$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/258b29f7-84bb-39c4-b9fe-d6a768b68c41.roa File: 258b29f7-84bb-39c4-b9fe-d6a768b68c41.roa (raw, json) Hash identifier: mC1iWpv6CreP5CR3ayxgwjXJv0HB3zwSajGy5Bi3F80= Subject key identifier: C6:2E:5F:1F:A6:0B:38:19:28:F2:67:4C:D1:35:3E:3A:BE:07:54:9E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858484C10170516ADB658C2D58D00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/258b29f7-84bb-39c4-b9fe-d6a768b68c41.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 4237 IP address blocks: 20.148.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:17:05:16:ad:b6:58:c2:d5:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=e8f43ba2-ea85-47b4-9b19-f4799be693cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:90:1d:19:8b:23:8f:bc:54:6f:1c:c5:8d: c3:c7:7f:b4:1c:48:0b:a5:cc:01:b6:7a:ad:f3:18: f1:1c:1d:d5:e0:86:c1:4e:d6:1a:c5:b0:e2:7b:be: 72:05:9c:45:04:98:1e:77:c3:9a:58:95:65:30:2b: 8c:4a:a6:c0:c4:40:df:b6:db:0d:a2:d7:b2:61:31: c0:c7:8b:b4:db:c0:f8:3e:4d:72:61:d4:00:78:b2: f6:ae:a4:c6:4b:1c:f9:d8:b2:3f:33:35:6f:2e:bd: 5d:41:4d:24:3b:d6:93:b7:ad:28:54:42:50:0c:e7: 10:8d:12:90:05:b5:c2:25:03:9c:c3:a3:e6:37:d3: 44:0c:9f:ab:7e:e7:f8:f1:78:de:8e:56:9d:2a:35: e9:c7:78:6a:3f:0c:8b:78:70:75:ca:4a:2c:e2:d1: 97:79:bb:af:85:a5:c9:27:0e:f8:3a:c8:71:e4:ce: b8:57:d6:be:87:5e:d7:bf:32:cc:9b:61:2b:31:cc: 12:6c:d3:63:ef:cb:58:49:da:82:b5:99:35:62:4e: 12:38:3d:24:0d:5e:fc:38:37:14:eb:70:71:61:c7: ec:36:16:9b:7e:dc:fb:86:e1:30:01:42:d3:ec:c1: 70:14:14:8a:16:cf:80:3f:9b:9d:ac:02:bd:43:4f: a4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2E:5F:1F:A6:0B:38:19:28:F2:67:4C:D1:35:3E:3A:BE:07:54:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/258b29f7-84bb-39c4-b9fe-d6a768b68c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6b:33:61:5a:5a:d5:87:85:c5:f1:d9:0c:af:00:f9:5d:71: d7:c3:43:14:54:0c:ea:72:2b:85:c8:89:72:d3:2f:7a:0f:f3: a7:37:3e:51:7c:72:8c:5b:89:71:64:e0:f4:e1:81:25:4a:13: fa:0c:e2:3e:b4:aa:4d:c4:b9:19:ac:9c:f0:e2:7a:c3:48:9a: ec:66:16:ea:a9:8a:2f:cc:d5:db:f7:17:38:ce:fb:67:ba:04: e3:20:7e:4c:c3:be:ac:cc:88:84:33:61:e1:be:70:3b:99:27: d5:30:52:cc:62:09:5f:07:8f:33:b7:8e:3d:ad:0e:37:40:14: 00:83:06:f2:82:e7:44:40:b7:cc:49:ab:2d:26:b0:26:ee:66: 94:0d:d7:ba:54:d4:ff:6e:ec:77:ff:4f:6f:9f:f0:28:28:b9: 3d:7c:27:f5:f7:7a:8a:3e:e6:65:45:cc:1b:8c:32:9d:b1:16: 49:be:47:6b:15:a1:5e:e4:25:19:36:39:d6:37:b0:31:81:62: 75:05:0b:4f:7c:20:74:fa:22:c6:af:88:5e:cd:00:7c:37:81: 46:ba:2c:75:30:24:72:8b:dd:79:ac:61:97:e8:73:e5:b7:97: 49:ab:e5:2d:50:14:f4:ae:56:02:6f:c9:65:40:c9:16:e2:c1: 71:d0:da:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEBcFFq22WMLVjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZThmNDNiYTItZWE4NS00N2I0LTliMTktZjQ3OTliZTY5M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI6QHRmLI4+8VG8cxY3Dx3+0HEgLpcwBtnqt 8xjxHB3V4IbBTtYaxbDie75yBZxFBJged8OaWJVlMCuMSqbAxEDfttsNoteyYTHA x4u028D4Pk1yYdQAeLL2rqTGSxz52LI/MzVvLr1dQU0kO9aTt60oVEJQDOcQjRKQ BbXCJQOcw6PmN9NEDJ+rfuf48XjejladKjXpx3hqPwyLeHB1ykos4tGXebuvhaXJ Jw74Oshx5M64V9a+h17XvzLMm2ErMcwSbNNj78tYSdqCtZk1Yk4SOD0kDV78ODcU 63BxYcfsNhabftz7huEwAULT7MFwFBSKFs+AP5udrAK9Q0+kSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYuXx+mCzgZKPJnTNE1Pjq+B1SeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjU4YjI5ZjctODRiYi0z OWM0LWI5ZmUtZDZhNzY4YjY4YzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9rM2FaWtWHhcXx2QyvAPldcdfDQxRUDOpyK4XIiXLTL3oP86c3PlF8 coxbiXFk4PThgSVKE/oM4j60qk3EuRmsnPDiesNImuxmFuqpii/M1dv3FzjO+2e6 BOMgfkzDvqzMiIQzYeG+cDuZJ9UwUsxiCV8HjzO3jj2tDjdAFACDBvKC50RAt8xJ qy0msCbuZpQN17pU1P9u7Hf/T2+f8CgouT18J/X3eoo+5mVFzBuMMp2xFkm+R2sV oV7kJRk2OdY3sDGBYnUFC098IHT6IsaviF7NAHw3gUa6LHUwJHKL3XmsYZfoc+W3 l0mr5S1QFPSuVgJvyWVAyRbiwXHQ2iw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:54 2025 by rpki-client