$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa File: 3cb30814-1743-3f4c-9f2b-43e764333641.roa (raw, json) Hash identifier: K6wP9rbgzCDcvSHRcl2Y70xXLz9XW+5ps4sBfQA6f1A= Subject key identifier: D3:45:A3:06:FD:17:2C:14:1B:33:1C:A7:4E:3F:04:5C:15:C9:96:5A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13AF04439269886E0F100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 202 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3a:f0:44:39:26:98:86:e0:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=3d053553-8d87-4218-8200-763aaa74ddb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:af:8a:c6:42:c3:dd:6d:60:75:9c:33:c6: a0:9d:74:c8:ca:ab:86:26:bd:b4:f9:8c:19:d9:f0: b3:63:b7:fe:82:7b:66:cc:f2:e6:a0:31:d5:e3:83: 82:5c:71:ca:b5:19:1f:1c:4b:6c:10:a5:de:2b:af: f5:d9:56:7d:33:1f:24:77:f5:93:27:47:58:6e:c8: 60:f5:5f:17:1e:36:25:51:5e:de:46:39:d3:76:25: 15:61:1e:10:cf:a4:ac:8d:0b:83:c1:43:ad:d3:fb: be:31:51:4a:92:c1:69:be:47:56:48:71:a9:9d:4e: 89:64:64:09:ba:69:b9:ed:cf:5f:74:72:32:72:9b: 69:ba:6c:7d:5f:e2:bd:7e:52:e6:83:71:11:74:59: 98:c4:df:45:71:05:62:72:ef:ed:e2:cd:b6:f6:0e: 99:3a:60:92:ce:de:2f:8f:5f:1e:34:1f:91:1e:69: 6d:a7:e3:39:6c:ab:f3:8c:b5:78:52:1e:94:81:e7: 9e:34:8a:05:fa:56:04:99:99:c0:df:9a:69:7e:70: 35:85:b0:0b:1f:5c:1a:e5:2a:a5:0e:2c:fe:28:24: ac:23:41:2e:2c:d8:01:7d:14:64:50:44:9a:52:e1: dd:a7:b0:cd:af:ab:c6:84:2f:4a:9c:09:8d:b8:cf: 62:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:45:A3:06:FD:17:2C:14:1B:33:1C:A7:4E:3F:04:5C:15:C9:96:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a8:12:fc:e4:ac:c7:02:c0:7d:b5:46:de:18:85:c8:e0:8e: 26:c8:d9:3b:13:61:5a:d1:cd:17:7c:3d:8f:ec:7f:b8:f9:fa: f7:16:15:4f:f5:ac:1f:f7:cb:fc:a7:cf:1f:2a:af:bd:43:39: 44:1c:66:ca:3c:96:08:b2:63:56:e9:6f:55:78:33:68:7e:12: fd:be:bc:56:29:0a:1b:47:42:d3:6d:3f:e9:f7:d2:f5:5c:d1: cc:93:8b:be:11:85:e9:fd:8b:d3:65:89:b0:9e:c1:f5:7e:82: 5d:67:81:b4:d8:fe:78:2e:6d:40:d2:49:2f:77:f4:ca:29:b7: 90:28:d6:dd:ab:12:51:ad:f8:06:e4:b4:b8:cc:e6:2b:ee:19: db:27:88:e5:f8:46:55:f1:cd:47:af:21:43:be:14:2c:5b:b9: bf:f2:ee:11:b2:8e:26:f4:90:d4:e0:e4:e6:10:0d:32:8c:19: 2b:12:3a:02:b4:08:b6:47:c8:6e:fa:54:f0:51:0c:07:14:11: 74:40:64:cb:7e:b1:5d:89:eb:50:95:e3:cd:ce:5d:14:1d:14: 1d:54:52:22:a2:4a:7d:49:a3:b3:5d:9c:df:9b:84:20:63:bd: bc:82:32:cb:cc:82:9b:46:80:d4:81:20:62:6f:e1:09:9c:9e: 82:bf:e8:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTrwRDkmmIbg8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk M2QwNTM1NTMtOGQ4Ny00MjE4LTgyMDAtNzYzYWFhNzRkZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHyvisZCw91tYHWcM8agnXTIyquGJr20+YwZ 2fCzY7f+gntmzPLmoDHV44OCXHHKtRkfHEtsEKXeK6/12VZ9Mx8kd/WTJ0dYbshg 9V8XHjYlUV7eRjnTdiUVYR4Qz6SsjQuDwUOt0/u+MVFKksFpvkdWSHGpnU6JZGQJ umm57c9fdHIycptpumx9X+K9flLmg3ERdFmYxN9FcQVicu/t4s229g6ZOmCSzt4v j18eNB+RHmltp+M5bKvzjLV4Uh6UgeeeNIoF+lYEmZnA35ppfnA1hbALH1wa5Sql Diz+KCSsI0EuLNgBfRRkUESaUuHdp7DNr6vGhC9KnAmNuM9i+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNFowb9FywUGzMcp04/BFwVyZZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2NiMzA4MTQtMTc0My0z ZjRjLTlmMmItNDNlNzY0MzMzNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6oEvzkrMcCwH21Rt4YhcjgjibI2TsTYVrRzRd8PY/sf7j5+vcWFU/1 rB/3y/ynzx8qr71DOUQcZso8lgiyY1bpb1V4M2h+Ev2+vFYpChtHQtNtP+n30vVc 0cyTi74Rhen9i9NlibCewfV+gl1ngbTY/ngubUDSSS939Mopt5Ao1t2rElGt+Abk tLjM5ivuGdsniOX4RlXxzUevIUO+FCxbub/y7hGyjib0kNTg5OYQDTKMGSsSOgK0 CLZHyG76VPBRDAcUEXRAZMt+sV2J61CV483OXRQdFB1UUiKiSn1Jo7NdnN+bhCBj vbyCMsvMgptGgNSBIGJv4QmcnoK/6Ew= -----END CERTIFICATE-----Generated at Fri Mar 14 09:51:49 2025 by rpki-client