$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa File: 57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa (raw, json) Hash identifier: eOU1pJ7ctw31ahLZkLUZ1BXNIqjGZSbw6E4ec7Wifnc= Subject key identifier: 36:B6:10:CA:6C:0D:2C:CD:AE:48:D2:D9:7B:0D:6D:0F:3D:63:2C:49 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848960B4D7C9896C20B0B1269E0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:4d:7c:98:96:c2:0b:0b:12:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=ba3bdbca-87da-42fb-b14d-0bf01c57d30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:79:a4:44:82:ce:0f:86:89:f0:c5:65:39:87: 1c:ac:9e:10:be:2d:fd:80:a5:d6:4d:d9:cd:e7:74: 9b:f0:eb:6f:64:c0:bb:8c:66:1c:b2:45:1b:87:cb: 52:a9:27:5b:63:7a:9c:89:ff:fe:61:06:e6:41:c4: 2c:7c:bd:d3:2d:43:20:f5:80:b3:92:d5:78:88:55: 5a:90:e5:6f:3f:45:93:fd:42:39:4c:9f:9b:55:82: b7:3f:f8:10:6c:f4:63:4e:97:3a:eb:96:85:24:2a: 39:b8:d7:1f:9a:8f:7f:7a:9e:30:92:94:ff:f2:e0: dd:5d:cc:5c:d2:61:51:e0:81:02:7f:54:fa:99:99: 6d:05:bb:72:74:a7:59:56:b8:fd:77:ec:ee:a1:8e: 9e:fb:6f:2a:99:7b:0b:66:50:a8:b9:89:14:0e:91: 84:5a:6a:55:c2:10:fd:34:4e:40:4a:09:68:7b:85: 7a:1b:27:91:81:74:eb:81:d2:ea:5e:12:dd:b7:e3: 7c:ad:9a:c6:f5:d9:08:8e:01:80:b3:57:6b:54:82: 46:da:f0:19:9f:92:32:f0:ed:4e:0f:1e:1a:69:20: 89:15:82:fc:7d:5d:83:6b:fa:6b:40:d8:74:11:aa: d4:e8:1e:08:0e:06:11:8a:b9:94:e4:91:83:2c:02: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B6:10:CA:6C:0D:2C:CD:AE:48:D2:D9:7B:0D:6D:0F:3D:63:2C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:77:82:5e:12:37:87:78:42:66:97:4c:b3:3d:4e:d5:50:46: 82:cd:45:43:56:3e:15:f2:40:bf:cc:42:52:a9:18:8f:fa:21: 5c:e1:4a:3d:be:64:b2:f8:72:2b:dd:33:af:6b:8d:ad:b2:66: 2c:ee:63:c4:cb:ce:76:f6:a7:e0:62:d2:4c:81:ef:23:5a:d5: 97:c2:95:a5:f2:8a:61:b8:29:da:1c:f6:f0:a0:ab:4c:eb:43: a8:ad:e5:ad:02:6e:14:44:07:81:b5:f7:29:75:c9:7a:45:f0: e2:74:26:83:5c:02:8b:6f:03:13:41:1c:82:00:c6:48:1f:c5: 33:36:d9:59:1c:3a:ef:92:df:6b:24:69:13:67:9e:60:c2:35: 3e:5c:18:f9:d0:60:77:37:de:b9:6b:43:97:39:48:61:7f:46: 84:61:04:16:f0:7a:eb:8d:3b:4a:52:30:64:73:a6:a8:ad:7f: e9:1a:78:01:e9:73:12:27:36:c4:a2:4c:23:4b:c1:bb:f2:45: f3:a4:cd:5c:0b:ec:83:d4:26:0d:81:a5:79:af:be:02:f2:27: 85:5d:18:4f:1c:66:8b:ee:48:b0:43:3e:fd:10:9c:4e:07:08: 28:42:e7:0f:f9:c9:0d:16:c9:87:15:a6:64:b1:f7:94:fc:27: 19:54:29:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC018mJbCCwsSaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk YmEzYmRiY2EtODdkYS00MmZiLWIxNGQtMGJmMDFjNTdkMzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnmkRILOD4aJ8MVlOYccrJ4Qvi39gKXWTdnN 53Sb8OtvZMC7jGYcskUbh8tSqSdbY3qcif/+YQbmQcQsfL3TLUMg9YCzktV4iFVa kOVvP0WT/UI5TJ+bVYK3P/gQbPRjTpc665aFJCo5uNcfmo9/ep4wkpT/8uDdXcxc 0mFR4IECf1T6mZltBbtydKdZVrj9d+zuoY6e+28qmXsLZlCouYkUDpGEWmpVwhD9 NE5ASgloe4V6GyeRgXTrgdLqXhLdt+N8rZrG9dkIjgGAs1drVIJG2vAZn5Iy8O1O Dx4aaSCJFYL8fV2Da/prQNh0EarU6B4IDgYRirmU5JGDLAL9XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDa2EMpsDSzNrkjS2XsNbQ89YyxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTdmZmQxZTYtYjE0YS0z N2IwLTljZmEtZDFmNDhhZWVjOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt3gl4SN4d4QmaXTLM9TtVQRoLNRUNWPhXyQL/MQlKpGI/6IVzhSj2+ ZLL4civdM69rja2yZizuY8TLznb2p+Bi0kyB7yNa1ZfClaXyimG4Kdoc9vCgq0zr Q6it5a0CbhREB4G19yl1yXpF8OJ0JoNcAotvAxNBHIIAxkgfxTM22VkcOu+S32sk aRNnnmDCNT5cGPnQYHc33rlrQ5c5SGF/RoRhBBbweuuNO0pSMGRzpqitf+kaeAHp cxInNsSiTCNLwbvyRfOkzVwL7IPUJg2BpXmvvgLyJ4VdGE8cZovuSLBDPv0QnE4H CChC5w/5yQ0WyYcVpmSx95T8JxlUKW4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:04 2025 by rpki-client