$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa File: 3844cb66-4923-3faf-8c4d-519000648600.roa (raw, json) Hash identifier: uZz3JhRAlYytbglGLGjJaC6wCBV6atcfXV/MKukqYSA= Subject key identifier: B6:1F:53:54:0F:68:69:70:11:F7:C5:35:48:40:03:67:B3:C4:97:C6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584883E5C793DC4F638026C02C80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 202 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:c7:93:dc:4f:63:80:26:c0:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=c08b4d0e-e77b-424c-95e3-a0320d9deb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:3f:59:97:5f:59:5f:90:c1:cd:3c:d7:37: f0:3e:5c:ee:ea:a4:89:75:76:a6:07:5e:4a:7a:fc: 88:ab:a5:a4:21:6c:f5:19:cb:2b:62:e6:94:d3:fa: a3:e0:d2:82:6f:c2:27:f7:b9:b6:6f:5e:12:76:1b: 2e:91:1c:3e:c2:45:8f:4b:05:f3:b4:b2:0d:75:a6: e0:48:f0:1e:23:d3:37:d2:b4:3d:1e:d0:87:cf:7b: f7:d1:b2:e7:0b:70:49:60:b3:63:79:af:aa:03:8c: 08:53:ef:31:73:9d:96:ec:90:a2:3b:b4:ac:f9:26: ac:d4:40:a8:d6:42:5a:1d:64:52:0d:ef:b2:5d:25: 4b:01:63:cc:3f:13:94:89:7a:ab:b7:3e:9e:18:7d: 7c:ee:56:06:af:6f:ca:db:da:4d:27:c3:32:90:ce: 23:9c:d0:7c:8e:5f:bd:01:6d:2d:8e:d3:e3:2b:6f: e8:1b:94:72:d4:28:42:8a:fd:f4:a1:b9:ee:51:68: 6e:c4:fa:12:65:dd:6f:8e:8e:73:de:4a:61:c9:c0: af:a0:1f:33:1c:41:66:61:e7:f4:dd:5d:3c:58:d4: 30:52:ad:5a:3d:99:d5:d9:d9:b4:bd:91:ec:26:f2: 46:78:a8:53:86:86:04:b3:6a:49:f1:b3:ad:51:7b: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1F:53:54:0F:68:69:70:11:F7:C5:35:48:40:03:67:B3:C4:97:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3844cb66-4923-3faf-8c4d-519000648600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:6f:1d:0f:ae:cb:ff:ff:24:d5:1f:41:b1:7e:fd:dd:13:49: aa:cd:62:af:3a:86:e6:57:bc:8d:5e:34:d5:b5:12:3b:50:f8: e7:05:31:56:4f:90:eb:92:da:51:a0:e8:09:ed:cf:52:fa:cb: cc:33:f3:68:15:24:31:29:3e:a3:ab:a9:88:5f:9b:51:7b:35: 08:8f:9a:ab:f7:c6:2a:64:cb:2b:69:d9:39:a2:54:40:1f:ed: e5:f2:0e:13:8e:18:c8:46:7a:08:f7:2e:48:2d:25:a7:49:c2: f5:11:1c:b0:30:30:8c:9f:63:fb:cc:ac:6f:89:a5:4b:18:66: 90:0d:c1:c3:00:57:47:ab:ad:53:dc:9b:b3:da:5a:43:e7:4a: 27:ed:9d:95:34:88:71:6c:e1:9c:58:b7:07:8e:a0:f2:e3:a7: e5:30:e7:5a:a3:bb:9f:9b:16:30:78:df:75:e8:ce:ec:07:a2: 00:ec:9a:92:9b:fe:36:ce:c6:71:18:a9:a4:33:08:4b:89:e4: f2:2d:67:d1:9f:06:b7:f8:d0:4a:fc:37:80:7c:6e:2c:94:38: 93:9a:46:b0:fa:dc:6a:77:6c:04:96:1e:a2:26:2d:3b:3f:2b: 4d:4d:ee:c3:2e:c7:8d:7e:c6:da:c8:43:0d:33:7b:9f:a2:0d: 8e:11:ed:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5ceT3E9jgCbALIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk YzA4YjRkMGUtZTc3Yi00MjRjLTk1ZTMtYTAzMjBkOWRlYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTM/WZdfWV+Qwc081zfwPlzu6qSJdXamB15K evyIq6WkIWz1GcsrYuaU0/qj4NKCb8In97m2b14SdhsukRw+wkWPSwXztLINdabg SPAeI9M30rQ9HtCHz3v30bLnC3BJYLNjea+qA4wIU+8xc52W7JCiO7Ss+Sas1ECo 1kJaHWRSDe+yXSVLAWPMPxOUiXqrtz6eGH187lYGr2/K29pNJ8MykM4jnNB8jl+9 AW0tjtPjK2/oG5Ry1ChCiv30obnuUWhuxPoSZd1vjo5z3kphycCvoB8zHEFmYef0 3V08WNQwUq1aPZnV2dm0vZHsJvJGeKhThoYEs2pJ8bOtUXtkOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYfU1QPaGlwEffFNUhAA2ezxJfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzg0NGNiNjYtNDkyMy0z ZmFmLThjNGQtNTE5MDAwNjQ4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1vHQ+uy///JNUfQbF+/d0TSarNYq86huZXvI1eNNW1EjtQ+OcFMVZP kOuS2lGg6Antz1L6y8wz82gVJDEpPqOrqYhfm1F7NQiPmqv3xipkyytp2TmiVEAf 7eXyDhOOGMhGegj3LkgtJadJwvURHLAwMIyfY/vMrG+JpUsYZpANwcMAV0errVPc m7PaWkPnSiftnZU0iHFs4ZxYtweOoPLjp+Uw51qju5+bFjB433XozuwHogDsmpKb /jbOxnEYqaQzCEuJ5PItZ9GfBrf40Er8N4B8biyUOJOaRrD63Gp3bASWHqImLTs/ K01N7sMux41+xtrIQw0ze5+iDY4R7f0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:24 2025 by rpki-client