$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa File: 4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa (raw, json) Hash identifier: Q3uptEJzaeCtLYy39os63TxiqKSEVpStKg5cBihs8O8= Subject key identifier: C7:B8:CA:E6:BD:34:BA:2B:35:D7:89:79:9B:98:79:24:B7:95:BE:8D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584883E5C7EDE3DC508FB96CF780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 3360 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:c7:ed:e3:dc:50:8f:b9:6c:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=45d81aa6-e0e7-45c0-b346-74c7d72409a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:21:8c:9e:6a:7e:f6:75:8b:42:13:2a:8d:c2: 8b:58:d7:8d:78:7d:eb:2e:6a:21:f5:ae:29:06:18: 9f:ac:85:5e:8f:37:62:45:2f:38:46:79:77:4e:06: 41:6c:f8:ee:58:d5:86:0f:5f:9c:5e:87:1d:31:16: 4d:a3:e5:8b:05:94:28:02:b4:28:c2:c2:42:fc:f2: 40:4c:7d:46:f7:4e:f7:44:a1:aa:e0:1e:06:fa:89: 72:8a:14:91:a1:93:ff:a8:8d:07:3a:ab:3d:46:53: 56:4a:fb:0a:51:34:f7:0a:90:e7:06:ba:c9:ce:9c: ad:e0:d6:4c:e3:da:43:58:a2:09:91:46:70:34:0f: 96:73:09:4c:fd:bb:ba:57:42:47:47:f2:30:9b:7a: ed:94:3f:8b:8f:5d:2d:ea:48:eb:86:e2:1a:4a:17: 3a:ed:f1:69:bf:d3:08:1f:81:96:1b:83:5f:74:3b: aa:69:33:cb:7a:0f:3c:5f:38:69:d7:0d:ea:2d:ce: 84:b6:89:0b:69:a5:b6:24:ec:0f:33:bb:55:74:6f: d1:29:46:ab:b9:7a:28:56:17:1c:46:4d:00:01:0a: 70:df:fc:21:d8:85:3c:51:bd:08:4b:f4:0c:af:82: 3a:a5:65:c7:b9:18:04:aa:a4:52:c7:aa:8d:8a:0e: cf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B8:CA:E6:BD:34:BA:2B:35:D7:89:79:9B:98:79:24:B7:95:BE:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c09d5df-7acd-34ec-ae11-062725ee7a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:bb:f6:fd:6c:ed:2a:3c:09:78:5f:1f:25:98:81:42:76:04: 7d:58:be:b6:a9:c7:29:4b:db:34:d6:5a:e2:e8:e8:e9:3a:6a: 84:44:6c:06:d6:8e:bf:9d:cb:a5:e1:01:74:d8:f7:a2:44:86: bf:b7:01:d0:57:32:3b:21:a3:6f:b5:23:4f:83:2e:d6:56:6f: 58:50:cb:f2:17:bd:04:88:fa:4f:b3:b2:85:ec:c6:f7:8a:62: cc:82:ad:d9:8e:1b:35:bd:d7:8f:3b:dd:78:b8:61:a0:11:1a: fc:56:f0:3a:6f:84:c3:c0:a8:c5:1a:29:d8:01:1b:06:e2:81: e5:42:47:8e:93:3e:83:da:14:6f:67:7b:f5:6e:a1:0f:99:c3: 90:42:9e:1b:0c:b2:f1:c4:f3:60:2c:74:21:47:52:89:fd:42: 6b:75:fb:f9:aa:4e:13:18:d2:72:e9:f6:7e:96:d5:45:6a:2d: 24:e4:38:b3:4d:fa:a7:c9:d0:fe:8d:ae:42:af:d0:c7:7b:45: fd:a4:19:31:0d:9f:11:18:9a:e4:b4:5a:a1:85:48:e7:18:44: 91:a4:11:8a:86:de:bd:35:bd:cd:39:eb:a3:34:f0:8a:a3:b3: 47:6f:76:50:ec:a1:49:5e:78:0d:e1:70:ec:a8:23:3b:50:a9: e8:01:d5:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5cft49xQj7ls94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk NDVkODFhYTYtZTBlNy00NWMwLWIzNDYtNzRjN2Q3MjQwOWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiGMnmp+9nWLQhMqjcKLWNeNeH3rLmoh9a4p BhifrIVejzdiRS84Rnl3TgZBbPjuWNWGD1+cXocdMRZNo+WLBZQoArQowsJC/PJA TH1G9073RKGq4B4G+olyihSRoZP/qI0HOqs9RlNWSvsKUTT3CpDnBrrJzpyt4NZM 49pDWKIJkUZwNA+WcwlM/bu6V0JHR/Iwm3rtlD+Lj10t6kjrhuIaShc67fFpv9MI H4GWG4NfdDuqaTPLeg88Xzhp1w3qLc6EtokLaaW2JOwPM7tVdG/RKUaruXooVhcc Rk0AAQpw3/wh2IU8Ub0IS/QMr4I6pWXHuRgEqqRSx6qNig7PHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMe4yua9NLorNdeJeZuYeSS3lb6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNGMwOWQ1ZGYtN2FjZC0z NGVjLWFlMTEtMDYyNzI1ZWU3YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHO79v1s7So8CXhfHyWYgUJ2BH1YvrapxylL2zTWWuLo6Ok6aoREbAbW jr+dy6XhAXTY96JEhr+3AdBXMjsho2+1I0+DLtZWb1hQy/IXvQSI+k+zsoXsxveK YsyCrdmOGzW914873Xi4YaARGvxW8DpvhMPAqMUaKdgBGwbigeVCR46TPoPaFG9n e/VuoQ+Zw5BCnhsMsvHE82AsdCFHUon9Qmt1+/mqThMY0nLp9n6W1UVqLSTkOLNN +qfJ0P6NrkKv0Md7Rf2kGTENnxEYmuS0WqGFSOcYRJGkEYqG3r01vc0566M08Iqj s0dvdlDsoUleeA3hcOyoIztQqegB1S4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:17 2025 by rpki-client