$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b450991-fe79-301e-aa84-d70f6fad1d98.roa File: 8b450991-fe79-301e-aa84-d70f6fad1d98.roa (raw, json) Hash identifier: IT1OAFw+hLBkxVvFN4yDzoLY8vLd4oBBpYl6BSXmRSE= Subject key identifier: D3:E1:0C:50:E2:98:33:66:C8:AC:2C:2C:F3:33:D1:24:57:FB:59:F1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848B35B6CE957D6376D65DE8CE8 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b450991-fe79-301e-aa84-d70f6fad1d98.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 202 IP address blocks: 20.155.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6c:e9:57:d6:37:6d:65:de:8c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=7bb53cfb-bfbf-48bb-99d4-33b6f1618a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:72:e4:8c:bf:9f:73:81:5c:f2:82:94:0c: 30:02:23:e4:ad:15:be:bb:49:50:15:31:8a:cf:a7: b8:28:76:bd:00:94:0e:5f:e4:ef:26:93:96:bd:9c: 3c:34:1d:38:41:4b:a1:a3:26:d0:28:bb:7d:a6:74: 37:78:54:3c:f7:02:eb:80:64:56:a9:54:81:5b:ab: 11:28:c6:01:eb:69:54:66:eb:b0:dd:55:98:68:54: 3e:d1:3d:64:8c:3e:78:aa:02:a4:f6:18:39:27:d3: 7b:df:01:b9:b8:67:36:a5:fb:f4:aa:4e:a8:13:b0: db:3a:01:fb:b7:05:08:93:cc:b8:55:48:5a:0a:fe: a3:98:d3:34:57:a1:0f:5f:3c:36:5b:76:09:bc:23: d1:ef:e4:46:9d:f1:2a:36:24:6e:a9:da:18:0a:94: ec:82:a6:31:da:c4:d7:4a:3c:e9:66:1c:f5:94:2b: 83:b4:f3:28:d7:ef:5a:2a:47:f8:2b:65:38:14:52: 89:ef:29:d7:b2:6e:29:9c:16:5e:aa:d1:e6:71:40: d0:3c:d9:1d:19:6f:b1:bb:19:f1:8f:d6:63:e5:c9: 58:6f:3e:e6:de:d8:18:17:17:72:07:b7:92:3e:ee: 0a:6a:eb:62:0f:09:37:09:6f:8e:ea:04:cc:e2:9b: 6a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E1:0C:50:E2:98:33:66:C8:AC:2C:2C:F3:33:D1:24:57:FB:59:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b450991-fe79-301e-aa84-d70f6fad1d98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.155.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8e:08:83:f4:66:c1:59:1e:10:08:5b:a9:99:ed:92:98:e3: 17:cb:48:5e:22:c2:e1:83:d1:a0:bd:f6:f3:c7:a1:3d:6a:8e: 1f:c4:e6:66:4b:84:af:da:ef:93:89:83:c1:19:77:01:3f:a3: 5f:cf:da:9e:e1:1a:de:60:1b:d8:c9:f7:88:7d:8f:d0:d3:d7: ba:52:9e:45:b1:7d:82:17:4b:60:7c:28:7b:2d:1a:04:81:0b: bd:1a:12:6b:93:d1:70:98:66:df:7f:db:75:65:c3:fc:a4:96: 86:24:1a:ac:44:9d:5f:3b:ee:e7:5b:bd:26:60:19:2e:bf:3e: 31:c7:d8:c9:56:57:25:83:b1:88:a2:ce:01:49:8e:bb:96:3a: 04:31:b9:96:42:0b:4c:a6:3e:3e:0e:a3:dd:92:5b:fb:6c:52: 9d:53:6f:e8:0a:eb:78:74:58:71:80:ac:c6:8d:13:a2:fb:98: ae:87:00:40:17:83:82:fc:d1:8b:3f:58:22:da:07:9e:e4:92: 6c:99:4d:cf:3c:2b:ad:0a:eb:26:28:10:22:9b:2c:51:cd:81: 00:39:71:58:73:70:3e:c4:93:1f:45:0c:2d:06:b9:af:07:ae: 63:a3:b7:82:2a:ea:0e:d0:59:d1:c7:e2:e8:7c:97:38:3c:a6: 5a:dd:ea:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2zpV9Y3bWXejOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk N2JiNTNjZmItYmZiZi00OGJiLTk5ZDQtMzNiNmYxNjE4YTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdNy5Iy/n3OBXPKClAwwAiPkrRW+u0lQFTGK z6e4KHa9AJQOX+TvJpOWvZw8NB04QUuhoybQKLt9pnQ3eFQ89wLrgGRWqVSBW6sR KMYB62lUZuuw3VWYaFQ+0T1kjD54qgKk9hg5J9N73wG5uGc2pfv0qk6oE7DbOgH7 twUIk8y4VUhaCv6jmNM0V6EPXzw2W3YJvCPR7+RGnfEqNiRuqdoYCpTsgqYx2sTX SjzpZhz1lCuDtPMo1+9aKkf4K2U4FFKJ7ynXsm4pnBZeqtHmcUDQPNkdGW+xuxnx j9Zj5clYbz7m3tgYFxdyB7eSPu4KautiDwk3CW+O6gTM4ptq4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPhDFDimDNmyKwsLPMz0SRX+1nxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOGI0NTA5OTEtZmU3OS0z MDFlLWFhODQtZDcwZjZmYWQxZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFJtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqOCIP0ZsFZHhAIW6mZ7ZKY4xfLSF4iwuGD0aC99vPHoT1qjh/E5mZL hK/a75OJg8EZdwE/o1/P2p7hGt5gG9jJ94h9j9DT17pSnkWxfYIXS2B8KHstGgSB C70aEmuT0XCYZt9/23Vlw/ykloYkGqxEnV877udbvSZgGS6/PjHH2MlWVyWDsYii zgFJjruWOgQxuZZCC0ymPj4Oo92SW/tsUp1Tb+gK63h0WHGArMaNE6L7mK6HAEAX g4L80Ys/WCLaB57kkmyZTc88K60K6yYoECKbLFHNgQA5cVhzcD7Ekx9FDC0Gua8H rmOjt4Iq6g7QWdHH4uh8lzg8plrd6nQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:01 2025 by rpki-client