$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa File: 38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa (raw, json) Hash identifier: zeUb/3hjDLY9ZB1rEPzbRkRII+P+e0z1HEAqo7fkwj8= Subject key identifier: CF:93:D5:02:9A:C5:51:09:22:11:15:0E:53:FE:7A:76:A1:FA:7C:F1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D962F0B69739CD71929625F0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa Signing time: Tue 11 Feb 2025 16:56:39 +0000 ROA not before: Tue 11 Feb 2025 16:56:39 +0000 ROA not after: Mon 12 May 2025 15:56:39 +0000 asID: 202 IP address blocks: 20.156.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:62:f0:b6:97:39:cd:71:92:96:25:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 16:56:39 2025 GMT Not After : May 12 15:56:39 2025 GMT Subject: CN=04f0dbc6-c5d2-47f8-b400-9c51cffe1f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:e9:f8:b2:f3:fa:da:3b:76:a0:a3:d4:ae: 2d:7d:13:5e:4d:46:59:9c:b8:f3:a8:b7:aa:57:f8: 71:39:01:c4:c7:db:d9:88:7e:3d:eb:ea:97:39:78: 28:eb:40:07:2d:6f:29:23:75:9e:7b:18:f8:fa:86: fe:98:28:ce:fe:38:26:ee:25:b9:a5:e9:b7:34:0a: 2f:1e:78:50:0e:78:8b:7e:f0:fb:0c:6a:f0:60:12: 10:fc:1f:96:97:89:da:8c:23:1e:39:36:c8:1e:c3: e9:da:16:0b:9b:2e:5a:38:a3:37:72:f9:18:73:a4: 17:53:7a:6c:ec:b0:8d:32:e7:28:86:42:17:77:c0: 14:c2:7b:18:48:0d:db:6e:66:dd:a4:41:f8:c9:71: 49:4f:1c:56:d5:80:de:53:35:6d:4d:8e:01:07:32: 47:8f:be:60:08:a3:f8:5d:e4:40:f1:46:c1:83:09: a7:b3:a9:3d:d2:9f:48:4f:f7:59:a4:f3:43:44:41: ce:01:d5:e1:61:6e:11:6e:17:ac:b7:8d:4c:04:b6: 13:82:ce:94:84:0b:4f:69:a3:20:c1:d0:58:c5:12: 0c:99:5a:4c:48:8a:f7:c0:e2:67:81:d6:dd:b7:03: e6:c1:05:a2:cd:c9:1e:14:54:90:e1:a1:70:8a:de: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:93:D5:02:9A:C5:51:09:22:11:15:0E:53:FE:7A:76:A1:FA:7C:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.156.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:39:10:cd:6f:d1:1a:bc:e5:3e:48:c1:98:08:42:c2:c7:20: a5:54:c6:1a:8a:78:17:8d:f3:c4:d6:20:f9:ea:f2:27:6a:1b: 11:7b:95:43:9b:78:0e:5b:b5:d1:31:5d:0d:a0:ac:6a:e6:3c: 39:1d:34:8f:93:3a:c8:d3:a7:b5:a3:67:49:fc:1a:4f:d0:e2: 48:3b:7c:c7:a0:f8:ff:eb:1e:2f:78:35:42:3f:4f:28:21:09: 25:62:f7:9d:ae:0a:47:fe:db:8b:24:eb:92:4f:a0:8c:3d:70: f4:25:74:93:83:b0:40:50:6b:34:24:40:62:33:18:a5:d7:3b: 56:35:9f:48:37:0c:05:d1:dc:16:44:74:6e:2f:f7:b2:39:ff: e8:30:03:a0:1b:7a:14:9f:da:2a:83:08:d9:55:26:36:d3:e3: ad:19:5e:1d:1d:79:9e:d5:41:fc:22:f1:92:c2:38:35:86:59: 7f:5e:a3:11:f5:13:e6:a9:80:76:45:1b:83:61:79:74:da:93: 4e:18:bf:f1:9b:34:42:35:dd:68:cf:a3:f2:21:29:da:ae:ce: 66:2f:1e:4f:02:59:81:74:8a:04:f5:cf:be:36:f5:4e:ec:83: ec:b4:72:67:6c:f8:9b:80:9b:10:17:98:66:66:a8:20:30:c6: ca:4a:4e:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZYvC2lznNcZKWJfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE2NTYzOVoXDTI1MDUxMjE1NTYzOVowLzEtMCsGA1UEAxMk MDRmMGRiYzYtYzVkMi00N2Y4LWI0MDAtOWM1MWNmZmUxZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXHp+LLz+to7dqCj1K4tfRNeTUZZnLjzqLeq V/hxOQHEx9vZiH496+qXOXgo60AHLW8pI3Weexj4+ob+mCjO/jgm7iW5pem3NAov HnhQDniLfvD7DGrwYBIQ/B+Wl4najCMeOTbIHsPp2hYLmy5aOKM3cvkYc6QXU3ps 7LCNMucohkIXd8AUwnsYSA3bbmbdpEH4yXFJTxxW1YDeUzVtTY4BBzJHj75gCKP4 XeRA8UbBgwmns6k90p9IT/dZpPNDREHOAdXhYW4Rbhest41MBLYTgs6UhAtPaaMg wdBYxRIMmVpMSIr3wOJngdbdtwPmwQWizckeFFSQ4aFwit6yaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+T1QKaxVEJIhEVDlP+enah+nzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhjYTU2NDMtZmU0OS0z MTA4LThkYmQtZDRjYjYzZTRlOTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJypMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI5EM1v0Rq85T5IwZgIQsLHIKVUxhqKeBeN88TWIPnq8idqGxF7lUOb eA5btdExXQ2grGrmPDkdNI+TOsjTp7WjZ0n8Gk/Q4kg7fMeg+P/rHi94NUI/Tygh CSVi952uCkf+24sk65JPoIw9cPQldJODsEBQazQkQGIzGKXXO1Y1n0g3DAXR3BZE dG4v97I5/+gwA6AbehSf2iqDCNlVJjbT460ZXh0deZ7VQfwi8ZLCODWGWX9eoxH1 E+apgHZFG4NheXTak04Yv/GbNEI13WjPo/IhKdquzmYvHk8CWYF0igT1z7429U7s g+y0cmds+JuAmxAXmGZmqCAwxspKTuk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:50 2025 by rpki-client