$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/774ab83e-13e5-3163-a12c-9a3bc07768b7.roa File: 774ab83e-13e5-3163-a12c-9a3bc07768b7.roa (raw, json) Hash identifier: 7UFzboQ7lmQK3I8H1IynuiB3+/Jo7PSRb4a+4FwWNdM= Subject key identifier: C1:6E:FB:E8:CE:6C:94:5D:53:0E:76:F6:3C:74:D1:F5:FA:F2:80:B7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858484C1016BFBA22B68E150C4180 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/774ab83e-13e5-3163-a12c-9a3bc07768b7.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 203 IP address blocks: 20.148.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:16:bf:ba:22:b6:8e:15:0c:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=57ab5f86-3f4d-43ea-aa69-7f247fb82d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:1a:dc:a7:26:e5:b3:02:74:bd:e1:c8:c1: bd:9a:96:0d:60:b0:e4:47:ec:7f:1f:80:c3:80:b5: 86:4a:d7:01:23:14:77:48:e0:f4:af:f6:28:b6:f2: d1:5d:6a:74:37:82:8c:0c:5f:72:b2:3d:67:b8:79: d7:d9:59:fe:84:c6:f3:e7:08:ae:52:fa:52:a4:01: 3a:f1:70:5b:38:fe:30:08:a8:cd:ec:16:4d:01:58: 36:01:a1:67:5e:b1:04:e2:95:ea:be:4d:85:1c:83: ac:91:d6:f9:eb:e9:5d:57:0f:27:e0:93:06:3c:99: 9a:13:46:27:ca:f7:81:d1:94:99:43:95:2f:74:20: 36:05:13:5e:55:e9:7d:d2:8d:c5:0c:10:81:81:2f: 6b:81:e1:73:f3:f2:ee:27:3b:16:28:66:0d:66:06: f2:d1:95:08:30:27:0f:44:e9:41:7e:83:63:1d:e8: 12:ec:3c:39:44:40:f4:a3:6e:47:36:6e:9b:15:d1: 3b:19:35:e6:f1:ad:bd:15:92:bc:d3:9e:75:71:35: 72:6e:27:bb:01:83:f0:0e:bd:5e:93:a1:7c:9d:5f: 99:db:7b:32:95:b6:97:42:4a:14:75:01:28:3b:02: a6:d9:cf:d5:b5:99:57:79:68:19:cd:b9:2d:2c:8a: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6E:FB:E8:CE:6C:94:5D:53:0E:76:F6:3C:74:D1:F5:FA:F2:80:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/774ab83e-13e5-3163-a12c-9a3bc07768b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:26:42:f7:62:37:8f:81:30:a3:6c:b9:14:a7:3c:7f:51:fc: a8:a6:b9:8f:15:af:50:3b:a8:3f:43:1b:49:c5:34:ce:73:3a: d3:1c:df:11:61:a3:ed:30:17:fc:30:8b:dc:8e:5c:c7:9d:63: 52:cf:31:c8:2e:41:e2:ff:0e:d1:70:13:df:14:c0:61:5e:bb: 80:e0:1f:1d:e1:4d:b0:3d:3b:63:b7:6a:59:99:5a:ce:69:35: d7:56:fc:22:22:0b:85:36:77:f9:f3:8e:fe:43:1f:dc:02:d1: 9c:0b:c1:5b:4a:8f:b1:96:03:36:1f:9f:7a:1e:7d:f3:54:98: 6a:e2:83:2d:fc:89:3c:19:ae:e3:0d:a5:44:86:9f:c3:22:95: 47:de:44:cc:39:8e:5a:0b:91:36:b6:6c:ee:4e:9a:2d:77:b5: aa:39:82:10:a0:4e:20:2a:48:32:d9:94:cd:37:72:f7:0b:fc: e8:3b:bf:98:a2:fc:40:bd:0c:0c:25:a5:fa:83:46:bb:68:6b: f6:1a:27:81:9a:b5:8e:11:5d:77:56:73:86:47:7a:7a:db:c0: 4b:4c:69:12:d2:9d:35:87:65:61:90:b5:fc:49:ea:b7:3c:17: 9a:25:32:66:bd:52:2f:62:e7:62:36:b3:b5:d0:a5:1c:61:10: 26:fb:40:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEBa/uiK2jhUMQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk NTdhYjVmODYtM2Y0ZC00M2VhLWFhNjktN2YyNDdmYjgyZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0ca3Kcm5bMCdL3hyMG9mpYNYLDkR+x/H4DD gLWGStcBIxR3SOD0r/YotvLRXWp0N4KMDF9ysj1nuHnX2Vn+hMbz5wiuUvpSpAE6 8XBbOP4wCKjN7BZNAVg2AaFnXrEE4pXqvk2FHIOskdb56+ldVw8n4JMGPJmaE0Yn yveB0ZSZQ5UvdCA2BRNeVel90o3FDBCBgS9rgeFz8/LuJzsWKGYNZgby0ZUIMCcP ROlBfoNjHegS7Dw5RED0o25HNm6bFdE7GTXm8a29FZK80551cTVybie7AYPwDr1e k6F8nV+Z23sylbaXQkoUdQEoOwKm2c/VtZlXeWgZzbktLIqJKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFu++jObJRdUw529jx00fX68oC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzc0YWI4M2UtMTNlNS0z MTYzLWExMmMtOWEzYmMwNzc2OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwmQvdiN4+BMKNsuRSnPH9R/KimuY8Vr1A7qD9DG0nFNM5zOtMc3xFh o+0wF/wwi9yOXMedY1LPMcguQeL/DtFwE98UwGFeu4DgHx3hTbA9O2O3almZWs5p NddW/CIiC4U2d/nzjv5DH9wC0ZwLwVtKj7GWAzYfn3oeffNUmGrigy38iTwZruMN pUSGn8MilUfeRMw5jloLkTa2bO5Omi13tao5ghCgTiAqSDLZlM03cvcL/Og7v5ii /EC9DAwlpfqDRrtoa/YaJ4GatY4RXXdWc4ZHenrbwEtMaRLSnTWHZWGQtfxJ6rc8 F5olMma9Ui9i52I2s7XQpRxhECb7QNE= -----END CERTIFICATE-----Generated at Sun Feb 16 16:05:14 2025 by rpki-client