$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/446e2fb5-4ae1-350c-ac28-e9a2445d589d.roa File: 446e2fb5-4ae1-350c-ac28-e9a2445d589d.roa (raw, json) Hash identifier: k7DSV8EeOcFJg5haV48Hc1jB/LBO+hjZWAuh/zVp718= Subject key identifier: BA:D9:59:BB:F0:5F:E2:54:F5:02:B9:B8:5E:94:7A:2D:61:08:56:FB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE94536CEB5E5147E33000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/446e2fb5-4ae1-350c-ac28-e9a2445d589d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 3360 IP address blocks: 20.132.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:94:53:6c:eb:5e:51:47:e3:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=5f87271e-dba0-4c8b-a4dc-747db12a73a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ce:08:60:07:f6:c7:22:ed:1f:7d:b7:98:e5: 40:e8:cd:cf:64:e7:ad:37:9e:39:ee:52:e7:5d:de: 34:12:a8:d2:03:5a:27:51:61:0a:48:f5:50:12:f4: e9:95:c2:75:f0:76:cc:bb:07:55:35:f5:1f:28:c3: 1a:80:5e:c4:bb:b9:da:c4:af:a2:57:95:cb:b9:fa: b3:0e:18:d9:16:12:8b:f7:75:85:8a:2a:a8:76:42: e4:44:e3:70:a6:a4:54:c0:2b:e5:db:18:f3:21:7a: bd:5a:14:b4:15:bd:03:ac:b8:90:fa:7b:df:1d:1c: 71:eb:d1:40:2b:8f:00:20:57:98:d5:86:a7:83:b0: d1:2d:e9:01:57:58:e3:ad:f4:ed:42:f3:cb:9a:62: a4:4f:47:e7:d7:8b:61:90:e5:df:52:63:5b:9c:f6: fa:0b:f3:ce:45:17:93:d5:e9:99:ef:1f:cc:3d:b2: cf:68:82:d2:b3:93:8d:4f:e4:0a:85:4e:38:3c:e3: c5:6a:ad:95:02:7c:a5:e9:41:e5:39:af:22:52:c5: fd:49:26:12:95:8d:d1:ee:e5:08:ab:8c:f7:44:35: ad:9c:7f:b4:d6:e1:2f:8e:57:54:87:0a:89:2a:e6: 73:e5:15:7a:b8:32:5c:1b:31:3d:26:c0:b8:6e:e2: bd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D9:59:BB:F0:5F:E2:54:F5:02:B9:B8:5E:94:7A:2D:61:08:56:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/446e2fb5-4ae1-350c-ac28-e9a2445d589d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2b:86:1f:2b:0d:20:c8:e2:39:eb:4a:72:40:9b:0f:eb:f3: 17:f8:56:57:0c:dd:8d:3c:7d:c5:05:74:be:fb:ab:af:14:1d: ee:a1:70:89:12:f5:75:e3:e5:06:ae:6c:e3:83:76:f8:cd:28: 1e:25:8f:ef:ca:7c:7b:4c:b7:38:dc:db:76:a4:56:4c:d1:c4: ee:c8:1e:2b:f9:2d:99:b8:dd:a9:04:71:b8:4c:ff:70:97:2b: ef:5f:a1:e0:25:79:5f:8b:4d:0c:4e:b9:84:3f:21:18:b1:e9: ee:0c:69:97:80:4f:6f:eb:e4:6d:38:12:ae:d9:00:80:84:4a: 86:22:36:45:58:d7:1f:40:dc:9b:38:96:c4:97:4d:c8:df:61: 1d:fa:ee:45:86:02:47:ed:99:92:a4:01:e3:97:67:fb:c5:80: 89:b4:e0:27:87:40:f7:6a:64:6e:f4:27:57:f3:f2:0d:26:9f: 71:fc:85:6f:56:be:e4:fa:74:15:b0:ee:a1:ab:16:cb:6a:96: 0f:4b:75:fa:40:a8:de:5c:8c:12:fd:3a:79:c2:51:8b:e7:cf: a2:60:df:76:c2:2e:4f:6f:88:4a:8f:d4:7f:56:28:d4:c3:a7: e1:96:c4:53:82:3e:b2:2a:c0:b8:a0:7b:07:63:39:9b:4f:50: 99:70:a5:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpRTbOteUUfjMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NWY4NzI3MWUtZGJhMC00YzhiLWE0ZGMtNzQ3ZGIxMmE3M2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs4IYAf2xyLtH323mOVA6M3PZOetN5457lLn Xd40EqjSA1onUWEKSPVQEvTplcJ18HbMuwdVNfUfKMMagF7Eu7naxK+iV5XLufqz DhjZFhKL93WFiiqodkLkRONwpqRUwCvl2xjzIXq9WhS0Fb0DrLiQ+nvfHRxx69FA K48AIFeY1Yang7DRLekBV1jjrfTtQvPLmmKkT0fn14thkOXfUmNbnPb6C/PORReT 1emZ7x/MPbLPaILSs5ONT+QKhU44POPFaq2VAnyl6UHlOa8iUsX9SSYSlY3R7uUI q4z3RDWtnH+01uEvjldUhwqJKuZz5RV6uDJcGzE9JsC4buK9iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrZWbvwX+JU9QK5uF6Uei1hCFb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDQ2ZTJmYjUtNGFlMS0z NTBjLWFjMjgtZTlhMjQ0NWQ1ODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFErhh8rDSDI4jnrSnJAmw/r8xf4VlcM3Y08fcUFdL77q68UHe6hcIkS 9XXj5QaubOODdvjNKB4lj+/KfHtMtzjc23akVkzRxO7IHiv5LZm43akEcbhM/3CX K+9foeAleV+LTQxOuYQ/IRix6e4MaZeAT2/r5G04Eq7ZAICESoYiNkVY1x9A3Js4 lsSXTcjfYR367kWGAkftmZKkAeOXZ/vFgIm04CeHQPdqZG70J1fz8g0mn3H8hW9W vuT6dBWw7qGrFstqlg9LdfpAqN5cjBL9OnnCUYvnz6Jg33bCLk9viEqP1H9WKNTD p+GWxFOCPrIqwLigewdjOZtPUJlwpfk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:09:00 2025 by rpki-client