$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c63304e-66b9-3726-9842-2f821bb164fd.roa File: 4c63304e-66b9-3726-9842-2f821bb164fd.roa (raw, json) Hash identifier: yXlS9oJsh9KqgBtZWxB5i//dBM9qvLf5KBaUaE4K+NY= Subject key identifier: DE:5F:5A:38:BB:18:D9:80:26:BD:90:86:E8:E9:3E:62:68:40:F7:72 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F4F6A49D4B88324ED0D667B0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c63304e-66b9-3726-9842-2f821bb164fd.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 3360 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a4:9d:4b:88:32:4e:d0:d6:67:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=33fec40a-12fd-4a19-9524-ba4c87b3e72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:35:8d:cc:ac:29:09:17:c6:b5:00:87:bc:e3: 92:26:49:a4:9b:ed:f2:bb:09:0e:cf:95:47:f2:54: 68:a1:73:8d:06:60:43:48:0b:30:d0:86:3c:14:9f: 97:5d:15:62:50:34:cc:7f:25:5b:a3:23:95:f7:72: 99:5c:01:97:00:59:f3:76:e1:aa:8e:04:fd:98:6b: 28:e2:ae:e7:f3:bf:6f:16:4a:02:0c:f9:4a:e1:ab: c8:e2:b0:ae:58:c0:05:4f:7e:67:b5:02:0e:bb:8b: 0e:68:f0:b9:67:cf:ea:16:85:c6:21:94:76:3f:28: 17:da:1f:01:69:76:cc:d9:97:36:1b:fd:26:8b:1c: 70:04:0c:43:d2:65:eb:6f:01:d8:1c:df:36:2f:24: a1:32:8c:48:a1:51:47:ec:6b:80:76:f6:ab:24:ec: 77:40:b4:2a:4b:2a:14:97:5a:65:7a:2e:86:f1:4d: 7d:d8:0e:bc:99:ef:11:38:b8:ae:0c:76:6c:38:d8: e9:e2:25:9e:83:71:b4:f5:a1:cb:6f:d1:cf:40:39: f1:e4:49:27:44:5c:4e:41:36:5e:4b:f9:4f:c6:31: 28:0d:8d:27:10:fe:e7:1c:82:5d:f7:f8:d6:6e:f5: 5c:a8:86:02:53:7c:7f:36:83:b6:be:c7:26:c4:7a: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5F:5A:38:BB:18:D9:80:26:BD:90:86:E8:E9:3E:62:68:40:F7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c63304e-66b9-3726-9842-2f821bb164fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:cc:07:b7:69:6a:fb:72:3e:0a:1f:d8:17:bd:1f:3f:ff:fa: c9:14:82:19:0e:45:29:61:55:8d:2b:e9:8a:0f:7d:9d:09:94: bf:2d:4a:6d:ef:41:db:6c:61:dc:71:46:d2:23:11:f1:ac:a3: d3:a3:6f:b7:81:39:09:86:09:07:32:9c:78:cc:8c:d7:38:69: 77:f7:7d:bf:7e:c0:66:11:c9:74:3b:46:c4:80:65:4c:4a:67: f8:f5:ee:5a:73:ae:da:91:2b:51:3c:70:56:24:55:f2:1b:01: 05:ef:3b:76:a0:d5:8e:63:70:ad:b4:bf:3a:93:7b:99:94:c1: 6c:13:66:b5:c8:ce:13:88:5b:7d:ab:b3:08:b2:b8:4f:bf:62: d2:6b:d6:a1:2f:f2:e0:8f:d7:2c:ac:a8:bc:59:e6:7c:ed:2e: 34:28:4d:90:c1:1f:ff:0d:b7:64:d1:f3:8f:49:92:d3:43:7d: c3:15:23:e5:13:fb:9b:fa:da:22:1e:d3:7e:99:a5:62:7d:de: b7:b9:20:b4:86:da:ce:8f:10:93:fa:c8:f1:77:18:ce:01:30: 21:5b:82:f0:36:53:2a:cd:6a:af:67:4e:77:cb:88:e1:b4:f5: 24:d7:65:f0:9e:7b:5d:ca:55:a9:ea:f7:00:b0:2c:5f:db:31: 69:d2:75:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qSdS4gyTtDWZ7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MzNmZWM0MGEtMTJmZC00YTE5LTk1MjQtYmE0Yzg3YjNlNzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjWNzKwpCRfGtQCHvOOSJkmkm+3yuwkOz5VH 8lRooXONBmBDSAsw0IY8FJ+XXRViUDTMfyVboyOV93KZXAGXAFnzduGqjgT9mGso 4q7n879vFkoCDPlK4avI4rCuWMAFT35ntQIOu4sOaPC5Z8/qFoXGIZR2PygX2h8B aXbM2Zc2G/0mixxwBAxD0mXrbwHYHN82LyShMoxIoVFH7GuAdvarJOx3QLQqSyoU l1plei6G8U192A68me8ROLiuDHZsONjp4iWeg3G09aHLb9HPQDnx5EknRFxOQTZe S/lPxjEoDY0nEP7nHIJd9/jWbvVcqIYCU3x/NoO2vscmxHpkZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5fWji7GNmAJr2QhujpPmJoQPdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNGM2MzMwNGUtNjZiOS0z NzI2LTk4NDItMmY4MjFiYjE2NGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3MB7dpavtyPgof2Be9Hz//+skUghkORSlhVY0r6YoPfZ0JlL8tSm3v QdtsYdxxRtIjEfGso9Ojb7eBOQmGCQcynHjMjNc4aXf3fb9+wGYRyXQ7RsSAZUxK Z/j17lpzrtqRK1E8cFYkVfIbAQXvO3ag1Y5jcK20vzqTe5mUwWwTZrXIzhOIW32r swiyuE+/YtJr1qEv8uCP1yysqLxZ5nztLjQoTZDBH/8Nt2TR849JktNDfcMVI+UT +5v62iIe036ZpWJ93re5ILSG2s6PEJP6yPF3GM4BMCFbgvA2UyrNaq9nTnfLiOG0 9STXZfCee13KVanq9wCwLF/bMWnSdcc= -----END CERTIFICATE-----Generated at Fri Mar 14 08:47:05 2025 by rpki-client