$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/560f799e-8ea8-33ff-96ae-aa71fa989d09.roa File: 560f799e-8ea8-33ff-96ae-aa71fa989d09.roa (raw, json) Hash identifier: 8nEUOPD5eCTOlmDFrluzuOXWVP7QIRCx+x8L9l9Wp8M= Subject key identifier: 51:28:B8:59:3B:59:F8:F7:CD:2A:1D:BF:E7:D2:D0:39:6D:3F:2E:87 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584865303B4651D43B858F922A80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/560f799e-8ea8-33ff-96ae-aa71fa989d09.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 202 IP address blocks: 20.134.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:3b:46:51:d4:3b:85:8f:92:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=1abbee14-7b8f-4124-8cab-567f7fc24bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:83:ab:ba:a0:2b:8b:16:f3:4f:7f:99:40:10: 8d:c7:09:f7:76:d4:d7:a0:1f:51:c9:fe:20:d1:84: 08:ff:9e:cb:b0:26:c3:99:d8:e8:3d:99:5c:52:b7: 3e:94:6d:5d:9e:73:05:2c:d6:01:c7:77:5c:8e:c8: cd:98:80:52:ec:59:4f:42:a3:c6:71:b6:11:b1:e1: 79:89:eb:9a:22:74:8f:9c:78:a6:4c:dc:3b:ce:d5: cc:e2:98:7b:c6:c4:db:76:90:84:37:c0:79:99:5a: 48:06:84:9f:c0:a5:76:dc:9d:7a:cc:8e:93:03:94: b1:7e:f8:b2:b4:8e:15:80:1d:19:d5:1d:28:33:26: 81:21:a4:e7:0c:a6:22:56:72:fc:d0:34:b5:79:60: 98:8b:2d:ed:98:e3:0c:06:50:5f:0b:61:40:13:33: 3b:26:65:9a:42:4f:db:db:af:05:3c:92:03:03:88: 0c:de:c9:3b:5d:17:9d:e3:18:1b:e8:99:fa:03:1e: 03:64:f3:5d:c9:b6:1e:b7:04:cf:2a:79:b1:0e:a6: 6c:2b:a1:72:a7:98:57:82:79:7d:7e:82:2b:51:29: 16:d0:f1:ea:b5:a1:8e:fa:fc:47:1c:fe:b9:21:c2: 18:e6:d1:81:a5:12:07:e8:8a:22:2a:32:b8:e2:cf: 77:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:28:B8:59:3B:59:F8:F7:CD:2A:1D:BF:E7:D2:D0:39:6D:3F:2E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/560f799e-8ea8-33ff-96ae-aa71fa989d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:76:be:5d:75:1f:eb:28:37:49:79:59:2a:41:c8:e3:8d:57: 3f:66:1c:ff:a2:95:4c:25:79:a9:ff:7f:78:a2:06:78:b8:83: 54:37:7a:7c:b9:f4:9a:72:6b:0b:79:bf:53:31:00:a9:47:93: a9:f2:d5:1a:4f:06:70:ca:27:96:19:3b:d9:fd:92:1e:90:5b: 42:7f:16:64:63:a0:b4:97:6f:b4:bf:e0:ea:b1:20:40:25:af: df:6c:b5:f4:60:73:f3:e5:06:e1:3e:41:fb:66:20:3f:0e:8e: db:bd:b8:b5:be:5b:d1:3e:cb:61:02:5b:10:6a:c8:c5:77:44: d0:0d:38:c0:49:e7:71:38:4f:4d:fd:be:93:0a:fb:86:03:73: 0e:38:1b:8e:34:b8:4d:13:be:b2:ba:8f:c0:1c:07:dd:43:22: 2c:27:13:5f:90:6e:cb:f2:7a:25:34:71:ed:af:e9:86:b7:17: 64:83:91:c8:60:42:89:c4:88:9a:8a:21:1a:6d:9f:6f:67:c1: 0e:7f:17:8d:79:06:ca:54:95:b2:37:6c:08:d4:4c:36:9c:7f: 02:bd:dd:ad:cf:14:af:b3:2e:96:48:15:29:f5:77:82:ba:4c: 1c:db:13:15:96:90:f9:c1:96:43:e0:bf:d4:67:c6:ce:6f:42: 0c:ec:ac:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMDtGUdQ7hY+SKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk MWFiYmVlMTQtN2I4Zi00MTI0LThjYWItNTY3ZjdmYzI0YmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4OruqArixbzT3+ZQBCNxwn3dtTXoB9Ryf4g 0YQI/57LsCbDmdjoPZlcUrc+lG1dnnMFLNYBx3dcjsjNmIBS7FlPQqPGcbYRseF5 ieuaInSPnHimTNw7ztXM4ph7xsTbdpCEN8B5mVpIBoSfwKV23J16zI6TA5Sxfviy tI4VgB0Z1R0oMyaBIaTnDKYiVnL80DS1eWCYiy3tmOMMBlBfC2FAEzM7JmWaQk/b 268FPJIDA4gM3sk7XRed4xgb6Jn6Ax4DZPNdybYetwTPKnmxDqZsK6Fyp5hXgnl9 foIrUSkW0PHqtaGO+vxHHP65IcIY5tGBpRIH6IoiKjK44s93PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEouFk7Wfj3zSodv+fS0DltPy6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTYwZjc5OWUtOGVhOC0z M2ZmLTk2YWUtYWE3MWZhOTg5ZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh2vl11H+soN0l5WSpByOONVz9mHP+ilUwlean/f3iiBni4g1Q3eny5 9Jpyawt5v1MxAKlHk6ny1RpPBnDKJ5YZO9n9kh6QW0J/FmRjoLSXb7S/4OqxIEAl r99stfRgc/PlBuE+QftmID8Ojtu9uLW+W9E+y2ECWxBqyMV3RNANOMBJ53E4T039 vpMK+4YDcw44G440uE0TvrK6j8AcB91DIiwnE1+QbsvyeiU0ce2v6Ya3F2SDkchg QonEiJqKIRptn29nwQ5/F415BspUlbI3bAjUTDacfwK93a3PFK+zLpZIFSn1d4K6 TBzbExWWkPnBlkPgv9Rnxs5vQgzsrKI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:30 2025 by rpki-client