$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa File: 53fb2e37-5e98-3242-85b4-dc0598c808e7.roa (raw, json) Hash identifier: ltx4Fe/dJy4NB7FJ7/n4k/+lI7f3T2LBzF2JmmWy3II= Subject key identifier: 39:36:F5:1F:6E:7C:45:DA:28:EA:70:C9:EB:CD:9D:34:01:83:42:82 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D945D0CC03C9118A1F62F800 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa Signing time: Tue 11 Feb 2025 15:57:58 +0000 ROA not before: Tue 11 Feb 2025 15:57:58 +0000 ROA not after: Mon 12 May 2025 14:57:58 +0000 asID: 3356 IP address blocks: 20.149.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:45:d0:cc:03:c9:11:8a:1f:62:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 15:57:58 2025 GMT Not After : May 12 14:57:58 2025 GMT Subject: CN=d5fdf317-9773-4786-8ee9-18b95c5cd088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:b0:6c:b9:0c:d2:8d:21:8d:81:25:a6:91: a6:3d:db:60:ca:78:d0:f6:96:bf:1b:24:14:32:23: 00:bf:0f:bd:c4:79:b0:a1:86:e4:ac:13:fe:be:f8: 85:29:f0:bd:bb:33:bf:53:6c:ad:fb:3b:46:a6:1e: 87:ac:d2:f2:47:04:97:95:8b:1d:98:78:46:0f:b7: 6f:b6:ae:00:7d:fc:8e:55:1e:5c:42:57:fc:28:bc: 3b:c0:27:e0:bd:2d:ea:16:6e:d7:b9:5a:50:72:fa: 36:6a:5d:bc:3a:78:a8:67:b3:7c:5c:f9:f5:93:8b: 7f:75:60:b0:38:71:93:57:0f:a0:81:20:c8:fb:27: b1:82:91:fa:71:cc:48:b4:10:24:fc:82:a3:ac:ab: d6:66:5d:39:d3:b7:6f:a8:47:11:31:fb:80:06:a1: 9d:e1:f9:38:cc:68:2c:28:93:2d:50:ca:2e:3c:c5: 64:11:56:1c:ed:6e:67:85:b2:5a:63:3f:35:36:90: 59:7b:93:d7:07:49:08:73:4c:40:38:cb:e0:33:ff: 9f:25:90:51:8e:47:eb:13:88:6e:23:6b:80:c1:60: 62:51:1c:cb:01:4b:e0:f2:1b:04:fc:5e:71:bf:04: 37:ae:d8:d0:c5:7f:d5:13:29:a6:0e:81:67:6f:58: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:36:F5:1F:6E:7C:45:DA:28:EA:70:C9:EB:CD:9D:34:01:83:42:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:0b:b9:91:9a:d3:2a:71:0d:9e:f7:10:e8:c1:7d:78:4d:6f: 3e:e0:90:b1:d2:f1:70:df:41:60:2d:17:eb:10:1a:3b:5d:6d: 66:8e:56:b1:80:5a:5c:8f:f5:21:9c:10:74:37:1d:8d:40:cf: 6c:4d:8e:72:73:6d:8d:39:04:4e:f0:19:73:18:0b:51:06:c3: 43:fc:26:bf:41:b9:66:6c:f3:26:e9:95:c0:93:e4:e9:be:ee: be:98:61:63:81:44:fc:ec:42:09:84:a2:20:14:84:9e:ba:c0: 17:51:48:d4:a5:28:8f:61:e6:89:ed:b5:5a:07:46:d3:3c:ab: 2d:fd:64:01:45:9c:6a:87:45:8f:14:fe:e5:7c:ba:e1:d2:60: 54:13:ef:a8:e8:06:7c:b5:e4:96:60:cc:17:86:28:4e:f0:65: 06:1a:64:9d:65:83:f6:0e:73:02:03:b5:83:20:8d:73:b8:ee: df:e1:1c:d2:b3:d4:08:a0:79:c9:cc:2c:0c:4d:c6:81:7b:5b: 61:7b:bf:ed:5b:d1:94:22:c0:47:7a:e1:5d:8e:78:0f:b8:16: 56:6b:ca:ab:31:1c:2d:d9:57:ba:bd:ac:a9:2f:75:ac:97:51: ae:bc:ef:1d:4f:9e:03:0b:56:5d:d2:78:ff:ef:17:25:36:ab: b0:93:ae:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZRdDMA8kRih9i+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE1NTc1OFoXDTI1MDUxMjE0NTc1OFowLzEtMCsGA1UEAxMk ZDVmZGYzMTctOTc3My00Nzg2LThlZTktMThiOTVjNWNkMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziOwbLkM0o0hjYElppGmPdtgynjQ9pa/GyQU MiMAvw+9xHmwoYbkrBP+vviFKfC9uzO/U2yt+ztGph6HrNLyRwSXlYsdmHhGD7dv tq4AffyOVR5cQlf8KLw7wCfgvS3qFm7XuVpQcvo2al28OnioZ7N8XPn1k4t/dWCw OHGTVw+ggSDI+yexgpH6ccxItBAk/IKjrKvWZl0507dvqEcRMfuABqGd4fk4zGgs KJMtUMouPMVkEVYc7W5nhbJaYz81NpBZe5PXB0kIc0xAOMvgM/+fJZBRjkfrE4hu I2uAwWBiURzLAUvg8hsE/F5xvwQ3rtjQxX/VEymmDoFnb1iSiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk29R9ufEXaKOpwyevNnTQBg0KCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTNmYjJlMzctNWU5OC0z MjQyLTg1YjQtZGMwNTk4YzgwOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoLuZGa0ypxDZ73EOjBfXhNbz7gkLHS8XDfQWAtF+sQGjtdbWaOVrGA WlyP9SGcEHQ3HY1Az2xNjnJzbY05BE7wGXMYC1EGw0P8Jr9BuWZs8ybplcCT5Om+ 7r6YYWOBRPzsQgmEoiAUhJ66wBdRSNSlKI9h5onttVoHRtM8qy39ZAFFnGqHRY8U /uV8uuHSYFQT76joBny15JZgzBeGKE7wZQYaZJ1lg/YOcwIDtYMgjXO47t/hHNKz 1AigecnMLAxNxoF7W2F7v+1b0ZQiwEd64V2OeA+4FlZryqsxHC3ZV7q9rKkvdayX Ua687x1PngMLVl3SeP/vFyU2q7CTrg0= -----END CERTIFICATE-----Generated at Thu Apr 10 14:54:22 2025 by rpki-client