$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa File: 3cb30814-1743-3f4c-9f2b-43e764333641.roa (raw, json) Hash identifier: xm6h2NE+wRkkg+HhbALkGH4YRpmQ1lncvLr9pnnJNwk= Subject key identifier: 14:29:64:C2:DD:16:B5:8B:55:DE:98:A5:41:8C:FB:74:A1:FD:4F:77 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584817050F20F0B358E060E6A440 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa Signing time: Wed 04 Dec 2024 02:00:39 +0000 ROA not before: Wed 04 Dec 2024 02:00:39 +0000 ROA not after: Tue 04 Mar 2025 02:00:39 +0000 asID: 202 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:17:05:0f:20:f0:b3:58:e0:60:e6:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 4 02:00:39 2024 GMT Not After : Mar 4 02:00:39 2025 GMT Subject: CN=129fd54c-c2f4-4c4e-9580-fc6f23105ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:7b:ae:f3:4c:77:37:88:3d:32:5a:c9:8a: a0:cf:a9:fb:96:79:42:c3:dc:61:ce:0d:3a:20:2f: 35:ed:1a:77:6f:e2:dc:85:7a:36:09:1e:81:fe:04: 2b:66:1d:01:00:14:59:97:85:62:34:16:82:d0:df: 1b:1f:ba:c6:bb:c9:b9:42:7f:f0:c4:25:69:bb:28: 0f:5b:c1:20:a1:51:73:d5:14:8c:c8:ad:7a:25:3a: d8:f9:80:67:e2:e4:e5:fe:a3:49:00:36:b0:6c:3a: 8b:96:96:d5:5c:31:f1:8c:50:13:e8:99:4d:ad:f4: 94:d1:b3:2c:b1:b4:c4:e7:9a:90:93:17:35:d6:df: 9a:2e:1c:83:b9:e9:c9:6f:c0:e0:9c:3c:c2:64:5e: 70:d7:7c:4b:2d:b3:89:af:08:9e:f7:62:33:9e:5e: cf:3b:3e:08:76:91:37:78:4d:cc:6e:d5:38:9b:68: 3a:c1:fe:f0:99:47:77:e2:86:bf:e2:61:47:be:20: 55:36:9c:51:39:ee:86:bd:1b:ff:c7:39:df:4c:3d: b1:a9:f7:f9:a6:f8:bc:ea:5f:fa:ce:99:0a:12:3b: 97:a9:bc:65:f2:21:7b:54:79:ea:92:d0:a0:ac:ff: 10:1e:b8:bc:8f:5e:80:07:85:5b:e0:1f:ff:b8:65: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:29:64:C2:DD:16:B5:8B:55:DE:98:A5:41:8C:FB:74:A1:FD:4F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:04:a0:65:6d:12:59:3d:ba:51:66:bd:ac:01:c9:50:84:1c: 0c:a0:c4:bc:dd:82:57:7f:b2:4e:29:31:bb:05:2a:b0:44:53: 52:20:80:67:8b:2e:2c:2d:78:58:c8:c0:af:f8:01:7d:53:87: 36:30:d6:d0:dd:08:99:04:5c:d1:fd:ca:f0:b0:78:bc:f8:88: 68:64:87:d9:f4:2c:00:6c:34:46:3e:fa:3d:5d:7c:27:f3:1e: 6c:f8:d3:92:af:7b:bc:80:60:16:32:9a:e1:fd:72:e1:a9:dd: ed:0d:21:93:b5:02:3a:19:25:d9:fe:b4:54:fc:c6:71:8e:20: bc:ac:48:10:2c:21:0d:77:78:b8:4a:e6:3f:15:51:14:86:b1: e9:d4:9d:f7:83:3a:80:f7:75:32:97:84:c2:f8:c4:dc:a9:81: 12:0f:99:2c:a6:75:d8:27:84:c9:04:32:00:3d:25:f3:6b:20: 83:08:7f:41:cc:fe:86:47:d7:0c:b6:1c:5a:f7:ac:2c:60:df: 4c:cc:ef:61:12:56:7d:67:8e:05:64:ba:18:7b:db:9a:6f:60: 28:6e:02:16:1b:2e:5a:61:58:54:54:94:5a:dc:24:f7:40:85: 26:4c:f1:8f:9f:7a:01:ca:64:d9:44:33:1d:fd:ac:ac:70:21: 8a:e2:10:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXBQ8g8LNY4GDmpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIwNDAyMDAzOVoXDTI1MDMwNDAyMDAzOVowLzEtMCsGA1UEAxMk MTI5ZmQ1NGMtYzJmNC00YzRlLTk1ODAtZmM2ZjIzMTA1ZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulx7rvNMdzeIPTJayYqgz6n7lnlCw9xhzg06 IC817Rp3b+LchXo2CR6B/gQrZh0BABRZl4ViNBaC0N8bH7rGu8m5Qn/wxCVpuygP W8EgoVFz1RSMyK16JTrY+YBn4uTl/qNJADawbDqLlpbVXDHxjFAT6JlNrfSU0bMs sbTE55qQkxc11t+aLhyDuenJb8DgnDzCZF5w13xLLbOJrwie92Iznl7POz4IdpE3 eE3MbtU4m2g6wf7wmUd34oa/4mFHviBVNpxROe6GvRv/xznfTD2xqff5pvi86l/6 zpkKEjuXqbxl8iF7VHnqktCgrP8QHri8j16AB4Vb4B//uGW4yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQpZMLdFrWLVd6YpUGM+3Sh/U93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2NiMzA4MTQtMTc0My0z ZjRjLTlmMmItNDNlNzY0MzMzNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4EoGVtElk9ulFmvawByVCEHAygxLzdgld/sk4pMbsFKrBEU1IggGeL LiwteFjIwK/4AX1ThzYw1tDdCJkEXNH9yvCweLz4iGhkh9n0LABsNEY++j1dfCfz Hmz405Kve7yAYBYymuH9cuGp3e0NIZO1AjoZJdn+tFT8xnGOILysSBAsIQ13eLhK 5j8VURSGsenUnfeDOoD3dTKXhML4xNypgRIPmSymddgnhMkEMgA9JfNrIIMIf0HM /oZH1wy2HFr3rCxg30zM72ESVn1njgVkuhh725pvYChuAhYbLlphWFRUlFrcJPdA hSZM8Y+fegHKZNlEMx39rKxwIYriEMI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:33 2025 by rpki-client