$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa File: 48d31edc-bef9-3b8a-8019-51240e7e896a.roa (raw, json) Hash identifier: XUbvJ1W1BDO7B1OUr67sFQlFxlNekDjeEgdPvi7+sFU= Subject key identifier: 04:4C:A2:34:0A:6F:74:23:89:C6:C9:BD:05:D0:FF:A2:33:1F:7F:8B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858481705117E73E7A7369410E520 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa Signing time: Wed 04 Dec 2024 02:00:39 +0000 ROA not before: Wed 04 Dec 2024 02:00:39 +0000 ROA not after: Tue 04 Mar 2025 02:00:39 +0000 asID: 203 IP address blocks: 20.154.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:17:05:11:7e:73:e7:a7:36:94:10:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 4 02:00:39 2024 GMT Not After : Mar 4 02:00:39 2025 GMT Subject: CN=3d7164b1-9563-4c5c-aa57-3c2f4e2b1f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:ec:7c:40:23:8a:96:6a:74:94:8b:08:04: f7:6e:b0:fb:df:75:16:a1:93:01:55:cd:bc:63:9d: 2b:9f:db:e8:29:cd:ec:ea:9a:16:bc:ac:72:8a:18: c6:d1:31:f5:24:d1:b9:87:72:fc:b2:ad:13:f2:ac: 7a:d6:71:59:c7:65:d2:5c:8d:1c:cc:fe:73:7a:cf: 05:66:4b:e7:c7:84:b4:0f:4f:3e:6d:88:1e:73:1b: f0:68:db:90:ae:90:01:00:12:77:55:66:30:bb:cb: 41:71:ff:a9:0d:73:17:71:2b:27:65:54:90:25:89: 00:2a:09:84:65:45:e2:79:72:ff:c5:a8:f2:0c:ce: f2:3c:fc:65:b4:5d:57:f0:27:9d:fa:67:0c:c5:0c: a8:a3:6e:04:ce:5b:0f:7d:03:98:7d:6e:23:70:85: c6:f4:2b:b8:e6:dd:5c:25:bd:d2:c5:bf:69:aa:b1: 39:f7:a0:41:94:59:92:5b:aa:90:ef:27:b1:06:53: 70:6c:a0:b8:4e:35:9c:b4:ca:b3:49:b4:d6:ad:7c: 91:8d:71:c3:15:64:67:96:30:32:db:37:7e:ba:4f: 17:b3:33:8d:ca:6d:57:72:1d:15:94:f5:17:c5:ae: 31:18:ba:f4:13:f5:0d:3a:58:76:a5:2e:c4:12:9c: 1f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4C:A2:34:0A:6F:74:23:89:C6:C9:BD:05:D0:FF:A2:33:1F:7F:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.154.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:35:f4:9c:57:bc:fb:22:3f:4d:a7:27:11:1a:7b:e8:be:39: 83:20:ea:14:1e:57:a6:34:3c:d5:38:74:e6:88:3b:48:b0:ec: b2:5a:c8:67:c5:0c:dc:9e:54:9c:09:51:f2:37:ef:d7:3e:e6: 8e:96:6f:2e:69:ba:52:bd:0b:31:ca:8b:89:de:f2:d4:c1:ae: d0:ef:10:f5:b8:d5:78:83:36:c4:bc:bc:ba:58:d3:e1:0d:f9: 2b:68:dc:58:63:80:71:d9:65:18:87:29:7f:c2:a4:b6:59:57: 80:81:5e:e1:b9:dd:af:d2:0d:6a:7b:d8:67:ed:80:96:78:04: a0:0b:8f:80:03:f4:c0:12:4d:f7:f8:1c:8b:4f:85:d7:7d:15: 9e:8b:eb:70:59:65:b8:b2:35:86:79:73:8d:38:eb:8d:ed:8a: 63:29:35:3d:f5:11:dd:9f:47:62:cb:ea:19:02:d2:57:78:65: 44:49:54:d0:46:c5:1a:22:1d:80:35:04:30:26:05:34:6f:00: 86:bc:b9:cb:e2:65:b5:19:9f:8d:3a:e9:54:99:e9:09:74:9d: 71:a4:65:db:15:1a:f0:e5:c0:21:23:78:64:1b:5a:a3:8e:e8: e6:2a:3c:f7:f5:09:77:6a:dc:2c:d1:af:d1:2f:37:1c:b5:7e: 9a:66:f8:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXBRF+c+enNpQQ5SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIwNDAyMDAzOVoXDTI1MDMwNDAyMDAzOVowLzEtMCsGA1UEAxMk M2Q3MTY0YjEtOTU2My00YzVjLWFhNTctM2MyZjRlMmIxZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsnsfEAjipZqdJSLCAT3brD733UWoZMBVc28 Y50rn9voKc3s6poWvKxyihjG0TH1JNG5h3L8sq0T8qx61nFZx2XSXI0czP5zes8F Zkvnx4S0D08+bYgecxvwaNuQrpABABJ3VWYwu8tBcf+pDXMXcSsnZVSQJYkAKgmE ZUXieXL/xajyDM7yPPxltF1X8Ced+mcMxQyoo24EzlsPfQOYfW4jcIXG9Cu45t1c Jb3Sxb9pqrE596BBlFmSW6qQ7yexBlNwbKC4TjWctMqzSbTWrXyRjXHDFWRnljAy 2zd+uk8XszONym1Xch0VlPUXxa4xGLr0E/UNOlh2pS7EEpwfOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARMojQKb3QjicbJvQXQ/6IzH3+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDhkMzFlZGMtYmVmOS0z YjhhLTgwMTktNTEyNDBlN2U4OTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJpaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM19JxXvPsiP02nJxEae+i+OYMg6hQeV6Y0PNU4dOaIO0iw7LJayGfF DNyeVJwJUfI379c+5o6Wby5pulK9CzHKi4ne8tTBrtDvEPW41XiDNsS8vLpY0+EN +Sto3FhjgHHZZRiHKX/CpLZZV4CBXuG53a/SDWp72GftgJZ4BKALj4AD9MASTff4 HItPhdd9FZ6L63BZZbiyNYZ5c404643timMpNT31Ed2fR2LL6hkC0ld4ZURJVNBG xRoiHYA1BDAmBTRvAIa8ucviZbUZn4066VSZ6Ql0nXGkZdsVGvDlwCEjeGQbWqOO 6OYqPPf1CXdq3CzRr9EvNxy1fppm+Ko= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:47 2025 by rpki-client