$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa File: 66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa (raw, json) Hash identifier: DqEow/R6b6qDVUS4+YSfv1ZfnXo1tyKar2AGytcr1ys= Subject key identifier: 2D:0F:88:85:D4:4B:9C:1F:25:FF:23:33:C0:BA:DE:F9:12:24:28:1F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848960B4F580F129F62FEF99B00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.137.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:4f:58:0f:12:9f:62:fe:f9:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=7f814812-7bb9-46ad-ac4c-93e31e50408e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:8b:c3:5a:fb:d8:57:f6:b4:e9:ef:59:74: 4c:68:b8:07:15:f8:76:71:ea:cc:d6:88:b4:ac:50: 9f:56:a4:ed:86:85:ef:2d:56:5d:68:d8:a5:fc:f7: 60:dd:15:82:3c:5c:23:65:14:3d:73:ad:e7:fc:f9: b8:20:69:26:2d:9d:2a:56:48:60:8d:9c:ed:ec:0d: b5:47:3d:f9:63:ad:5b:3a:ea:a5:82:6f:0b:3c:d6: ce:01:76:60:3c:e8:21:ae:7e:23:ae:af:5d:ef:8e: e4:77:e5:4f:c6:29:04:20:de:93:f5:83:78:7f:07: 02:f2:f4:5b:97:1e:79:32:e1:97:77:c1:64:2b:7c: 1a:e4:2b:b3:1c:aa:9f:60:46:93:70:49:36:b2:3a: 89:6a:ba:56:da:4c:3f:88:36:6c:ce:41:c2:a5:3b: 68:6b:57:89:12:0d:f2:b6:13:79:e6:a1:09:d1:75: 10:24:00:09:e4:4b:6f:6b:7f:17:86:0f:7e:9a:f3: 31:f6:71:fe:e6:a3:db:ed:c4:aa:97:5b:c5:ae:59: d4:02:24:8a:27:84:0a:54:e5:96:7d:18:fd:5c:c9: c4:c2:73:9b:42:5c:eb:56:9a:e7:d7:4b:50:62:20: 37:7a:2b:f6:ef:68:f4:9b:f0:c7:38:f2:86:a0:8f: 54:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0F:88:85:D4:4B:9C:1F:25:FF:23:33:C0:BA:DE:F9:12:24:28:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/66a3c934-a8ae-39c6-9e07-95794b63b8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e1:b2:c5:9f:28:6e:fb:52:ef:0b:4a:88:75:64:ec:d3:b9: 5c:81:b6:52:ce:e1:50:e9:ec:99:fc:80:0d:77:ea:cd:53:94: de:6e:1f:a6:97:b7:8b:72:ad:64:c7:62:d2:86:7f:ee:3f:96: 93:46:47:23:c1:a8:eb:f6:6f:84:3b:0c:9c:d3:05:e7:a3:1c: 83:ba:e9:2e:65:e5:7c:7a:26:4a:30:c9:2f:9b:13:98:ce:cc: 2c:43:62:b2:9e:94:9d:93:98:7c:eb:a4:aa:c2:17:10:6b:79: 2d:44:5d:59:5a:68:55:b8:d0:32:92:ab:10:1a:ff:77:09:b2: 7b:3c:8b:f5:e4:24:cb:62:f6:fd:ad:7c:1a:fc:4d:a5:c2:6f: 73:21:fb:68:a2:43:17:24:6b:85:82:56:4a:16:0e:d8:b4:0c: 43:ec:ad:f4:91:fe:8c:e5:28:e4:ad:8c:9b:be:eb:d6:b4:d9: 98:a6:c8:5f:46:f3:26:70:4d:d9:2d:61:15:83:df:97:c3:80: ee:79:61:f5:60:57:3a:26:76:4f:7a:81:ef:ac:02:82:ac:d0: 8f:56:94:b7:9f:2c:1d:ed:89:8e:0e:29:97:ca:95:f6:d1:50: 8d:fb:76:1b:36:24:28:0a:46:42:29:0e:94:1f:29:06:27:6b: 9e:a8:a9:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC09YDxKfYv75mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk N2Y4MTQ4MTItN2JiOS00NmFkLWFjNGMtOTNlMzFlNTA0MDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJaLw1r72Ff2tOnvWXRMaLgHFfh2cerM1oi0 rFCfVqTthoXvLVZdaNil/Pdg3RWCPFwjZRQ9c63n/Pm4IGkmLZ0qVkhgjZzt7A21 Rz35Y61bOuqlgm8LPNbOAXZgPOghrn4jrq9d747kd+VPxikEIN6T9YN4fwcC8vRb lx55MuGXd8FkK3wa5CuzHKqfYEaTcEk2sjqJarpW2kw/iDZszkHCpTtoa1eJEg3y thN55qEJ0XUQJAAJ5Etva38Xhg9+mvMx9nH+5qPb7cSql1vFrlnUAiSKJ4QKVOWW fRj9XMnEwnObQlzrVprn10tQYiA3eiv272j0m/DHOPKGoI9U9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0PiIXUS5wfJf8jM8C63vkSJCgfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjZhM2M5MzQtYThhZS0z OWM2LTllMDctOTU3OTRiNjNiOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFInwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/hssWfKG77Uu8LSoh1ZOzTuVyBtlLO4VDp7Jn8gA136s1TlN5uH6aX t4tyrWTHYtKGf+4/lpNGRyPBqOv2b4Q7DJzTBeejHIO66S5l5Xx6JkowyS+bE5jO zCxDYrKelJ2TmHzrpKrCFxBreS1EXVlaaFW40DKSqxAa/3cJsns8i/XkJMti9v2t fBr8TaXCb3Mh+2iiQxcka4WCVkoWDti0DEPsrfSR/ozlKOStjJu+69a02ZimyF9G 8yZwTdktYRWD35fDgO55YfVgVzomdk96ge+sAoKs0I9WlLefLB3tiY4OKZfKlfbR UI37dhs2JCgKRkIpDpQfKQYna56oqX4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:37:43 2025 by rpki-client