$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa File: 3b274f1e-b389-388a-a8fd-f2216056bc4e.roa (raw, json) Hash identifier: G+6BaEYacdizmHw0kFzTcDx1ot+ArV+PNJmIQChN0l0= Subject key identifier: F9:BD:D8:94:9A:61:FF:E3:97:68:D5:07:D4:8C:63:32:72:C0:A7:C4 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13C838F78BB9A8E60FA40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 203 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3c:83:8f:78:bb:9a:8e:60:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=b448ca1b-7a2f-4cd4-ade2-dead0e0c0681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:71:03:ac:c1:f3:71:62:c3:fe:58:62:fe: a0:5f:fa:53:8f:4a:98:28:45:f0:67:74:e9:7d:58: 67:76:93:bb:b5:ff:28:e8:b1:6d:d1:d2:88:63:9a: 78:3b:df:bc:c0:a2:37:1c:1d:46:d0:60:20:8d:c8: 31:6b:e5:72:5c:32:e1:93:34:97:0f:cc:b5:6b:77: b8:57:47:16:e9:e4:d4:4b:1f:22:0e:c4:5c:29:85: 3b:fa:28:e9:68:34:51:b6:a8:c0:5d:0b:df:af:91: 80:41:f0:8b:3d:a7:c8:20:02:d5:6e:2f:77:cd:e1: 07:ec:9a:93:7c:1e:4d:8f:73:8f:e7:e5:3b:80:de: 97:b6:5e:18:fa:df:9d:b2:d0:83:b1:b8:27:3f:1c: 3d:b3:19:0f:90:75:e8:2b:d2:19:a3:ab:73:ec:ca: 20:ac:1b:cc:6f:2f:a1:d2:c6:2e:5a:5a:78:d0:d1: 63:aa:ac:88:54:8f:59:53:cc:a8:9e:38:c9:b4:9e: c5:d5:1b:e6:74:b5:85:68:97:47:96:73:98:68:dd: eb:b7:0b:47:eb:a8:0e:d8:ca:31:ee:d4:8d:f5:bf: 6e:86:12:00:70:d6:3f:a1:a1:8c:a5:b2:4b:00:b8: 3b:70:cf:d7:2f:67:64:bb:f4:a9:27:3b:a5:4a:0a: 8a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BD:D8:94:9A:61:FF:E3:97:68:D5:07:D4:8C:63:32:72:C0:A7:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:72:ca:14:ac:12:fc:09:88:9f:3d:bd:4e:6b:b5:b1:ff:a2: 5f:09:09:c9:35:2d:2e:10:3f:57:5d:3d:04:4f:c4:d8:51:3e: 4b:28:ef:8b:01:e2:d0:32:54:a5:d7:cd:47:58:38:da:2e:4e: 10:d4:6a:8f:ae:5a:15:49:10:d6:27:df:76:53:00:7a:c8:98: a5:76:57:9f:dd:d1:c4:3a:bc:e4:ac:0a:0b:27:bb:9e:0d:84: 22:76:5c:6f:1f:b1:ce:b2:f6:4e:af:2a:08:71:72:0e:f8:a9: af:85:05:2e:3e:c8:0c:8d:1b:f1:22:cd:69:8c:3e:70:70:bd: 65:cf:6b:c8:9e:2c:34:da:62:3e:2a:1b:96:8a:bc:d4:cb:44: 8d:4c:a2:5e:10:a3:fb:34:1d:61:18:33:ba:93:22:ea:e0:24: 7a:af:40:e9:30:ef:66:bc:36:64:b0:f5:ce:99:8f:2e:34:42: 45:0c:ba:9e:64:d0:57:26:a9:a6:4d:4f:2a:c8:3b:41:47:40: 80:57:da:c2:75:25:46:7d:63:eb:fd:e6:ad:ee:cf:85:be:15: 62:9d:b6:fc:ef:e1:4f:9b:e5:e8:7f:d2:97:f4:7d:f0:90:83: e5:51:62:2d:31:d4:9e:e1:b0:f5:bf:eb:1d:d1:0e:66:24:b6: d6:0a:03:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTyDj3i7mo5g+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk YjQ0OGNhMWItN2EyZi00Y2Q0LWFkZTItZGVhZDBlMGMwNjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7pxA6zB83Fiw/5YYv6gX/pTj0qYKEXwZ3Tp fVhndpO7tf8o6LFt0dKIY5p4O9+8wKI3HB1G0GAgjcgxa+VyXDLhkzSXD8y1a3e4 V0cW6eTUSx8iDsRcKYU7+ijpaDRRtqjAXQvfr5GAQfCLPafIIALVbi93zeEH7JqT fB5Nj3OP5+U7gN6Xtl4Y+t+dstCDsbgnPxw9sxkPkHXoK9IZo6tz7MogrBvMby+h 0sYuWlp40NFjqqyIVI9ZU8yonjjJtJ7F1RvmdLWFaJdHlnOYaN3rtwtH66gO2Mox 7tSN9b9uhhIAcNY/oaGMpbJLALg7cM/XL2dku/SpJzulSgqKqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPm92JSaYf/jl2jVB9SMYzJywKfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2IyNzRmMWUtYjM4OS0z ODhhLWE4ZmQtZjIyMTYwNTZiYzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdyyhSsEvwJiJ89vU5rtbH/ol8JCck1LS4QP1ddPQRPxNhRPkso74sB 4tAyVKXXzUdYONouThDUao+uWhVJENYn33ZTAHrImKV2V5/d0cQ6vOSsCgsnu54N hCJ2XG8fsc6y9k6vKghxcg74qa+FBS4+yAyNG/EizWmMPnBwvWXPa8ieLDTaYj4q G5aKvNTLRI1Mol4Qo/s0HWEYM7qTIurgJHqvQOkw72a8NmSw9c6Zjy40QkUMup5k 0FcmqaZNTyrIO0FHQIBX2sJ1JUZ9Y+v95q3uz4W+FWKdtvzv4U+b5eh/0pf0ffCQ g+VRYi0x1J7hsPW/6x3RDmYkttYKAz4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:40:24 2025 by rpki-client