$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa File: 5237c2a4-4861-320a-8193-cd92a08fc31f.roa (raw, json) Hash identifier: ePZhHVjfG7oov/HQV2e0+/ZE/i6NT82moURoNDs8CMo= Subject key identifier: 2C:0F:CF:72:F1:5D:06:B3:97:B7:D1:A7:8E:FE:A2:CE:C8:4A:4E:71 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848B35B6C614E51F64E5AC54780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 3360 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6c:61:4e:51:f6:4e:5a:c5:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=9f411542-f38f-4015-9310-ac0cab870b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:86:a8:ce:e2:0c:2a:3e:1e:8b:7f:c6:eb: 38:12:2e:b2:df:06:24:77:bc:4c:54:b2:01:e5:c6: 0d:00:fe:c9:1d:e8:10:2a:f2:80:08:ee:3e:85:02: eb:45:a8:c8:33:72:12:6f:c2:6f:18:cb:a6:24:91: fc:57:4c:bd:70:9f:53:c0:f6:2e:b3:9b:12:73:fc: e0:5b:fc:0d:73:b8:0c:04:a7:6a:14:01:b6:75:7e: 83:46:7d:a3:b7:c7:78:9d:57:6b:2e:3d:b1:78:04: 3f:9d:39:f9:ce:89:7b:ae:76:72:b9:cd:e5:9e:51: 14:12:06:e1:95:70:62:7d:b3:93:5b:a7:db:28:24: 63:70:fb:c2:89:69:da:2f:35:19:93:da:2d:1d:71: 12:d6:97:f1:24:ed:60:6d:e5:05:f8:fa:ad:b0:17: de:ea:d7:fe:bc:62:02:81:82:57:fe:ec:14:37:19: f8:15:46:30:d5:ac:80:73:68:e9:a6:18:ea:0c:71: 5a:6f:af:9d:97:f5:da:ad:93:0e:ef:17:eb:6f:53: 5b:91:6c:1a:30:9e:00:84:42:94:f1:fa:df:ff:ff: 58:85:cc:77:6d:2f:ea:d3:f9:c1:a7:53:6d:6e:31: 32:89:85:4c:e6:dc:05:81:e6:18:13:49:f4:dc:76: ee:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0F:CF:72:F1:5D:06:B3:97:B7:D1:A7:8E:FE:A2:CE:C8:4A:4E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:04:65:3a:e7:67:85:7b:79:4a:7d:10:3c:68:4c:0a:5d:fd: 40:80:99:81:a4:39:c7:3a:87:74:0d:6e:1f:70:7a:5a:15:10: 8b:39:05:28:09:ad:b1:9c:f6:d6:11:71:fe:24:c7:e9:1f:25: c2:a1:f7:49:9f:a7:2e:50:ac:8b:63:6d:b3:22:df:32:7c:89: 1c:33:6f:5d:53:f3:db:3b:22:60:e9:9a:fb:f5:24:95:5a:82: 1a:71:48:5a:60:a3:4c:f1:03:0e:21:da:74:d0:6a:ce:04:99: e6:a0:53:be:e3:10:33:ce:6f:56:2a:92:cf:ef:00:89:02:1a: c4:28:d9:56:6a:1e:d3:03:41:a1:b8:a2:c4:ed:85:e2:96:17: 16:9f:da:06:e7:1e:1c:eb:10:bd:14:6d:64:dc:46:51:dd:e7: b5:d0:74:a7:b3:e6:e7:a3:4f:03:61:2c:92:22:9c:83:13:fa: 56:76:ce:82:f0:61:22:ab:0d:57:8c:18:88:ce:33:00:da:71: 4f:53:91:5e:ef:27:f8:7f:ee:27:66:16:59:54:88:5e:f1:8d: 41:00:73:fa:0e:ab:ed:0c:b4:ee:00:e8:87:15:6d:0c:3b:5d: 4b:29:70:e3:3e:08:de:f8:a1:22:27:84:01:89:1b:e4:65:81: b0:ab:10:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2xhTlH2TlrFR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk OWY0MTE1NDItZjM4Zi00MDE1LTkzMTAtYWMwY2FiODcwYjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfKGqM7iDCo+Hot/xus4Ei6y3wYkd7xMVLIB 5cYNAP7JHegQKvKACO4+hQLrRajIM3ISb8JvGMumJJH8V0y9cJ9TwPYus5sSc/zg W/wNc7gMBKdqFAG2dX6DRn2jt8d4nVdrLj2xeAQ/nTn5zol7rnZyuc3lnlEUEgbh lXBifbOTW6fbKCRjcPvCiWnaLzUZk9otHXES1pfxJO1gbeUF+PqtsBfe6tf+vGIC gYJX/uwUNxn4FUYw1ayAc2jpphjqDHFab6+dl/XarZMO7xfrb1NbkWwaMJ4AhEKU 8frf//9Yhcx3bS/q0/nBp1NtbjEyiYVM5twFgeYYE0n03HburwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwPz3LxXQazl7fRp47+os7ISk5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTIzN2MyYTQtNDg2MS0z MjBhLTgxOTMtY2Q5MmEwOGZjMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0EZTrnZ4V7eUp9EDxoTApd/UCAmYGkOcc6h3QNbh9weloVEIs5BSgJ rbGc9tYRcf4kx+kfJcKh90mfpy5QrItjbbMi3zJ8iRwzb11T89s7ImDpmvv1JJVa ghpxSFpgo0zxAw4h2nTQas4EmeagU77jEDPOb1Yqks/vAIkCGsQo2VZqHtMDQaG4 osTtheKWFxaf2gbnHhzrEL0UbWTcRlHd57XQdKez5uejTwNhLJIinIMT+lZ2zoLw YSKrDVeMGIjOMwDacU9TkV7vJ/h/7idmFllUiF7xjUEAc/oOq+0MtO4A6IcVbQw7 XUspcOM+CN74oSInhAGJG+RlgbCrEJ4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:48 2025 by rpki-client