$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa File: 3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa (raw, json) Hash identifier: 8W9U2tdjT7cdPTu2xpqilfzcHWe5ptcjVkOMM6Gu3dQ= Subject key identifier: 44:6C:CA:10:50:1E:DC:02:8B:F9:5B:7C:AE:9D:54:C3:36:78:7A:64 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D93D3DBADE23CB5D8AFFD5F0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa Signing time: Tue 11 Feb 2025 15:40:42 +0000 ROA not before: Tue 11 Feb 2025 15:40:42 +0000 ROA not after: Mon 12 May 2025 14:40:42 +0000 asID: 3356 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:3d:3d:ba:de:23:cb:5d:8a:ff:d5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 15:40:42 2025 GMT Not After : May 12 14:40:42 2025 GMT Subject: CN=b4901895-87a8-4eec-ae40-8e7a311376bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:73:6c:26:c1:d6:48:67:76:f6:be:1e:34:b5: 0d:d1:b8:7f:ce:ab:e9:81:09:2c:b4:7d:7f:6f:a1: 96:40:df:6e:74:c2:b3:32:b6:83:20:49:0b:0e:f1: 1b:ef:38:76:d2:71:7f:f5:34:82:04:44:21:a7:00: d8:7d:a2:1c:b3:f8:7a:50:0b:14:99:c2:37:90:f8: d2:eb:7f:97:2b:13:5c:c1:c3:eb:91:a8:da:2a:c1: 9d:63:52:bc:21:53:b4:18:82:d5:7d:33:5d:6e:eb: e5:89:ff:8f:96:16:f1:29:01:da:aa:b0:fc:54:09: d3:2f:45:3b:55:1b:76:b2:5b:29:2d:55:53:a1:8b: 99:af:b8:8c:b1:05:6f:5a:1f:ef:b6:1e:95:22:5b: 32:c9:16:bd:13:62:db:0b:74:f5:26:7b:19:28:20: ba:41:0a:51:e9:33:88:5e:96:f9:36:02:73:52:53: 46:a5:18:82:bd:77:6b:03:61:d8:4f:97:77:58:94: 0b:a3:36:fb:e0:a9:7a:33:7b:97:ca:08:d1:10:ce: e6:56:85:73:12:b0:5e:ab:d5:33:99:6d:69:45:21: 70:cc:9c:fd:63:d3:a0:1b:c7:a2:75:f7:03:75:04: ca:70:e3:cc:65:ea:89:cb:4a:1d:e9:03:cf:9c:83: 12:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6C:CA:10:50:1E:DC:02:8B:F9:5B:7C:AE:9D:54:C3:36:78:7A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3bf08969-1a2a-3099-8f68-ad1f4c0f7ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:99:4f:78:59:be:5e:9a:5e:d3:3e:8d:39:68:2f:95:fd:95: ee:99:e3:3c:f7:6e:56:ea:e7:6a:b1:66:6a:37:4b:0a:a6:a9: 1e:8b:3c:e6:3d:40:cb:01:ba:a7:82:26:cc:7b:84:6e:23:ad: 6b:34:b5:23:3f:09:0b:82:05:06:fb:18:fd:8c:33:ac:c4:0c: 0f:9e:23:59:0e:fa:de:69:29:5f:a8:85:fe:d1:90:b5:10:2a: 3c:6f:64:c1:d8:2a:3e:86:6f:da:f7:c2:7f:e9:18:44:af:c4: 7e:29:9e:8e:7e:c6:63:6e:2e:cd:6e:81:8e:04:7e:a3:f4:78: 0f:26:ed:46:6e:91:3e:43:a6:42:82:9b:e4:45:90:70:7f:db: 5e:5e:f8:9a:19:b8:c3:46:5c:7f:3b:b5:e9:3b:a3:4d:85:62: 94:4b:ea:a6:62:af:99:a2:18:40:69:19:78:ce:04:a4:2b:9d: ba:07:4e:b9:3c:6a:bc:df:27:b9:26:bd:27:90:fa:80:0c:0f: c5:c5:a7:bb:91:e3:81:79:78:b0:43:55:cf:1c:1b:74:2e:5c: 30:43:e6:c8:67:20:a6:91:0e:5c:4a:16:af:57:bb:7f:c8:a5: 83:0c:40:5a:bc:12:54:22:52:64:78:25:e7:49:b3:bb:4a:d0: 12:dd:01:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZPT263iPLXYr/1fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE1NDA0MloXDTI1MDUxMjE0NDA0MlowLzEtMCsGA1UEAxMk YjQ5MDE4OTUtODdhOC00ZWVjLWFlNDAtOGU3YTMxMTM3NmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nNsJsHWSGd29r4eNLUN0bh/zqvpgQkstH1/ b6GWQN9udMKzMraDIEkLDvEb7zh20nF/9TSCBEQhpwDYfaIcs/h6UAsUmcI3kPjS 63+XKxNcwcPrkajaKsGdY1K8IVO0GILVfTNdbuvlif+PlhbxKQHaqrD8VAnTL0U7 VRt2slspLVVToYuZr7iMsQVvWh/vth6VIlsyyRa9E2LbC3T1JnsZKCC6QQpR6TOI Xpb5NgJzUlNGpRiCvXdrA2HYT5d3WJQLozb74Kl6M3uXygjREM7mVoVzErBeq9Uz mW1pRSFwzJz9Y9OgG8eidfcDdQTKcOPMZeqJy0od6QPPnIMSFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERsyhBQHtwCi/lbfK6dVMM2eHpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2JmMDg5NjktMWEyYS0z MDk5LThmNjgtYWQxZjRjMGY3ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaZT3hZvl6aXtM+jTloL5X9le6Z4zz3blbq52qxZmo3SwqmqR6LPOY9 QMsBuqeCJsx7hG4jrWs0tSM/CQuCBQb7GP2MM6zEDA+eI1kO+t5pKV+ohf7RkLUQ KjxvZMHYKj6Gb9r3wn/pGESvxH4pno5+xmNuLs1ugY4EfqP0eA8m7UZukT5DpkKC m+RFkHB/215e+JoZuMNGXH87tek7o02FYpRL6qZir5miGEBpGXjOBKQrnboHTrk8 arzfJ7kmvSeQ+oAMD8XFp7uR44F5eLBDVc8cG3QuXDBD5shnIKaRDlxKFq9Xu3/I pYMMQFq8ElQiUmR4JedJs7tK0BLdAZg= -----END CERTIFICATE-----Generated at Thu Apr 10 08:42:52 2025 by rpki-client