$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa File: 89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa (raw, json) Hash identifier: dCHiJo9sgF3r7Gd7/mgOEnObR6hOC8+PBgpqX4FtBZI= Subject key identifier: B8:E0:2D:72:37:31:21:C1:0E:52:61:AD:00:E7:E0:3A:45:54:1A:E1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584865303B22047667BC4A161000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 3360 IP address blocks: 20.134.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:3b:22:04:76:67:bc:4a:16:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=3e2f60f3-bce8-4903-a439-3543ce8c19b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:71:8a:4b:77:f5:f3:0b:8e:af:f2:90:be: a9:86:6d:9b:f8:11:c4:25:f1:37:24:25:4a:78:62: fd:10:b4:10:b7:d0:a4:de:1e:43:cc:90:15:fe:9c: 05:6a:52:f7:a7:bb:37:7a:ad:ae:78:ec:26:30:97: 0b:a8:bd:4d:92:27:35:0a:e0:15:7e:e8:98:7b:f1: eb:02:db:6d:c2:88:1e:c1:f7:b9:97:84:d2:67:25: c9:74:2e:7c:2e:ab:44:15:95:f0:46:42:19:9e:65: 37:8f:44:f9:e4:92:26:81:a1:80:2e:cf:16:59:33: 23:8a:06:f1:92:5a:28:24:c7:df:d7:82:59:44:1a: 63:bb:0e:10:ea:02:92:1f:c1:e6:d9:6c:60:ea:4b: cd:09:30:2d:26:fd:f5:ba:5b:0b:84:72:a8:db:bb: 99:49:c3:df:06:94:8b:b8:fa:69:18:63:91:d4:42: 83:11:ed:f6:06:6d:7f:d2:52:f3:98:80:23:67:21: db:d6:fa:6b:72:16:db:35:f5:13:be:0b:18:f0:90: ec:79:9e:dc:b4:51:9a:1e:6d:33:33:1a:87:53:38: ea:1f:11:30:fe:a9:c6:17:49:a2:bf:6c:3f:53:a7: 27:a2:e5:1d:71:da:9c:6a:98:7f:40:ed:d0:57:fa: 37:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E0:2D:72:37:31:21:C1:0E:52:61:AD:00:E7:E0:3A:45:54:1A:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d33c2c-cc6d-3ffd-abbd-63f459d44e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a2:4f:ea:de:6a:f9:32:73:dd:e2:b2:fd:0d:31:db:33:96: 97:39:2e:6f:73:f3:2a:b9:48:f3:bb:da:f1:28:f3:9a:3d:d3: 28:56:d9:08:f2:87:03:af:19:2c:0f:7c:96:00:4b:c8:76:bd: 37:16:f2:36:7c:50:3a:fe:df:d9:71:86:4b:ea:14:d1:a4:c0: 06:45:6f:f3:2d:a1:a9:2c:ac:f4:96:58:9f:b2:8a:08:02:58: 84:cb:71:81:ca:ec:93:3e:a5:c1:c3:fa:21:a0:5f:cb:83:f7: 1c:e8:56:67:33:4d:62:52:11:25:f8:21:c3:31:53:3e:81:6e: c0:4b:b1:5b:c9:14:13:da:85:da:69:d8:5b:44:64:99:ce:8c: 22:32:a5:a3:5c:a5:d6:d0:56:1b:d0:d1:79:ec:55:22:83:d9: 83:69:b2:f5:66:b8:51:da:39:d6:f4:b2:28:0a:6b:48:03:b9: 12:f9:be:ad:6a:59:77:70:90:44:e9:4c:63:11:73:21:fb:87: 98:01:3b:19:c1:dd:9f:45:89:73:31:64:e7:87:ef:3c:2a:7b: 76:89:a8:ea:96:96:cf:07:ee:2b:0e:e0:d4:6f:a8:d6:23:2b: 68:05:9c:f0:39:d4:2c:f4:e4:43:09:fe:68:a5:dc:e9:2f:37: e5:6e:65:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMDsiBHZnvEoWEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk M2UyZjYwZjMtYmNlOC00OTAzLWE0MzktMzU0M2NlOGMxOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Zxikt39fMLjq/ykL6phm2b+BHEJfE3JCVK eGL9ELQQt9Ck3h5DzJAV/pwFalL3p7s3eq2ueOwmMJcLqL1Nkic1CuAVfuiYe/Hr Atttwogewfe5l4TSZyXJdC58LqtEFZXwRkIZnmU3j0T55JImgaGALs8WWTMjigbx klooJMff14JZRBpjuw4Q6gKSH8Hm2Wxg6kvNCTAtJv31ulsLhHKo27uZScPfBpSL uPppGGOR1EKDEe32Bm1/0lLzmIAjZyHb1vprchbbNfUTvgsY8JDseZ7ctFGaHm0z MxqHUzjqHxEw/qnGF0miv2w/U6cnouUdcdqcaph/QO3QV/o3OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjgLXI3MSHBDlJhrQDn4DpFVBrhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODlkMzNjMmMtY2M2ZC0z ZmZkLWFiYmQtNjNmNDU5ZDQ0ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESiT+reavkyc93isv0NMdszlpc5Lm9z8yq5SPO72vEo85o90yhW2Qjy hwOvGSwPfJYAS8h2vTcW8jZ8UDr+39lxhkvqFNGkwAZFb/MtoaksrPSWWJ+yiggC WITLcYHK7JM+pcHD+iGgX8uD9xzoVmczTWJSESX4IcMxUz6BbsBLsVvJFBPahdpp 2FtEZJnOjCIypaNcpdbQVhvQ0XnsVSKD2YNpsvVmuFHaOdb0sigKa0gDuRL5vq1q WXdwkETpTGMRcyH7h5gBOxnB3Z9FiXMxZOeH7zwqe3aJqOqWls8H7isO4NRvqNYj K2gFnPA51Cz05EMJ/mil3OkvN+VuZVo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:43 2025 by rpki-client