bd:db: d5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1F:E1:77:36:DF:E5:86:CF:EA:6D:88:EA:00:9F:BB:56:D7:7C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4e:f9:e7:a8:8d:ac:98:b1:71:49:31:52:7f:69:1c:0e:6a: 34:98:3a:9b:45:22:84:92:27:e8:9e:86:0a:1c:54:a9:3e:0a: 21:0e:c4:4f:0b:ba:80:30:cc:e8:93:39:1b:7f:37:4a:19:4e: 3a:f1:7c:a8:f7:6a:e3:12:95:af:4b:39:70:5b:51:05:7a:22: 14:00:30:3f:f5:c3:ed:0d:17:fe:bc:c9:e7:b6:8b:1d:29:8f: 6b:7b:17:9d:64:64:cf:ba:8b:2b:30:7e:15:31:d1:8e:c8:87: 8e:4b:d4:ef:a5:ce:54:f7:7e:ed:75:c9:03:96:c0:f8:1c:85: af:e1:1e:a4:5c:e4:1c:7e:6a:c2:95:36:2c:e4:97:ac:e8:88: 2b:da:b9:d1:3f:70:1e:14:52:cf:91:86:d0:59:fd:5a:4b:53: c7:e5:e5:59:d8:6c:18:e0:c7:29:fa:a7:98:c9:fb:64:8c:cf: fb:1d:8f:08:de:4f:39:c9:ff:03:b0:e7:d2:49:c1:a7:92:19: 6d:2c:e5:78:41:35:8a:e0:6d:a5:4b:25:77:52:17:c3:82:6e: bb:a1:d4:8a:0d:12:5c:48:ba:bc:c9:2f:25:2f:cb:7b:6c:60: a7:e3:e9:7a:07:c5:cb:15:5f:dd:b3:dd:f6:0e:6b:7b:2d:3e: 7d:11:69:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC06whFSTg3GDjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk ZTJiY2FlMGYtZDY3Ny00YWUyLTlkMTktZmMyNGM4MzAxYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXyp8H+6YfBDwzX+AM6b+KQW3qZcJkTt8aN+ wqhzHoV5YWvl+o/jntAxKbwHLgwl2QhsJ3kJhdsgORD/JuS2FLY8ah8C2eQJOtoY /APrduG5zKAmuAGT2V/X/So8Ty0jM7scJr3XisUofftenvyjXZe+q6q5h+uKNP9W DkknMuKlMEDnQaLrANF0nHUfyqlTdKZ1870grsBSn1EIm6FONDmKOUGWEecvNEfm 2x1UFTkkwuByXqxdweWtrColaA2ndbut4T8vjOcWsIhKsUMZisqXIADjfj2D6XQ+ 9umZUHI+cRB2J6b4E23LFjbXBAm92Az+K8MYMW0LyFPdvdvVMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsf4Xc23+WGz+ptiOoAn7tW13w/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjM1OGUxMjctYjljZC0z MjFiLWEyZWQtMDk4ODJkZjI2YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFO+eeojayYsXFJMVJ/aRwOajSYOptFIoSSJ+iehgocVKk+CiEOxE8L uoAwzOiTORt/N0oZTjrxfKj3auMSla9LOXBbUQV6IhQAMD/1w+0NF/68yee2ix0p j2t7F51kZM+6iyswfhUx0Y7Ih45L1O+lzlT3fu11yQOWwPgcha/hHqRc5Bx+asKV Nizkl6zoiCvaudE/cB4UUs+RhtBZ/VpLU8fl5VnYbBjgxyn6p5jJ+2SMz/sdjwje TznJ/wOw59JJwaeSGW0s5XhBNYrgbaVLJXdSF8OCbruh1IoNElxIurzJLyUvy3ts YKfj6XoHxcsVX92z3fYOa3stPn0Rae0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:33:50 2025 by rpki-client