$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/258b29f7-84bb-39c4-b9fe-d6a768b68c41.roa File: 258b29f7-84bb-39c4-b9fe-d6a768b68c41.roa (raw, json) Hash identifier: n7DbtfB4qat082GHOulqmAkRSFvi8lF3Nc2W8Ie/V+0= Subject key identifier: 0F:C8:52:54:E1:10:9F:35:DA:29:96:B5:48:96:EE:14:7D:17:5B:00 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE958B259D559BE2764300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/258b29f7-84bb-39c4-b9fe-d6a768b68c41.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 4237 IP address blocks: 20.148.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:95:8b:25:9d:55:9b:e2:76:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=2ed3ee0a-13ac-47b8-a1ee-436a5055f813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:68:cc:a5:ca:aa:ab:df:16:53:9b:96:4a:ed: 3b:ea:de:0c:67:39:79:44:e7:07:c2:83:de:9a:46: 0c:25:9b:39:1a:47:5f:22:b3:a0:28:dd:94:63:a6: ae:fc:9b:07:8b:c0:73:d7:c8:40:a9:c8:61:af:49: b0:cb:4f:79:f6:e4:b6:0c:a4:99:4d:c7:e4:cd:3c: 39:64:b0:a6:ff:e3:35:a8:e1:5b:a7:c2:1d:17:b8: 8e:cc:8c:86:4b:40:0e:39:6c:1a:05:50:05:7f:47: a7:c6:5a:1e:94:4e:7f:57:bf:94:7d:18:53:bc:1e: 74:37:d8:e8:22:12:f0:0c:b8:44:59:90:c3:ec:59: f4:33:4a:fe:0a:99:dc:f1:1d:3c:bb:27:4a:23:5f: 2f:9d:b4:5e:f8:c8:5d:94:a0:8a:e5:21:38:3b:8c: 03:0d:33:aa:9d:a7:f9:9a:47:1c:f3:b5:ba:2e:23: f9:53:d1:ed:ea:27:5d:88:94:bd:78:68:e9:f0:d6: fc:39:29:dc:4a:d7:97:57:01:a7:bb:d2:8c:8a:27: 7b:67:e3:71:8f:1e:d5:01:76:22:95:60:60:a4:28: 6d:16:de:8d:85:8f:66:71:40:a3:57:3e:59:d1:b6: 99:0c:97:da:4b:66:d3:3f:1b:4d:af:99:93:84:a9: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C8:52:54:E1:10:9F:35:DA:29:96:B5:48:96:EE:14:7D:17:5B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/258b29f7-84bb-39c4-b9fe-d6a768b68c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:85:81:c6:d8:15:b9:02:aa:45:2c:4a:93:e1:d7:8a:4a:04: 18:cc:e4:87:18:b2:e3:f3:0b:8e:e9:ce:99:bd:0f:d9:07:40: 8f:ee:e8:cf:10:cc:07:61:59:30:fd:a4:17:da:50:a1:d7:f4: f8:1c:09:81:d3:1a:5b:bb:da:27:a1:a0:c2:29:7f:66:f5:e5: 96:18:52:58:c4:2b:ea:c2:c2:46:b2:68:25:0f:bf:a6:d5:75: 31:18:ac:1e:9e:3e:59:8b:12:86:00:8c:45:85:b7:89:ed:74: aa:24:56:1e:7c:6c:1e:a3:89:0c:fa:f8:8e:fb:5e:53:63:1d: b6:f4:68:16:5a:01:57:e2:25:1f:bd:bc:9a:3a:01:45:83:8b: d6:8d:f3:63:58:16:5f:17:1a:4e:7a:0c:1f:65:69:50:35:3e: a2:58:fd:d1:07:b5:11:1f:8f:2e:6a:47:99:45:1c:38:6a:c9: f0:f9:c4:68:65:e5:5e:03:88:2f:96:1c:aa:d9:a2:db:9c:dd: d9:5f:5b:d6:08:82:f3:99:7b:bc:b6:3a:dc:8e:a7:55:ec:1c: 89:4e:6a:d5:8f:00:e7:b3:16:4a:ce:d6:7d:28:2b:bc:43:47: 0e:da:99:77:1a:69:c4:52:00:d2:c7:d0:97:bd:ce:f8:31:db: 7b:1e:0a:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpWLJZ1Vm+J2QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MmVkM2VlMGEtMTNhYy00N2I4LWExZWUtNDM2YTUwNTVmODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWjMpcqqq98WU5uWSu076t4MZzl5ROcHwoPe mkYMJZs5GkdfIrOgKN2UY6au/JsHi8Bz18hAqchhr0mwy0959uS2DKSZTcfkzTw5 ZLCm/+M1qOFbp8IdF7iOzIyGS0AOOWwaBVAFf0enxloelE5/V7+UfRhTvB50N9jo IhLwDLhEWZDD7Fn0M0r+Cpnc8R08uydKI18vnbRe+MhdlKCK5SE4O4wDDTOqnaf5 mkcc87W6LiP5U9Ht6iddiJS9eGjp8Nb8OSncSteXVwGnu9KMiid7Z+Nxjx7VAXYi lWBgpChtFt6NhY9mcUCjVz5Z0baZDJfaS2bTPxtNr5mThKnOewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/IUlThEJ812imWtUiW7hR9F1sAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjU4YjI5ZjctODRiYi0z OWM0LWI5ZmUtZDZhNzY4YjY4YzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaFgcbYFbkCqkUsSpPh14pKBBjM5IcYsuPzC47pzpm9D9kHQI/u6M8Q zAdhWTD9pBfaUKHX9PgcCYHTGlu72iehoMIpf2b15ZYYUljEK+rCwkayaCUPv6bV dTEYrB6ePlmLEoYAjEWFt4ntdKokVh58bB6jiQz6+I77XlNjHbb0aBZaAVfiJR+9 vJo6AUWDi9aN82NYFl8XGk56DB9laVA1PqJY/dEHtREfjy5qR5lFHDhqyfD5xGhl 5V4DiC+WHKrZotuc3dlfW9YIgvOZe7y2OtyOp1XsHIlOatWPAOezFkrO1n0oK7xD Rw7amXcaacRSANLH0Je9zvgx23seCiQ= -----END CERTIFICATE-----Generated at Fri Mar 14 09:27:18 2025 by rpki-client