$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6559b64a-ae54-3b0b-afd5-2c5ae186ce80.roa File: 6559b64a-ae54-3b0b-afd5-2c5ae186ce80.roa (raw, json) Hash identifier: fsRMGVOpBPJDl7C68uOk4zAR623YwB9ORjq4LfCkbHs= Subject key identifier: 68:63:30:CD:4A:97:D7:53:65:09:10:4A:C2:C4:58:3E:C8:13:08:B5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13BDEC7AF2C0FCA228780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6559b64a-ae54-3b0b-afd5-2c5ae186ce80.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.134.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3b:de:c7:af:2c:0f:ca:22:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=c387408f-5e1b-4c0e-add0-a18cd0e2f5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:04:4d:2f:35:68:44:f1:c2:b1:ca:76:58: 9f:4d:13:3d:85:32:dd:91:f7:c7:75:14:f8:11:50: d7:ae:0d:b3:3a:67:f6:a1:fb:23:ef:9a:e4:83:94: 9f:42:19:f5:5f:15:29:3a:7b:53:12:f9:71:97:c0: 46:d9:af:59:c8:b3:0f:2d:04:8c:bb:eb:a1:cb:22: 3b:36:8c:69:b8:58:67:9f:cd:02:ec:7a:22:f1:55: e3:60:0f:01:bc:2f:8d:e7:f1:8e:bc:3d:d0:56:34: 10:ca:92:43:ed:cb:e3:bc:00:40:48:90:24:45:79: e7:e2:44:67:da:81:31:44:dc:f3:22:fa:db:ba:a6: 43:aa:2b:02:bc:0b:36:a8:63:97:82:e4:04:3c:8b: 98:a7:c8:2c:50:ab:8c:07:54:53:6b:9b:f1:e4:48: 77:59:1e:ac:17:23:11:9b:78:04:c3:e7:52:26:96: f4:4d:90:5c:1f:d7:49:5c:07:b3:e0:db:96:d1:a9: a4:a4:a0:69:d8:65:6e:36:c1:d9:ae:23:5d:98:af: 3d:e5:34:b2:6b:c6:77:b1:9a:52:27:ec:24:1c:fb: ec:d4:52:3f:c9:00:a5:48:fd:52:39:27:46:b0:f9: cc:33:d8:12:41:48:72:0b:7e:93:56:82:d4:81:7e: 2b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:63:30:CD:4A:97:D7:53:65:09:10:4A:C2:C4:58:3E:C8:13:08:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6559b64a-ae54-3b0b-afd5-2c5ae186ce80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ba:86:b2:17:6a:dd:27:f1:7b:53:bd:0c:18:f4:b7:4a:cc: 94:f3:40:8f:db:69:14:a9:00:d7:b9:03:e3:6f:fa:b6:76:fe: 28:51:b3:60:16:b8:e1:6f:da:4a:3a:7e:47:d9:7a:38:9a:a6: 35:95:59:37:ac:c0:a9:cf:09:ac:28:51:8e:c7:e1:21:6a:2f: c7:3b:9a:5e:d8:94:f9:dd:7e:ec:04:3f:5d:dd:05:32:9d:3c: d1:47:2f:8e:49:09:db:3b:43:95:a4:62:6b:f7:c2:0a:a2:af: c2:92:4f:3b:4b:bb:1d:4b:c9:fd:f0:c4:d3:1f:5f:b3:5e:63: c4:cc:da:ae:05:28:e0:da:38:27:a8:12:99:98:1b:32:7e:3f: b4:74:90:08:65:e5:30:20:06:e6:6c:ff:c7:1b:08:09:6c:cb: ef:50:f8:7d:02:fa:44:55:e9:28:29:7f:b3:23:1b:67:17:08: 8f:76:ed:be:e2:97:70:7e:ef:07:fe:30:e0:ac:78:24:9a:51: b8:2f:b7:22:9a:28:98:70:19:83:d8:80:09:8e:e1:a4:56:c0: 6b:23:53:53:1d:ef:32:44:02:05:1e:07:41:34:85:85:73:ca: 9d:bd:39:54:1d:5a:99:0c:55:41:52:e9:84:31:ca:3d:13:80: 46:de:6c:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTvex68sD8oih4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk YzM4NzQwOGYtNWUxYi00YzBlLWFkZDAtYTE4Y2QwZTJmNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbUETS81aETxwrHKdlifTRM9hTLdkffHdRT4 EVDXrg2zOmf2ofsj75rkg5SfQhn1XxUpOntTEvlxl8BG2a9ZyLMPLQSMu+uhyyI7 NoxpuFhnn80C7Hoi8VXjYA8BvC+N5/GOvD3QVjQQypJD7cvjvABASJAkRXnn4kRn 2oExRNzzIvrbuqZDqisCvAs2qGOXguQEPIuYp8gsUKuMB1RTa5vx5Eh3WR6sFyMR m3gEw+dSJpb0TZBcH9dJXAez4NuW0amkpKBp2GVuNsHZriNdmK895TSya8Z3sZpS J+wkHPvs1FI/yQClSP1SOSdGsPnMM9gSQUhyC36TVoLUgX4rnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhjMM1Kl9dTZQkQSsLEWD7IEwi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjU1OWI2NGEtYWU1NC0z YjBiLWFmZDUtMmM1YWUxODZjZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGy6hrIXat0n8XtTvQwY9LdKzJTzQI/baRSpANe5A+Nv+rZ2/ihRs2AW uOFv2ko6fkfZejiapjWVWTeswKnPCawoUY7H4SFqL8c7ml7YlPndfuwEP13dBTKd PNFHL45JCds7Q5WkYmv3wgqir8KSTztLux1Lyf3wxNMfX7NeY8TM2q4FKODaOCeo EpmYGzJ+P7R0kAhl5TAgBuZs/8cbCAlsy+9Q+H0C+kRV6Sgpf7MjG2cXCI927b7i l3B+7wf+MOCseCSaUbgvtyKaKJhwGYPYgAmO4aRWwGsjU1Md7zJEAgUeB0E0hYVz yp29OVQdWpkMVUFS6YQxyj0TgEbebGI= -----END CERTIFICATE-----Generated at Fri Mar 14 08:33:59 2025 by rpki-client