$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa File: 81b11565-f8a6-38ca-8987-5a25512a7a32.roa (raw, json) Hash identifier: WvUR7F84zXvgtQTeizcJvjjERxI3mQ3oGjr7GiNBrIw= Subject key identifier: DB:19:90:15:6C:A9:E8:99:71:8C:87:03:99:16:89:2D:8D:29:5F:00 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584879DAA2CE6DB3F1A7380F6A00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa Signing time: Wed 08 Jan 2025 11:40:13 +0000 ROA not before: Wed 08 Jan 2025 11:40:13 +0000 ROA not after: Tue 08 Apr 2025 10:40:13 +0000 asID: 3356 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:79:da:a2:ce:6d:b3:f1:a7:38:0f:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 8 11:40:13 2025 GMT Not After : Apr 8 10:40:13 2025 GMT Subject: CN=5dd250ee-50fb-40c4-9003-9f74baa594b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:de:2d:49:81:ab:f0:3c:2c:cc:26:ae:df: 31:37:5b:80:c5:30:aa:87:54:23:68:f0:c7:b8:45: 9a:a8:e1:f2:7b:88:6a:78:09:74:be:16:d5:f9:d2: 94:39:7b:a3:67:fb:43:73:b2:5c:e7:76:a0:76:43: 86:00:e5:89:bf:87:95:5e:9b:b8:04:0e:ff:0b:f3: 38:fc:0a:56:bd:55:2e:e9:96:66:0e:04:84:c6:f4: 00:b5:c7:62:a4:7f:ad:6f:bb:a3:c4:73:a7:0a:87: 7c:21:ed:d7:37:9c:0f:2e:1f:95:e2:48:51:20:98: ae:86:6c:aa:4c:64:f1:42:38:78:7d:e1:fe:2d:b2: 7f:a1:63:03:1c:8c:08:93:f0:d4:eb:0b:a9:7b:3b: e2:61:92:84:21:02:5a:c5:91:50:11:b7:ef:12:e7: ea:b0:c2:a1:cf:ca:21:fb:fa:89:8d:24:48:15:41: 0a:52:ba:4d:87:d7:19:57:a0:99:59:ae:a8:1d:ea: 46:8a:5e:b1:9c:f9:07:35:c7:22:10:93:6f:2c:24: 55:d8:16:58:8d:6d:98:76:75:fe:47:c6:75:05:9e: 21:f0:d6:8a:ae:b8:ce:98:3f:96:f5:6e:4d:01:ac: ea:dc:e9:fd:84:7f:a1:33:65:8a:d8:22:71:1c:62: 20:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:19:90:15:6C:A9:E8:99:71:8C:87:03:99:16:89:2D:8D:29:5F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81b11565-f8a6-38ca-8987-5a25512a7a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f9:3a:8e:8a:74:d3:68:6f:41:9e:fd:5a:60:dd:d2:9c:7c: 8c:85:d9:aa:13:2a:84:ca:8a:96:60:ff:4a:f5:9c:17:88:3f: 8d:44:0e:f5:4b:a5:8a:58:5c:af:b0:6a:14:ab:8c:ad:5f:95: 25:5a:ea:8e:45:8d:50:b4:67:f5:8a:22:46:47:9a:1e:59:e8: 4a:5d:e8:c8:b8:bb:dd:b9:d3:8d:18:f6:37:07:07:2f:1d:43: 92:05:98:58:6f:1b:41:aa:4f:32:cd:0d:e0:39:17:45:5c:12: eb:a2:15:5b:5d:46:e7:41:13:fc:39:3b:c2:c1:66:c3:d7:e0: 39:7b:67:30:0e:61:5c:19:a8:c5:c9:52:07:f1:88:0b:4d:9c: 4d:40:03:63:00:25:e5:d7:12:ab:70:18:34:32:0b:f8:be:4a: 69:36:a1:1b:a3:8e:fb:1d:b4:19:dd:b2:23:b4:81:34:f5:a4: 24:1f:2e:18:26:7c:f7:4d:de:1a:d5:33:14:b6:ba:a1:ad:2c: c7:48:5a:d6:cb:09:20:22:a9:be:8a:15:8a:30:81:01:00:b5: 7c:1a:87:7e:b1:f1:02:54:30:b0:f4:04:b7:9f:3d:76:44:44: 67:e4:1f:8e:d0:a8:df:41:94:0b:db:78:c3:96:b4:98:f5:d1: d7:dd:27:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh52qLObbPxpzgPagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEwODExNDAxM1oXDTI1MDQwODEwNDAxM1owLzEtMCsGA1UEAxMk NWRkMjUwZWUtNTBmYi00MGM0LTkwMDMtOWY3NGJhYTU5NGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqELeLUmBq/A8LMwmrt8xN1uAxTCqh1QjaPDH uEWaqOHye4hqeAl0vhbV+dKUOXujZ/tDc7Jc53agdkOGAOWJv4eVXpu4BA7/C/M4 /ApWvVUu6ZZmDgSExvQAtcdipH+tb7ujxHOnCod8Ie3XN5wPLh+V4khRIJiuhmyq TGTxQjh4feH+LbJ/oWMDHIwIk/DU6wupezviYZKEIQJaxZFQEbfvEufqsMKhz8oh +/qJjSRIFUEKUrpNh9cZV6CZWa6oHepGil6xnPkHNcciEJNvLCRV2BZYjW2YdnX+ R8Z1BZ4h8NaKrrjOmD+W9W5NAazq3On9hH+hM2WK2CJxHGIgKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsZkBVsqeiZcYyHA5kWiS2NKV8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODFiMTE1NjUtZjhhNi0z OGNhLTg5ODctNWEyNTUxMmE3YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/5Oo6KdNNob0Ge/Vpg3dKcfIyF2aoTKoTKipZg/0r1nBeIP41EDvVL pYpYXK+wahSrjK1flSVa6o5FjVC0Z/WKIkZHmh5Z6Epd6Mi4u925040Y9jcHBy8d Q5IFmFhvG0GqTzLNDeA5F0VcEuuiFVtdRudBE/w5O8LBZsPX4Dl7ZzAOYVwZqMXJ UgfxiAtNnE1AA2MAJeXXEqtwGDQyC/i+Smk2oRujjvsdtBndsiO0gTT1pCQfLhgm fPdN3hrVMxS2uqGtLMdIWtbLCSAiqb6KFYowgQEAtXwah36x8QJUMLD0BLefPXZE RGfkH47QqN9BlAvbeMOWtJj10dfdJ9Y= -----END CERTIFICATE-----Generated at Wed Feb 5 19:10:38 2025 by rpki-client