$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa File: 9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa (raw, json) Hash identifier: uKVSivXEcVVBHq4J+0/5cirvXanC1xIeqLwxXx77ZIk= Subject key identifier: 1F:FF:79:CF:22:57:49:23:2D:58:4A:49:AD:98:68:C9:82:5F:09:42 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13B0AC8EE5ACB4FB25018 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 203 IP address blocks: 20.134.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3b:0a:c8:ee:5a:cb:4f:b2:50:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=4bbee31b-57ec-4b75-8f27-e6fef33aee70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:59:a4:aa:7e:82:5a:e9:b8:fe:99:58:46: 37:3d:0b:69:bd:89:4c:78:7a:a5:46:a9:bd:ce:3d: a9:25:16:5a:3b:71:71:5d:0a:53:6b:80:f4:0d:08: 6b:5a:ce:17:ed:25:b9:82:83:c7:46:2b:77:58:99: 50:ee:c9:ae:1b:57:b1:03:ea:69:5e:b9:7a:24:e9: 9b:72:38:18:ee:d5:d9:4c:ed:1d:9d:d5:9a:15:30: 84:d0:8c:93:10:2e:45:af:8e:f3:db:bd:29:bf:fd: c0:fd:12:44:b2:40:dc:49:4c:63:2f:7f:8b:99:f7: 8c:6e:d1:29:30:ec:39:e9:7a:e9:68:f3:5d:50:00: af:04:18:35:00:0c:b1:73:c4:0a:87:83:51:56:f9: ca:93:18:2c:f4:1e:e8:2b:10:95:62:4a:47:d7:37: e8:61:21:d7:cc:75:98:aa:36:d2:8f:84:e6:7d:2c: e7:48:12:dc:12:1a:4a:2d:12:98:65:17:f7:de:fe: d6:70:fe:6c:4b:e3:c8:f6:e1:30:29:1b:73:f9:09: ef:ea:6a:6d:c7:a5:4a:6e:c0:54:06:e7:f7:6d:2f: f9:50:7f:c0:c6:53:2d:46:56:f2:4c:48:d3:3c:8c: 27:04:ba:81:d1:a0:7b:6d:c6:30:ac:d3:c0:40:87: 2c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FF:79:CF:22:57:49:23:2D:58:4A:49:AD:98:68:C9:82:5F:09:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c5:0a:82:1e:e6:cb:2e:07:72:5a:8b:7a:8d:b9:54:8b:27: 7c:ce:34:72:6b:d8:e6:8f:f9:f4:53:14:41:9a:87:42:17:06: 75:2e:dc:42:7d:22:70:74:9f:14:90:90:9d:02:a6:37:e2:1b: c9:7c:aa:de:e3:ae:30:f5:f4:a7:04:ec:35:65:48:b4:60:43: 27:03:e3:06:ae:06:8c:ba:62:93:09:1c:b1:eb:ff:94:64:e9: b8:88:1d:37:80:90:6a:12:fb:29:f6:88:67:60:3f:47:e9:d3: 1c:33:a0:13:ed:51:fa:b8:83:57:95:5b:d0:c2:37:b7:88:bc: 00:cc:a4:e2:29:d3:42:62:84:f2:2e:e0:76:e8:1d:d5:ee:77: 9a:fe:d7:6d:26:67:08:f1:ca:a2:2d:4a:8a:8b:7d:91:bf:71: 98:0d:fb:c0:8c:3a:ef:a3:8a:5f:31:87:aa:5d:1a:84:96:d6: 1a:55:63:d0:13:fd:64:0a:fb:ab:f9:c5:a7:1a:2a:83:99:23: 7d:62:9f:e0:e1:4f:da:35:26:22:f8:eb:88:9e:07:8d:58:a1: 9b:5c:ac:91:39:09:db:49:02:cb:05:62:23:e9:98:9b:ce:23: f7:f0:65:ee:6c:ad:03:c0:0f:1f:d2:c7:a3:3f:23:41:3c:01: a0:44:e6:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTsKyO5ay0+yUBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk NGJiZWUzMWItNTdlYy00Yjc1LThmMjctZTZmZWYzM2FlZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLlZpKp+glrpuP6ZWEY3PQtpvYlMeHqlRqm9 zj2pJRZaO3FxXQpTa4D0DQhrWs4X7SW5goPHRit3WJlQ7smuG1exA+ppXrl6JOmb cjgY7tXZTO0dndWaFTCE0IyTEC5Fr47z270pv/3A/RJEskDcSUxjL3+LmfeMbtEp MOw56XrpaPNdUACvBBg1AAyxc8QKh4NRVvnKkxgs9B7oKxCVYkpH1zfoYSHXzHWY qjbSj4TmfSznSBLcEhpKLRKYZRf33v7WcP5sS+PI9uEwKRtz+Qnv6mptx6VKbsBU Buf3bS/5UH/AxlMtRlbyTEjTPIwnBLqB0aB7bcYwrNPAQIcsbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB//ec8iV0kjLVhKSa2YaMmCXwlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWRkMGVkZDktNjIzNS0z ZDIzLWI3YTMtNmY5NzA4ZGY2NWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfFCoIe5ssuB3Jai3qNuVSLJ3zONHJr2OaP+fRTFEGah0IXBnUu3EJ9 InB0nxSQkJ0CpjfiG8l8qt7jrjD19KcE7DVlSLRgQycD4wauBoy6YpMJHLHr/5Rk 6biIHTeAkGoS+yn2iGdgP0fp0xwzoBPtUfq4g1eVW9DCN7eIvADMpOIp00JihPIu 4HboHdXud5r+120mZwjxyqItSoqLfZG/cZgN+8CMOu+jil8xh6pdGoSW1hpVY9AT /WQK+6v5xacaKoOZI31in+DhT9o1JiL464ieB41YoZtcrJE5CdtJAssFYiPpmJvO I/fwZe5srQPADx/Sx6M/I0E8AaBE5j0= -----END CERTIFICATE-----Generated at Fri Mar 14 11:01:23 2025 by rpki-client