$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa File: 7ec506b0-9799-3a53-982d-39afbe885b36.roa (raw, json) Hash identifier: 2Z16Mv/AJyoSTsJGNYwgotwdz+ftgbK+JkY5IlL+jI8= Subject key identifier: 5A:66:11:66:A8:B1:F9:16:0F:7A:24:86:33:0A:5E:13:A1:E3:19:D9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13C28851A2309D26E9480 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 203 IP address blocks: 20.134.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3c:28:85:1a:23:09:d2:6e:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=5f6aa353-a235-4b36-8b89-e276da41446b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ee:a7:bf:24:d3:df:20:a2:e1:ce:03:9d:64: 74:f5:53:63:91:c1:b5:a0:ad:5b:e3:bc:ec:0f:be: ba:1e:a3:08:4a:bf:89:15:d6:06:0b:1e:01:55:50: 1d:74:09:ce:b2:00:82:66:f1:b0:52:1a:40:97:06: 89:27:82:e7:bb:ac:28:16:73:44:80:45:0c:a9:ad: a4:a9:5f:07:fc:fc:d4:e2:41:93:60:f5:9e:a5:3f: 01:16:f9:9c:38:2e:44:26:0b:bc:ac:5f:bc:6a:35: 6b:72:ff:28:66:bc:00:79:eb:db:39:a1:c9:48:4d: 6b:79:d1:90:4e:13:70:5b:c3:16:00:a2:a4:e7:a0: 52:43:9e:4c:0d:9a:78:3e:4f:dd:74:42:aa:ce:d1: af:59:39:df:4a:19:29:70:0f:ae:0f:64:d6:61:c2: 99:a9:e6:a5:32:b8:89:9f:d5:f5:6c:62:c4:dd:3a: 45:76:a6:36:96:19:5c:f5:a2:8a:82:26:d0:80:ca: 2f:59:ba:b5:b2:79:4f:83:dc:24:58:c8:f9:aa:26: 40:6c:00:2b:7f:4a:9e:3d:61:ad:3a:1c:81:01:75: 65:0a:bf:98:03:e4:7d:5d:2a:07:6e:c4:cb:f6:d7: 9e:17:9b:50:2c:f4:1b:16:6d:0e:ed:f0:2a:8b:21: 86:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:66:11:66:A8:B1:F9:16:0F:7A:24:86:33:0A:5E:13:A1:E3:19:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:04:f4:b0:71:83:6e:f4:86:79:be:c8:de:fd:25:ee:66:f9: f7:fe:4a:c8:fd:89:26:b7:51:48:9b:b5:7f:16:af:ed:0d:8e: 8e:37:67:b4:ec:3b:8b:0d:57:4c:49:94:8f:54:d3:56:1e:53: 2c:42:37:55:90:a7:d1:5c:7e:79:d5:f9:be:d0:2b:e3:cc:0a: fa:9d:84:7c:88:0c:ed:6f:b7:3d:a0:d2:d5:35:b2:bf:35:20: b7:53:73:7a:02:87:d5:5a:7a:05:c5:b7:d5:34:d7:78:af:15: 42:42:d7:0d:c9:ef:fa:90:e0:72:25:44:03:24:a3:05:ff:ef: a1:5c:d3:d6:f8:c6:84:47:65:13:04:51:a0:fc:3b:ac:96:33: 88:4e:fb:8e:ca:ef:9d:61:39:db:ec:44:74:02:57:3b:1a:1d: 58:32:08:32:f8:97:20:d6:c3:dd:37:1d:e7:42:b1:5a:f0:10: b9:47:4b:ec:15:e7:4d:28:5d:f4:11:a2:bf:79:a1:c4:55:25: 20:b9:59:41:0c:41:64:9a:74:d8:74:a5:1b:85:24:98:b5:ca: 41:c7:ee:0d:b2:f4:5a:3c:58:28:ec:07:34:f3:87:47:ec:7d: 6b:1a:61:6b:20:ec:a2:f9:61:a2:b6:d5:4f:b5:1c:a0:9f:1b: 75:f2:e0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTwohRojCdJulIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk NWY2YWEzNTMtYTIzNS00YjM2LThiODktZTI3NmRhNDE0NDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge6nvyTT3yCi4c4DnWR09VNjkcG1oK1b47zs D766HqMISr+JFdYGCx4BVVAddAnOsgCCZvGwUhpAlwaJJ4Lnu6woFnNEgEUMqa2k qV8H/PzU4kGTYPWepT8BFvmcOC5EJgu8rF+8ajVrcv8oZrwAeevbOaHJSE1redGQ ThNwW8MWAKKk56BSQ55MDZp4Pk/ddEKqztGvWTnfShkpcA+uD2TWYcKZqealMriJ n9X1bGLE3TpFdqY2lhlc9aKKgibQgMovWbq1snlPg9wkWMj5qiZAbAArf0qePWGt OhyBAXVlCr+YA+R9XSoHbsTL9teeF5tQLPQbFm0O7fAqiyGG+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpmEWaosfkWD3okhjMKXhOh4xnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2VjNTA2YjAtOTc5OS0z YTUzLTk4MmQtMzlhZmJlODg1YjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYE9LBxg270hnm+yN79Je5m+ff+Ssj9iSa3UUibtX8Wr+0Njo43Z7Ts O4sNV0xJlI9U01YeUyxCN1WQp9FcfnnV+b7QK+PMCvqdhHyIDO1vtz2g0tU1sr81 ILdTc3oCh9VaegXFt9U013ivFUJC1w3J7/qQ4HIlRAMkowX/76Fc09b4xoRHZRME UaD8O6yWM4hO+47K751hOdvsRHQCVzsaHVgyCDL4lyDWw903HedCsVrwELlHS+wV 500oXfQRor95ocRVJSC5WUEMQWSadNh0pRuFJJi1ykHH7g2y9Fo8WCjsBzTzh0fs fWsaYWsg7KL5YaK21U+1HKCfG3Xy4Go= -----END CERTIFICATE-----Generated at Fri Apr 11 23:20:34 2025 by rpki-client