$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa File: 5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa (raw, json) Hash identifier: VYyn8xtkATHC1WClooQ9SChK9qorGYdRv5pVX5mLkXg= Subject key identifier: 75:31:67:3F:3E:31:03:1D:9C:1D:82:4B:43:06:32:0F:73:B1:75:B1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848143A83C8CACB10CD7DCBE080 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 3356 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:83:c8:ca:cb:10:cd:7d:cb:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=013773d8-e094-4d23-b19b-4bee2e6adea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8f:33:d2:28:81:41:bd:be:15:b5:ca:31:9b: 9d:ab:f8:66:e7:fc:a7:65:c5:40:11:4e:ec:37:0f: 2a:d8:ca:8c:f0:c6:de:b2:30:e0:d0:6e:e8:e4:e1: 46:75:8f:b2:e3:2b:96:94:43:27:5f:4d:97:19:89: af:34:87:87:ea:bd:d1:36:d6:f7:c9:15:b2:b9:c5: a1:8b:9d:49:c2:5f:7f:0c:af:10:65:bd:7e:84:08: a7:f4:13:47:47:e8:92:ad:95:ad:07:c5:44:b7:90: 1b:b2:de:9e:0a:27:9c:e3:fb:04:5e:fd:f6:7a:ba: ae:2a:2d:cd:e8:eb:80:db:69:13:d7:ac:c8:a3:fc: fa:41:fd:23:9d:ce:db:af:07:95:13:a1:d0:53:d4: b6:a2:3a:0d:71:d5:8e:2b:43:8a:3f:2e:aa:50:89: 3a:54:66:93:56:2b:22:40:a4:a2:29:2b:1a:e6:22: 79:de:52:e4:79:33:e0:90:c2:dc:f6:28:45:4c:2d: 23:7b:97:4c:a4:36:d0:80:b9:6f:cf:5f:f1:52:c7: 3d:bd:ba:e5:7f:0c:f4:16:89:ac:6a:b5:2d:cf:ec: a2:67:65:d3:a4:ee:3e:ea:51:f1:31:ec:a8:28:40: 65:bf:e5:aa:1b:b6:31:20:d4:6b:43:f5:39:ce:f5: 14:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:31:67:3F:3E:31:03:1D:9C:1D:82:4B:43:06:32:0F:73:B1:75:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:db:8b:bd:5c:7a:bd:dd:29:66:d4:00:dd:bd:a3:45:06:21: c3:5a:a7:14:ac:da:11:6c:85:73:2a:f6:1d:92:b1:b4:8e:d6: 79:01:df:d7:26:ff:de:f5:20:ae:57:4d:78:67:6b:83:98:41: f0:fa:45:69:f1:3f:0f:1a:9f:4c:8d:b8:4c:83:82:01:f0:d2: 9a:29:4c:62:3f:2b:ca:fb:22:c9:d1:ed:bc:9b:ba:7f:f0:2c: 06:df:81:17:be:5d:32:69:49:ab:08:72:3e:b0:0b:61:f7:fd: fa:57:6f:36:87:ca:4f:da:33:42:ce:4f:55:3d:ab:7f:c4:77: 05:78:2e:0c:e6:a8:4e:73:22:1d:99:8a:fd:7f:b2:3d:ac:19: 20:b4:07:73:d2:b1:50:5f:dc:6a:48:af:29:da:b4:77:71:17: ef:24:d7:58:26:21:d1:89:69:a7:85:16:82:5e:7e:fa:b8:b5: 5c:d5:76:14:49:a5:fe:88:a9:17:29:a5:9b:71:a4:e1:09:4c: 1d:ba:36:08:e9:42:39:a4:ae:14:d3:df:28:7c:c0:91:ea:0c: cb:c6:d7:b1:55:70:a8:56:e8:b9:23:35:3e:e3:ff:4f:f8:cd: f7:4e:69:8b:70:68:92:53:60:e3:59:14:dc:82:44:07:f7:a3: c8:e0:53:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOoPIyssQzX3L4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk MDEzNzczZDgtZTA5NC00ZDIzLWIxOWItNGJlZTJlNmFkZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp48z0iiBQb2+FbXKMZudq/hm5/ynZcVAEU7s Nw8q2MqM8MbesjDg0G7o5OFGdY+y4yuWlEMnX02XGYmvNIeH6r3RNtb3yRWyucWh i51Jwl9/DK8QZb1+hAin9BNHR+iSrZWtB8VEt5Abst6eCiec4/sEXv32erquKi3N 6OuA22kT16zIo/z6Qf0jnc7brweVE6HQU9S2ojoNcdWOK0OKPy6qUIk6VGaTVisi QKSiKSsa5iJ53lLkeTPgkMLc9ihFTC0je5dMpDbQgLlvz1/xUsc9vbrlfwz0Foms arUtz+yiZ2XTpO4+6lHxMeyoKEBlv+WqG7YxINRrQ/U5zvUUDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUxZz8+MQMdnB2CS0MGMg9zsXWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWE3NWI1NGMtNzFiZC0z MjQzLTgwZDgtN2Q3OWQyNDY1YThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/bi71cer3dKWbUAN29o0UGIcNapxSs2hFshXMq9h2SsbSO1nkB39cm /971IK5XTXhna4OYQfD6RWnxPw8an0yNuEyDggHw0popTGI/K8r7IsnR7bybun/w LAbfgRe+XTJpSasIcj6wC2H3/fpXbzaHyk/aM0LOT1U9q3/EdwV4LgzmqE5zIh2Z iv1/sj2sGSC0B3PSsVBf3GpIrynatHdxF+8k11gmIdGJaaeFFoJefvq4tVzVdhRJ pf6IqRcppZtxpOEJTB26NgjpQjmkrhTT3yh8wJHqDMvG17FVcKhW6LkjNT7j/0/4 zfdOaYtwaJJTYONZFNyCRAf3o8jgU6w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:52 2025 by rpki-client