$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/75117464-3697-3c55-9ff2-55325c98d96f.roa File: 75117464-3697-3c55-9ff2-55325c98d96f.roa (raw, json) Hash identifier: zFK3pNqWqxRke9nNWphyWgCrPVqljt9rAY7niAlkC94= Subject key identifier: EE:60:9B:D5:D2:28:5A:28:0D:8F:A8:D5:C1:45:39:CC:BB:57:E6:CB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858484C10161C05A667283DD37B00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/75117464-3697-3c55-9ff2-55325c98d96f.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 4237 IP address blocks: 20.148.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:16:1c:05:a6:67:28:3d:d3:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=52965036-9000-421e-b342-e1623e766fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4f:09:24:b1:3e:07:5f:aa:2d:c8:bb:41:ba: 3e:9c:e6:41:90:dc:89:be:6d:d4:34:d9:51:34:9b: 97:44:59:78:9c:f0:dd:b1:40:05:4d:07:20:1d:12: d0:a1:a9:5c:25:3d:6b:44:69:dc:e8:bd:b9:b9:3b: 39:5e:f0:b7:85:5f:fb:83:f1:d8:92:c7:70:db:53: 5a:f4:f3:bd:c6:94:ec:42:45:4b:fb:2d:b1:62:85: b3:ea:a9:75:bf:c7:ed:6f:39:96:9d:8f:f8:c5:63: a6:b5:90:63:7d:de:37:cc:14:78:48:93:92:7c:6b: 99:e3:e8:a1:c6:7b:10:f1:bf:c8:1d:81:ec:c6:14: eb:2b:07:07:14:16:a3:2c:a3:3a:9f:25:2c:15:62: 09:dd:de:99:81:25:38:3d:a8:54:ed:6e:81:78:25: 82:6a:12:39:d1:be:cd:ce:e3:d9:47:4a:b5:45:4f: b8:8e:e6:11:da:b3:45:4a:37:70:6d:46:17:98:d1: e2:a3:a0:94:49:7b:97:14:3e:c7:4b:bf:65:a3:b2: 1a:85:ad:36:ef:19:98:c7:d0:2d:b8:7f:84:38:10: b5:27:04:d3:d5:1d:d2:3e:ca:0a:08:8c:c9:b7:73: 14:ff:a2:a4:1b:cc:da:03:5c:bc:2a:dc:ba:9f:67: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:60:9B:D5:D2:28:5A:28:0D:8F:A8:D5:C1:45:39:CC:BB:57:E6:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/75117464-3697-3c55-9ff2-55325c98d96f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:96:5e:b4:1c:b0:40:88:53:5d:13:4a:c0:dc:d9:a6:92:d7: eb:37:29:4f:6b:74:e2:3a:16:12:5d:30:98:32:03:32:be:35: c7:cf:50:95:55:dc:8e:72:90:97:09:91:ab:dd:a5:3c:01:d3: 87:1e:a7:cd:ef:cf:50:53:44:a0:25:9b:b8:8a:af:36:78:f2: 07:da:61:8b:a4:dc:37:54:9f:59:b8:b0:a6:bd:05:0c:bb:38: 0e:cb:0b:0c:58:50:76:27:11:dd:5d:0c:49:09:ce:de:73:99: 8d:ae:e1:20:10:fd:39:e6:7b:9c:15:3e:d3:6f:79:4a:05:b5: ef:a8:09:aa:62:27:fa:69:6d:6d:ee:3b:a5:fa:52:82:85:25: 5d:e2:44:b1:a4:35:be:a0:9c:ca:64:a8:f9:dd:16:00:c3:a7: 28:e1:63:10:dc:8f:eb:11:36:ed:59:27:45:15:52:48:20:c3: bb:05:44:47:d3:72:af:69:d0:49:e1:3e:47:72:f2:4c:52:49: e5:22:8b:b3:7a:15:32:66:55:0b:3e:75:47:79:fb:d0:65:8c: 23:5d:69:2e:03:f8:61:db:43:4a:b8:ce:3f:01:d8:d0:fd:db: 2a:30:0a:03:96:54:a3:ab:6d:cb:c7:2a:bb:c4:6b:72:e3:b8: a7:c5:e5:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEBYcBaZnKD3TewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk NTI5NjUwMzYtOTAwMC00MjFlLWIzNDItZTE2MjNlNzY2ZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk8JJLE+B1+qLci7Qbo+nOZBkNyJvm3UNNlR NJuXRFl4nPDdsUAFTQcgHRLQoalcJT1rRGnc6L25uTs5XvC3hV/7g/HYksdw21Na 9PO9xpTsQkVL+y2xYoWz6ql1v8ftbzmWnY/4xWOmtZBjfd43zBR4SJOSfGuZ4+ih xnsQ8b/IHYHsxhTrKwcHFBajLKM6nyUsFWIJ3d6ZgSU4PahU7W6BeCWCahI50b7N zuPZR0q1RU+4juYR2rNFSjdwbUYXmNHio6CUSXuXFD7HS79lo7Iaha027xmYx9At uH+EOBC1JwTT1R3SPsoKCIzJt3MU/6KkG8zaA1y8Kty6n2daWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5gm9XSKFooDY+o1cFFOcy7V+bLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzUxMTc0NjQtMzY5Ny0z YzU1LTlmZjItNTUzMjVjOThkOTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+WXrQcsECIU10TSsDc2aaS1+s3KU9rdOI6FhJdMJgyAzK+NcfPUJVV 3I5ykJcJkavdpTwB04cep83vz1BTRKAlm7iKrzZ48gfaYYuk3DdUn1m4sKa9BQy7 OA7LCwxYUHYnEd1dDEkJzt5zmY2u4SAQ/Tnme5wVPtNveUoFte+oCapiJ/ppbW3u O6X6UoKFJV3iRLGkNb6gnMpkqPndFgDDpyjhYxDcj+sRNu1ZJ0UVUkggw7sFREfT cq9p0EnhPkdy8kxSSeUii7N6FTJmVQs+dUd5+9BljCNdaS4D+GHbQ0q4zj8B2ND9 2yowCgOWVKOrbcvHKrvEa3LjuKfF5ew= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:29 2025 by rpki-client