$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/775e95ad-166a-34bd-b074-07d8661b799e.roa File: 775e95ad-166a-34bd-b074-07d8661b799e.roa (raw, json) Hash identifier: 0tRXU7MkxfFuOLoGdGa6DZcEPBwDagI9WAU1w8TwaNY= Subject key identifier: 2C:A1:68:40:61:0B:DC:D5:9C:01:DB:33:DF:52:4D:AF:D6:E8:08:07 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848960B4F0FF3F2571355989B80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/775e95ad-166a-34bd-b074-07d8661b799e.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 202 IP address blocks: 20.137.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:4f:0f:f3:f2:57:13:55:98:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=6e3ccdea-0a08-4fcc-9ec2-41899862972a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a3:f4:62:21:32:a0:da:b2:98:ac:b1:de:e1: f8:f5:8a:0b:79:43:22:6d:17:9c:7b:bc:e1:d8:a1: 6b:ae:8a:d7:b6:2f:13:ab:4e:79:f5:d9:14:d6:67: 6d:55:9a:97:dd:61:33:93:ba:c6:6d:d1:ec:2f:ae: dc:ef:d6:5c:32:f1:f9:7a:fc:6e:e0:09:97:86:9e: ff:be:71:62:43:12:ea:95:b6:7f:f3:4c:0c:e6:60: b8:03:ad:ef:4b:9f:68:bd:d4:0b:4e:f7:1f:46:53: 98:3b:7f:8f:54:96:9d:3d:73:89:e7:8f:ad:e4:c2: 90:c1:4d:ef:10:31:09:99:30:a5:55:55:07:77:45: f0:a8:1c:10:35:06:f8:f1:21:10:53:33:e5:96:4d: 74:8a:d1:57:fd:7c:5a:31:2f:f4:a1:d7:88:42:6a: bf:59:b2:46:f7:8e:cf:8b:d3:fa:a6:9f:61:fe:b2: 4a:26:18:2d:80:e3:ab:e0:31:47:94:4d:bb:22:64: 70:a5:05:a8:4c:a2:d0:77:fe:c5:b8:ff:ca:ee:cb: 48:33:0b:cb:61:91:4e:89:d7:93:74:e3:e0:ac:c1: fc:62:68:e4:f3:f8:38:af:02:be:a3:f9:56:b5:58: da:7b:de:b4:b9:da:26:c1:2d:93:53:4c:ff:fd:3a: 8c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A1:68:40:61:0B:DC:D5:9C:01:DB:33:DF:52:4D:AF:D6:E8:08:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/775e95ad-166a-34bd-b074-07d8661b799e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:60:3c:a8:16:70:6d:f1:4d:93:2b:ed:d0:71:01:c9:fc:16: 4c:af:10:9c:3b:a4:ec:cf:27:5a:88:10:76:60:7f:28:87:52: e7:63:83:4a:4b:dd:80:fb:72:65:6c:6d:2b:96:0d:c8:49:74: 27:71:86:2b:fc:aa:16:d6:24:fb:30:b8:7e:1f:87:48:46:24: 80:23:78:c4:26:db:26:65:0f:12:b5:ee:ee:52:0b:4c:6c:ff: 15:e8:be:09:de:ae:09:a3:76:61:ea:6d:99:86:77:4d:50:e3: c6:f9:62:57:6b:fe:83:38:9f:25:22:7e:06:f6:65:08:ad:30: 6c:35:a9:9f:21:9a:c1:77:df:ba:7e:64:c3:92:87:e0:41:27: b8:f6:23:79:17:9b:8f:18:1c:3e:e9:04:1a:98:23:b3:eb:d3: aa:0a:08:56:0f:23:e1:1d:fb:8f:5f:87:d5:31:90:1a:e1:9d: 40:0a:cc:df:c7:48:74:04:a2:4b:0b:24:f5:44:14:4d:3f:ba: c9:a3:4d:a5:27:50:28:6c:6d:d8:e9:68:ca:50:16:83:af:eb: 59:9c:26:e8:bd:c7:38:1f:2b:26:6e:f3:5b:ad:46:3a:ef:b9: a0:c2:4d:b8:7e:64:57:83:85:0c:f7:01:55:4e:0d:8c:16:50: a7:68:19:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC08P8/JXE1WYm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk NmUzY2NkZWEtMGEwOC00ZmNjLTllYzItNDE4OTk4NjI5NzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKP0YiEyoNqymKyx3uH49YoLeUMibRece7zh 2KFrrorXti8Tq0559dkU1mdtVZqX3WEzk7rGbdHsL67c79ZcMvH5evxu4AmXhp7/ vnFiQxLqlbZ/80wM5mC4A63vS59ovdQLTvcfRlOYO3+PVJadPXOJ54+t5MKQwU3v EDEJmTClVVUHd0XwqBwQNQb48SEQUzPllk10itFX/XxaMS/0odeIQmq/WbJG947P i9P6pp9h/rJKJhgtgOOr4DFHlE27ImRwpQWoTKLQd/7FuP/K7stIMwvLYZFOideT dOPgrMH8Ymjk8/g4rwK+o/lWtVjae960udomwS2TU0z//TqMzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyhaEBhC9zVnAHbM99STa/W6AgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzc1ZTk1YWQtMTY2YS0z NGJkLWIwNzQtMDdkODY2MWI3OTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlgPKgWcG3xTZMr7dBxAcn8FkyvEJw7pOzPJ1qIEHZgfyiHUudjg0pL 3YD7cmVsbSuWDchJdCdxhiv8qhbWJPswuH4fh0hGJIAjeMQm2yZlDxK17u5SC0xs /xXovgnergmjdmHqbZmGd01Q48b5Yldr/oM4nyUifgb2ZQitMGw1qZ8hmsF337p+ ZMOSh+BBJ7j2I3kXm48YHD7pBBqYI7Pr06oKCFYPI+Ed+49fh9UxkBrhnUAKzN/H SHQEoksLJPVEFE0/usmjTaUnUChsbdjpaMpQFoOv61mcJui9xzgfKyZu81utRjrv uaDCTbh+ZFeDhQz3AVVODYwWUKdoGe0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:54 2025 by rpki-client