$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa File: 95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa (raw, json) Hash identifier: BCvfuKa1fyMGZx9dWm1tq2lvFB7UoC3krWGPX3MwttA= Subject key identifier: F3:5E:46:89:BA:9E:38:CE:9B:2A:FA:75:13:58:31:B9:6E:59:1F:AD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849244E6E73D118A749F3752C00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.148.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:6e:73:d1:18:a7:49:f3:75:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=1329a35f-8d9e-4ac5-b1ba-dfc6e4068dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cd:2d:0b:35:1c:8a:98:e6:a2:6c:bb:87:a7: d7:48:bb:1f:e7:c1:8f:4d:36:6b:91:18:b7:8a:fe: 08:af:ce:bd:77:f8:36:60:9a:c6:e1:64:34:63:d6: 64:0f:95:05:9b:50:bb:5a:12:c2:aa:7e:f1:5a:78: 08:96:66:0f:42:de:d0:19:b3:af:82:60:ca:b9:b1: 4a:6f:b5:42:34:8b:01:46:c2:ff:01:eb:9d:19:51: de:67:ba:2f:f0:b1:6b:fc:c9:45:42:b8:24:e4:72: c0:c9:dd:36:83:ef:5d:8c:60:e8:cc:ee:81:ea:f4: 57:d8:24:47:28:46:92:ca:d4:ce:99:a7:bc:4a:bf: 63:73:28:fd:2f:20:32:0f:57:a7:a4:ca:4b:bd:30: 79:84:e2:ea:63:26:f3:0c:96:63:31:eb:bd:0b:9c: 63:b6:51:bc:14:ee:8f:a4:8e:86:fe:55:0f:51:1b: 85:6a:6d:93:0c:f6:66:14:28:4d:ad:09:ee:18:61: 62:26:64:8a:5c:40:aa:40:8e:3f:16:a3:1d:95:be: 4a:42:11:83:b1:28:2e:47:0f:fc:09:38:27:20:ad: 65:46:1e:7b:20:3c:d0:51:e3:dd:23:c5:2e:53:43: a4:59:6f:19:8b:46:14:cb:30:cf:80:f5:bb:a6:b5: 54:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5E:46:89:BA:9E:38:CE:9B:2A:FA:75:13:58:31:B9:6E:59:1F:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c6:86:0f:b7:42:82:d3:e6:de:a1:6b:1c:02:55:5e:95:3b: 7e:ad:20:e7:48:5a:2d:f1:24:54:2e:c5:b4:b7:17:6b:c6:79: 2c:a8:dc:95:a7:e5:b6:c5:f4:cf:18:a9:04:b0:ee:b3:5e:27: 06:af:e6:e8:f1:e5:43:2c:e4:1b:6c:ca:aa:ac:81:8f:24:6c: 2e:57:27:df:eb:d3:64:5e:3c:6a:ba:ff:69:8f:cd:4e:93:4c: 86:10:71:b3:bc:87:5e:44:01:60:6d:23:e0:aa:72:6e:52:36: e0:43:5e:24:44:ad:0a:24:a7:b2:6e:e4:df:a5:3c:78:7f:f6: fc:2a:d5:03:28:15:4a:9d:f3:c6:14:e2:22:70:2f:d4:78:78: ee:10:9b:81:48:c5:a8:4b:0c:b6:83:5c:46:cb:ea:cf:35:67: eb:27:50:62:37:f7:fc:2d:c0:99:3b:fb:51:9e:7a:6b:56:2c: 5e:6b:78:0a:25:44:be:6a:37:d8:b1:35:d9:d1:ad:25:7d:d9: b8:fd:9b:25:fc:4a:6e:93:08:03:60:9b:6a:20:12:d3:d5:6d: 3c:e5:b7:b4:b4:dc:ef:7c:22:43:8a:26:92:a9:35:78:30:4a: 91:9d:52:7d:ab:e6:81:3a:4d:3e:0d:f6:5b:1d:5d:94:17:e7: 6d:de:f5:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTm5z0RinSfN1LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MTMyOWEzNWYtOGQ5ZS00YWM1LWIxYmEtZGZjNmU0MDY4ZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s0tCzUcipjmomy7h6fXSLsf58GPTTZrkRi3 iv4Ir869d/g2YJrG4WQ0Y9ZkD5UFm1C7WhLCqn7xWngIlmYPQt7QGbOvgmDKubFK b7VCNIsBRsL/AeudGVHeZ7ov8LFr/MlFQrgk5HLAyd02g+9djGDozO6B6vRX2CRH KEaSytTOmae8Sr9jcyj9LyAyD1enpMpLvTB5hOLqYybzDJZjMeu9C5xjtlG8FO6P pI6G/lUPURuFam2TDPZmFChNrQnuGGFiJmSKXECqQI4/FqMdlb5KQhGDsSguRw/8 CTgnIK1lRh57IDzQUePdI8UuU0OkWW8Zi0YUyzDPgPW7prVUZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNeRom6njjOmyr6dRNYMbluWR+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOTVjZmMzZDEtOGM5Ni0z NzBlLWIwYjQtNTRiMTZkZDlhYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXGhg+3QoLT5t6haxwCVV6VO36tIOdIWi3xJFQuxbS3F2vGeSyo3JWn 5bbF9M8YqQSw7rNeJwav5ujx5UMs5BtsyqqsgY8kbC5XJ9/r02RePGq6/2mPzU6T TIYQcbO8h15EAWBtI+Cqcm5SNuBDXiRErQokp7Ju5N+lPHh/9vwq1QMoFUqd88YU 4iJwL9R4eO4Qm4FIxahLDLaDXEbL6s81Z+snUGI39/wtwJk7+1GeemtWLF5reAol RL5qN9ixNdnRrSV92bj9myX8Sm6TCANgm2ogEtPVbTzlt7S03O98IkOKJpKpNXgw SpGdUn2r5oE6TT4N9lsdXZQX523e9dc= -----END CERTIFICATE-----Generated at Fri Mar 14 09:10:16 2025 by rpki-client