$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa File: 2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa (raw, json) Hash identifier: y9T1iQuwbvFr/1EV8fhKfLUZqgTnYHxJqi1aeFLcTUk= Subject key identifier: 59:E6:0A:DA:C3:DB:15:3B:3E:7E:3B:5E:B2:E1:4B:E7:DD:EE:05:78 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13BF359298735E132FF80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.134.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3b:f3:59:29:87:35:e1:32:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=49b314a6-39a3-4341-b48a-6c896682db86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8d:ee:2f:63:c7:41:81:e0:01:6c:fc:92:b7: ef:c2:ad:3d:19:0a:2b:b9:2c:71:04:9f:d5:78:43: 8c:b5:3a:38:57:ed:b7:48:65:e4:50:9e:f9:5c:bd: a6:89:56:35:dc:5a:b1:d8:aa:76:e3:84:ac:ab:0b: f0:4d:14:a9:3a:e9:7e:52:9f:96:0a:57:06:2f:8b: 33:74:7c:f3:b6:25:1f:05:b6:e6:cd:08:23:65:d4: 2e:b8:fc:0e:79:de:41:2e:50:7e:c2:6c:58:db:4a: 75:96:ae:30:63:ea:d2:03:18:35:8a:b4:bd:6d:96: 0c:a7:9d:39:dc:8a:c6:0d:df:2f:cd:89:14:ec:e9: e9:ad:07:2f:d8:37:6f:4c:b4:3f:8d:94:9b:b7:bb: 53:bb:13:69:08:86:81:b5:f3:c5:e1:4d:98:63:d2: 1a:40:b7:05:63:91:e6:86:cd:27:98:5c:39:a6:dd: ba:73:a2:b9:95:a3:e1:fa:4a:52:03:e8:6f:4e:70: b4:bc:18:2d:c7:9d:7e:25:70:46:64:63:82:a4:ad: 44:47:e8:ac:92:76:6a:bc:fa:65:71:3a:03:c8:b5: e5:a5:45:3a:44:34:0e:a3:3e:f7:93:57:77:d3:a1: da:34:35:aa:75:ff:4a:50:a9:f2:d0:ac:cd:8f:ed: c9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E6:0A:DA:C3:DB:15:3B:3E:7E:3B:5E:B2:E1:4B:E7:DD:EE:05:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:78:42:14:39:68:b4:29:96:dc:7a:ec:ca:da:76:27:8a:0f: ac:8d:1a:c2:86:52:1e:c4:57:89:22:ec:9c:59:ba:5c:c1:80: 35:60:e9:d2:94:79:5b:47:75:e1:e7:c2:0c:57:93:14:7e:e0: 30:2c:54:1b:cb:ba:9c:d9:e0:81:a2:e9:08:cc:66:9e:77:6f: a4:96:0f:ae:6f:5d:cd:83:a0:75:44:68:fd:21:20:76:fe:41: e7:8b:4d:b6:dd:92:57:92:ec:7f:41:bb:9e:a7:a4:24:19:d0: 84:da:bb:fe:63:f7:5a:0d:f1:52:83:d1:68:86:6c:f5:f0:bb: 25:7d:0d:c1:d0:19:4d:a2:26:cb:9f:79:31:86:89:e2:8e:1f: 61:ee:06:f7:63:84:94:57:94:cd:da:d4:2e:67:ae:89:64:27: 5a:9a:90:9c:3a:ac:a5:3b:df:cd:fd:36:7b:74:e7:d9:0f:82: d0:50:f2:04:5e:c6:e6:94:9f:e9:38:34:9a:05:4c:f6:01:30: 9e:38:1f:17:62:5c:76:8d:25:e3:5a:06:54:49:72:ed:4e:2c: d1:4a:7d:68:f6:4b:06:fa:7d:6a:ed:12:b3:35:b6:74:2b:26: be:25:fe:32:70:c1:c7:a6:05:61:02:0a:24:a5:a2:9f:6d:79: 00:f9:d7:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTvzWSmHNeEy/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk NDliMzE0YTYtMzlhMy00MzQxLWI0OGEtNmM4OTY2ODJkYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo3uL2PHQYHgAWz8krfvwq09GQoruSxxBJ/V eEOMtTo4V+23SGXkUJ75XL2miVY13Fqx2Kp244SsqwvwTRSpOul+Up+WClcGL4sz dHzztiUfBbbmzQgjZdQuuPwOed5BLlB+wmxY20p1lq4wY+rSAxg1irS9bZYMp505 3IrGDd8vzYkU7OnprQcv2DdvTLQ/jZSbt7tTuxNpCIaBtfPF4U2YY9IaQLcFY5Hm hs0nmFw5pt26c6K5laPh+kpSA+hvTnC0vBgtx51+JXBGZGOCpK1ER+isknZqvPpl cToDyLXlpUU6RDQOoz73k1d306HaNDWqdf9KUKny0KzNj+3JlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnmCtrD2xU7Pn47XrLhS+fd7gV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMmRlNjZlMjMtYjBmOS0z YmVmLWJhMDAtNjc5MmViMzhlYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIN4QhQ5aLQpltx67MradieKD6yNGsKGUh7EV4ki7JxZulzBgDVg6dKU eVtHdeHnwgxXkxR+4DAsVBvLupzZ4IGi6QjMZp53b6SWD65vXc2DoHVEaP0hIHb+ QeeLTbbdkleS7H9Bu56npCQZ0ITau/5j91oN8VKD0WiGbPXwuyV9DcHQGU2iJsuf eTGGieKOH2HuBvdjhJRXlM3a1C5nrolkJ1qakJw6rKU73839Nnt059kPgtBQ8gRe xuaUn+k4NJoFTPYBMJ44HxdiXHaNJeNaBlRJcu1OLNFKfWj2Swb6fWrtErM1tnQr Jr4l/jJwwcemBWECCiSlop9teQD511w= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:26 2025 by rpki-client