$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7da8b6d5-b9b5-3604-89eb-7a990fd76858.roa File: 7da8b6d5-b9b5-3604-89eb-7a990fd76858.roa (raw, json) Hash identifier: 3ZwOdlcRRRHL5OSWJTDQsdk5AVnwR57gr9F7Ja+fAYI= Subject key identifier: 57:0E:F4:44:C7:6E:E5:62:40:4E:40:60:1F:A6:35:60:BC:26:4F:26 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D94817318550414E1A843400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7da8b6d5-b9b5-3604-89eb-7a990fd76858.roa Signing time: Tue 11 Feb 2025 16:02:33 +0000 ROA not before: Tue 11 Feb 2025 16:02:33 +0000 ROA not after: Mon 12 May 2025 15:02:33 +0000 asID: 202 IP address blocks: 20.149.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:48:17:31:85:50:41:4e:1a:84:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 16:02:33 2025 GMT Not After : May 12 15:02:33 2025 GMT Subject: CN=72ed80b1-f361-4b25-a75a-0e394103e42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:36:ce:7e:f0:b4:a5:dc:1f:83:83:99:45:02: 7b:77:6d:5f:cd:0d:cf:da:24:8a:1e:ee:07:14:54: 06:93:77:d8:f8:24:46:7a:76:cd:b9:f9:96:75:13: c8:3d:ce:d0:7e:4c:cb:21:58:34:5a:4c:b7:d6:ad: 77:6e:0e:9e:e4:46:b8:47:a0:4c:33:61:10:8f:c5: c0:3e:ab:77:74:27:0d:cf:bd:e9:67:50:5d:f6:ea: 4c:1f:33:d2:ba:94:dd:59:09:90:a8:e2:fa:3b:18: 85:d7:ba:11:12:5b:4b:4a:1b:23:89:e1:26:4c:3b: da:b9:ef:a2:99:d6:9b:d7:ca:d1:b5:f6:fb:4b:68: e7:cc:1a:3c:09:ed:e2:e3:f7:b3:97:3c:20:07:37: f5:6a:e7:f6:d9:a8:57:0a:ad:56:31:e0:2e:c0:c5: 4a:2f:48:e2:14:cd:04:17:6c:d0:aa:2c:98:79:6c: b2:5a:f1:6e:6b:29:55:ca:41:ef:11:98:5e:f5:ef: 4f:c6:ca:e8:d8:c6:11:62:95:27:71:aa:eb:64:5b: 56:1e:ed:c5:b3:95:d8:34:7b:21:b9:7b:01:d3:16: c4:bd:18:1c:d1:51:de:ac:93:e9:c0:5e:b7:5b:0e: d4:2e:a2:2a:de:6a:32:8c:46:9d:d0:6b:db:3d:e7: 69:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0E:F4:44:C7:6E:E5:62:40:4E:40:60:1F:A6:35:60:BC:26:4F:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7da8b6d5-b9b5-3604-89eb-7a990fd76858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b4:11:6e:bc:76:fc:f7:69:ad:aa:97:0a:10:d2:b2:e7:dd: d8:61:89:a5:02:a7:0b:2e:b1:6e:24:ee:59:8d:d5:b7:39:2c: 73:3c:fd:9d:f5:fe:fa:ed:70:15:b6:dd:f0:65:4a:7d:ee:38: 64:3a:0c:11:22:bd:2a:81:2b:af:88:fb:49:bb:20:c8:8f:b4: 65:66:20:6d:85:13:64:5d:74:57:97:47:ff:50:71:a5:bd:a8: 8b:b2:df:70:8a:d7:75:02:dc:5d:ce:91:e4:44:1c:f8:cf:b2: 41:36:da:86:19:7c:9d:a1:64:99:55:ae:f2:1d:06:70:6f:be: 6e:55:02:56:48:32:12:3c:b0:87:6c:7b:af:c5:bd:42:1a:e3: 4d:de:57:6c:8c:74:3b:63:47:e0:b3:14:ad:c0:4f:db:89:d9: 4c:fb:f2:8b:eb:56:d6:f9:55:a2:cb:2a:32:ac:63:db:38:5f: 5b:2e:d6:05:51:13:96:fc:3a:f9:fe:6b:b9:ab:f3:68:7a:4d: 3a:56:36:cd:9b:ff:01:c9:bb:7a:d3:ce:eb:21:5b:77:0a:53: 75:50:9c:21:98:36:99:fb:7b:39:e7:18:c8:73:f2:81:93:cd: 7f:23:bd:a7:d6:41:4c:2a:3f:03:08:0b:fc:f1:48:ab:43:51: 27:ae:39:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZSBcxhVBBThqENAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE2MDIzM1oXDTI1MDUxMjE1MDIzM1owLzEtMCsGA1UEAxMk NzJlZDgwYjEtZjM2MS00YjI1LWE3NWEtMGUzOTQxMDNlNDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjbOfvC0pdwfg4OZRQJ7d21fzQ3P2iSKHu4H FFQGk3fY+CRGenbNufmWdRPIPc7QfkzLIVg0Wky31q13bg6e5Ea4R6BMM2EQj8XA Pqt3dCcNz73pZ1Bd9upMHzPSupTdWQmQqOL6OxiF17oREltLShsjieEmTDvaue+i mdab18rRtfb7S2jnzBo8Ce3i4/ezlzwgBzf1auf22ahXCq1WMeAuwMVKL0jiFM0E F2zQqiyYeWyyWvFuaylVykHvEZhe9e9Pxsro2MYRYpUncarrZFtWHu3Fs5XYNHsh uXsB0xbEvRgc0VHerJPpwF63Ww7ULqIq3moyjEad0GvbPedpbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcO9ETHbuViQE5AYB+mNWC8Jk8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2RhOGI2ZDUtYjliNS0z NjA0LTg5ZWItN2E5OTBmZDc2ODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS0EW68dvz3aa2qlwoQ0rLn3dhhiaUCpwsusW4k7lmN1bc5LHM8/Z31 /vrtcBW23fBlSn3uOGQ6DBEivSqBK6+I+0m7IMiPtGVmIG2FE2RddFeXR/9QcaW9 qIuy33CK13UC3F3OkeREHPjPskE22oYZfJ2hZJlVrvIdBnBvvm5VAlZIMhI8sIds e6/FvUIa403eV2yMdDtjR+CzFK3AT9uJ2Uz78ovrVtb5VaLLKjKsY9s4X1su1gVR E5b8Ovn+a7mr82h6TTpWNs2b/wHJu3rTzushW3cKU3VQnCGYNpn7eznnGMhz8oGT zX8jvafWQUwqPwMIC/zxSKtDUSeuOao= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:51 2025 by rpki-client