$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa File: 480a876e-f9de-3a86-b420-40e0c9062435.roa (raw, json) Hash identifier: odydHA5LXBDxCGhRvoE5Z8t0/XzwsRKCPAo5giU/GX0= Subject key identifier: B2:D7:38:B5:8E:3E:07:E4:18:A7:1A:2C:82:D8:41:CE:1E:52:6F:BB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13B973B17B03A01749900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 203 IP address blocks: 20.134.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3b:97:3b:17:b0:3a:01:74:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=5f671ebe-f2bf-4108-a607-2415bcb65177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:72:13:fb:5d:be:fd:1f:82:b9:59:12:80:99: 18:87:6c:13:dc:e5:c6:7d:5e:14:fb:41:05:83:84: 93:1a:f6:b4:bc:71:70:f9:78:b5:51:c7:d4:8c:13: 42:3c:49:a7:e7:4c:a6:af:81:a0:93:b1:ea:06:4a: 94:fe:e7:5b:e6:79:14:34:91:fb:f7:fd:8d:46:38: 1b:de:1d:6c:32:89:a9:2a:ca:60:69:bb:09:7e:71: 29:7a:94:82:49:18:c9:0c:56:6e:a0:1e:0f:79:14: aa:c6:07:65:c4:0c:64:89:be:df:9a:87:c3:31:70: 73:0e:17:08:9b:a8:7f:02:11:62:2e:dc:3a:93:31: f3:f0:3e:ab:44:bf:98:08:ef:1c:e7:de:43:b2:29: 4f:b9:02:3d:df:ce:a9:bd:27:1e:78:f5:be:a8:a8: c8:cb:ed:0d:f8:8e:b0:ac:28:29:72:54:51:89:fd: a9:71:c1:7a:10:6e:81:4d:a5:ff:78:50:7c:a5:0d: e6:6b:8e:7d:46:a3:7c:8b:18:39:3f:f5:50:99:67: 93:d3:cc:6d:e7:7c:ec:31:c1:4b:aa:58:bb:da:f0: 43:16:bb:16:ac:81:41:ee:49:01:7b:54:fa:a5:76: 20:cb:d8:5a:bb:90:5c:e1:3b:54:10:29:67:73:85: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D7:38:B5:8E:3E:07:E4:18:A7:1A:2C:82:D8:41:CE:1E:52:6F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:50:84:ac:90:53:39:57:c8:f5:9e:b2:64:7f:a6:0d:0e:f1: db:b2:04:88:df:12:ba:b1:0b:0f:b0:ad:ca:7f:25:77:86:5f: 43:df:5e:cc:b9:fd:a6:04:e0:40:85:25:f7:ae:4e:a6:eb:de: b6:4d:ef:93:6f:a6:d0:ce:23:65:d3:54:04:fd:5e:9d:70:d3: 13:85:7d:fb:66:89:13:e1:75:9e:2b:64:30:43:96:93:1e:e1: 84:12:f8:c7:0e:e8:d4:1a:8b:7c:62:12:49:81:78:49:f1:af: 7d:d4:59:60:ca:e7:4c:8f:b7:88:0f:55:fe:0d:c2:04:49:2d: 9e:de:3d:ab:c4:34:47:20:6b:c0:df:6f:69:92:18:52:b1:62: cb:98:4b:a7:fd:57:a2:66:ff:54:f8:61:3d:e2:54:eb:eb:92: b4:a2:03:77:a2:ed:c2:e2:4a:b2:78:1b:6e:b8:cf:e4:6d:47: 25:61:b2:e0:01:e8:43:54:ea:d4:72:62:df:fe:a4:33:1f:5d: b6:4f:6e:a0:da:37:2b:21:c8:0f:aa:d6:0a:44:78:26:96:ac: e7:84:a3:bb:0d:35:6a:17:b8:30:d6:42:cb:09:10:0f:cf:a0: 59:53:97:7f:b5:d6:5c:b6:97:bf:0a:36:53:45:cb:b9:ac:13: 4c:6f:41:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTuXOxewOgF0mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk NWY2NzFlYmUtZjJiZi00MTA4LWE2MDctMjQxNWJjYjY1MTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nIT+12+/R+CuVkSgJkYh2wT3OXGfV4U+0EF g4STGva0vHFw+Xi1UcfUjBNCPEmn50ymr4Ggk7HqBkqU/udb5nkUNJH79/2NRjgb 3h1sMompKspgabsJfnEpepSCSRjJDFZuoB4PeRSqxgdlxAxkib7fmofDMXBzDhcI m6h/AhFiLtw6kzHz8D6rRL+YCO8c595DsilPuQI9386pvSceePW+qKjIy+0N+I6w rCgpclRRif2pccF6EG6BTaX/eFB8pQ3ma459RqN8ixg5P/VQmWeT08xt53zsMcFL qli72vBDFrsWrIFB7kkBe1T6pXYgy9hau5Bc4TtUEClnc4XAkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLXOLWOPgfkGKcaLILYQc4eUm+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDgwYTg3NmUtZjlkZS0z YTg2LWI0MjAtNDBlMGM5MDYyNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJQhKyQUzlXyPWesmR/pg0O8duyBIjfErqxCw+wrcp/JXeGX0PfXsy5 /aYE4ECFJfeuTqbr3rZN75NvptDOI2XTVAT9Xp1w0xOFfftmiRPhdZ4rZDBDlpMe 4YQS+McO6NQai3xiEkmBeEnxr33UWWDK50yPt4gPVf4NwgRJLZ7ePavENEcga8Df b2mSGFKxYsuYS6f9V6Jm/1T4YT3iVOvrkrSiA3ei7cLiSrJ4G264z+RtRyVhsuAB 6ENU6tRyYt/+pDMfXbZPbqDaNyshyA+q1gpEeCaWrOeEo7sNNWoXuDDWQssJEA/P oFlTl3+11ly2l78KNlNFy7msE0xvQRA= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:13 2025 by rpki-client