$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6559b64a-ae54-3b0b-afd5-2c5ae186ce80.roa File: 6559b64a-ae54-3b0b-afd5-2c5ae186ce80.roa (raw, json) Hash identifier: AiXIkBoAOL5fhYGA8ZUM6DzMtvyRFJ+8VFlHcSnJKXk= Subject key identifier: E1:AE:94:BC:3C:03:E2:49:EE:06:76:EF:BE:2F:25:4A:60:F8:3B:F6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858481705100499E6418BD762D680 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6559b64a-ae54-3b0b-afd5-2c5ae186ce80.roa Signing time: Wed 04 Dec 2024 02:00:39 +0000 ROA not before: Wed 04 Dec 2024 02:00:39 +0000 ROA not after: Tue 04 Mar 2025 02:00:39 +0000 asID: 3356 IP address blocks: 20.134.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:17:05:10:04:99:e6:41:8b:d7:62:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 4 02:00:39 2024 GMT Not After : Mar 4 02:00:39 2025 GMT Subject: CN=e7d59c76-0f1c-47a1-b49b-1a407619a3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:d1:52:c4:dd:55:0b:7c:ed:d7:2c:de:70: 4d:db:9b:a9:04:20:57:87:86:6e:50:b3:72:90:e7: fd:08:58:d0:51:eb:06:ad:26:58:40:e8:3d:70:0d: 1a:ab:54:9e:db:96:16:b9:3d:57:60:ae:14:9c:b2: 49:fa:23:83:5e:41:e0:f6:30:c3:3c:77:bf:ca:55: d9:cd:24:c2:37:15:b8:43:b5:03:a1:98:89:1d:74: 73:a2:7c:49:de:70:b3:a9:53:f1:bd:3a:12:41:17: d2:98:c4:c1:ce:b0:4d:7c:16:bd:92:5d:4b:70:91: d8:a7:8d:90:31:66:3b:fa:b8:cb:dc:3e:43:ee:2e: e8:48:1b:86:02:88:09:48:a6:ac:e3:e3:f1:a7:74: 8d:89:01:4c:8f:91:a2:af:06:0d:5f:4a:cd:eb:05: af:f5:e4:f4:31:d7:04:2e:6e:aa:48:a2:e4:d9:a8: ab:e3:92:1a:df:a9:a0:d0:fc:4f:0d:f5:72:86:82: 3e:d9:87:30:c2:7f:f9:44:22:92:57:ad:de:29:37: d5:b8:63:2b:11:b1:2c:72:66:6f:a1:7c:3f:6d:e4: 2f:86:6a:24:ce:9c:45:71:f6:70:57:f8:8d:7b:57: e6:86:00:ea:5a:c8:3d:52:2d:00:a5:26:8a:b5:a4: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AE:94:BC:3C:03:E2:49:EE:06:76:EF:BE:2F:25:4A:60:F8:3B:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6559b64a-ae54-3b0b-afd5-2c5ae186ce80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:48:39:90:c2:65:ad:c1:2a:ca:f3:20:31:c2:b1:6f:9f:2a: 62:8e:92:f1:82:54:ca:e8:cf:f3:db:27:fb:72:90:a6:d0:39: d8:f3:37:09:e2:c5:33:ff:dc:93:46:a7:e6:d7:3c:ae:8d:b0: 6e:8c:ff:37:69:da:1a:b7:56:54:0b:bd:f4:16:dd:86:f0:fd: dd:ec:ce:98:42:84:c5:49:65:a0:53:21:03:fd:f7:34:0b:5e: 97:59:e5:55:e9:5c:ad:0f:bb:92:2b:eb:af:a9:59:e4:b7:63: c3:98:32:8f:cd:01:ed:c8:a3:32:98:f3:19:cb:5f:f3:51:18: 9b:30:dc:1d:a7:a0:c4:3e:a8:a5:93:4b:ae:9a:e2:5e:7e:03: 3f:09:40:e8:a3:aa:1d:1b:4f:38:da:d2:e0:50:32:a3:82:f4: d3:7f:bc:b2:eb:38:22:be:5f:a2:4e:e9:55:25:da:5f:97:ec: df:59:04:16:ed:ae:a8:22:b0:66:b1:0c:b0:4f:5e:08:0c:ee: 55:c2:49:5f:3a:41:c8:fd:b3:ab:4a:4f:83:c8:fe:e2:eb:4e: 64:cf:6a:58:a3:77:ce:5d:0e:e1:e8:38:46:2f:47:9c:63:60: 02:fc:37:2a:af:88:e0:e6:d3:41:28:36:98:8f:b2:b5:b5:5e: 2c:30:da:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXBRAEmeZBi9di1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIwNDAyMDAzOVoXDTI1MDMwNDAyMDAzOVowLzEtMCsGA1UEAxMk ZTdkNTljNzYtMGYxYy00N2ExLWI0OWItMWE0MDc2MTlhM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1DRUsTdVQt87dcs3nBN25upBCBXh4ZuULNy kOf9CFjQUesGrSZYQOg9cA0aq1Se25YWuT1XYK4UnLJJ+iODXkHg9jDDPHe/ylXZ zSTCNxW4Q7UDoZiJHXRzonxJ3nCzqVPxvToSQRfSmMTBzrBNfBa9kl1LcJHYp42Q MWY7+rjL3D5D7i7oSBuGAogJSKas4+Pxp3SNiQFMj5GirwYNX0rN6wWv9eT0MdcE Lm6qSKLk2air45Ia36mg0PxPDfVyhoI+2Ycwwn/5RCKSV63eKTfVuGMrEbEscmZv oXw/beQvhmokzpxFcfZwV/iNe1fmhgDqWsg9Ui0ApSaKtaSacwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGulLw8A+JJ7gZ2774vJUpg+Dv2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjU1OWI2NGEtYWU1NC0z YjBiLWFmZDUtMmM1YWUxODZjZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1IOZDCZa3BKsrzIDHCsW+fKmKOkvGCVMroz/PbJ/tykKbQOdjzNwni xTP/3JNGp+bXPK6NsG6M/zdp2hq3VlQLvfQW3Ybw/d3szphChMVJZaBTIQP99zQL XpdZ5VXpXK0Pu5Ir66+pWeS3Y8OYMo/NAe3IozKY8xnLX/NRGJsw3B2noMQ+qKWT S66a4l5+Az8JQOijqh0bTzja0uBQMqOC9NN/vLLrOCK+X6JO6VUl2l+X7N9ZBBbt rqgisGaxDLBPXggM7lXCSV86Qcj9s6tKT4PI/uLrTmTPalijd85dDuHoOEYvR5xj YAL8NyqviODm00EoNpiPsrW1Xiww2tQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:55 2025 by rpki-client