$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a0a7662e-747b-33e3-8354-fbbed9b696f8.roa File: a0a7662e-747b-33e3-8354-fbbed9b696f8.roa (raw, json) Hash identifier: lDw9lBjYrFrGMn1A+jRpMuc+nV3NwlX2gXUwSwLM3wU= Subject key identifier: 03:CC:B9:C3:9B:24:A1:AF:67:8D:1E:82:45:B6:CA:4B:93:D9:53:7B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D962CB228139D8684FE01100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a0a7662e-747b-33e3-8354-fbbed9b696f8.roa Signing time: Tue 11 Feb 2025 16:56:21 +0000 ROA not before: Tue 11 Feb 2025 16:56:21 +0000 ROA not after: Mon 12 May 2025 15:56:21 +0000 asID: 3356 IP address blocks: 20.156.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:62:cb:22:81:39:d8:68:4f:e0:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 16:56:21 2025 GMT Not After : May 12 15:56:21 2025 GMT Subject: CN=c019bb44-ebdf-417a-9431-e02961395b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:26:c1:5d:61:6c:8c:97:41:1d:a0:74:c1:36: 59:e9:a9:40:6d:b3:1d:e7:9e:52:bc:8e:a9:e3:89: 52:c2:bd:e7:b9:7f:3b:d0:f5:5d:e8:2f:83:a4:83: bc:bd:1b:81:d1:d5:d3:23:d5:32:8c:c7:7c:59:f4: 4c:ba:93:35:55:cf:c4:31:0e:1b:5e:97:09:db:c8: c3:42:9c:ac:38:38:c8:76:d3:46:0e:18:f1:a9:f7: 10:52:34:db:fb:df:25:74:46:38:4b:e4:80:23:11: 09:78:5a:69:5f:1a:f6:95:3f:01:87:a2:16:9a:ad: 3a:4a:46:89:23:76:8a:bf:de:8e:14:16:cf:9f:7c: 62:4a:c4:ae:4f:32:e3:85:4c:b7:6d:a9:bf:23:38: 00:04:fe:11:a1:b8:cf:11:0a:b9:65:24:4f:42:30: ca:8a:f0:70:84:d6:87:21:75:96:8b:5a:eb:ea:38: fd:a6:8d:df:82:f5:42:50:f1:41:0a:60:0f:62:36: 4d:8f:0e:da:52:ce:ae:c5:06:f6:2c:c2:bc:56:df: 24:e2:96:6c:2d:46:e0:8a:65:3c:bb:3c:55:06:df: c4:d1:b8:d6:a4:d6:b9:19:4c:0e:3d:66:26:78:51: f4:dc:6e:01:5c:d2:be:c5:1d:39:c5:d7:2e:0a:2f: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CC:B9:C3:9B:24:A1:AF:67:8D:1E:82:45:B6:CA:4B:93:D9:53:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a0a7662e-747b-33e3-8354-fbbed9b696f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.156.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:32:58:06:aa:64:7a:f8:fd:97:6e:9c:b0:dd:7a:46:38:84: 0b:a9:9d:9a:19:51:cd:9b:00:55:f6:9e:3f:a1:0e:9f:7a:5f: f9:f6:84:6e:f3:a8:de:f9:40:05:7a:7a:30:b9:65:8a:2b:a8: 27:08:06:a0:7f:80:9b:b3:77:49:26:4f:40:bc:37:9c:bc:34: f1:5d:6d:0f:b8:51:66:46:a2:6b:ed:0d:fc:90:f1:a1:23:90: e0:2f:b1:c0:a3:c4:6d:ce:fb:cd:48:b6:9c:8d:61:da:4b:3c: e9:bd:5e:ac:c5:73:b2:5e:30:9c:bf:28:71:55:bf:a6:a4:77: e3:af:90:78:89:6c:18:14:be:76:e9:7c:9e:67:8c:3f:62:dc: dc:60:57:b0:5d:da:e3:23:b6:b1:ee:ae:3c:b7:4c:82:27:94: 03:26:31:c2:ff:e0:00:da:f1:f3:16:3a:e2:93:f7:87:5b:06: f8:99:a9:04:f0:69:0c:82:10:2b:43:48:d7:bd:91:67:b8:df: 5d:63:eb:cc:56:a6:f7:96:4b:99:3d:3e:36:19:fa:b3:04:e3: 72:6a:52:90:47:29:0a:f2:34:94:f1:1c:81:84:2b:ff:fa:b4: fa:39:70:bd:5d:b4:fe:53:a9:9f:80:cd:db:34:e8:12:36:5d: 38:36:48:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZYssigTnYaE/gEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE2NTYyMVoXDTI1MDUxMjE1NTYyMVowLzEtMCsGA1UEAxMk YzAxOWJiNDQtZWJkZi00MTdhLTk0MzEtZTAyOTYxMzk1YjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCbBXWFsjJdBHaB0wTZZ6alAbbMd555SvI6p 44lSwr3nuX870PVd6C+DpIO8vRuB0dXTI9UyjMd8WfRMupM1Vc/EMQ4bXpcJ28jD QpysODjIdtNGDhjxqfcQUjTb+98ldEY4S+SAIxEJeFppXxr2lT8Bh6IWmq06SkaJ I3aKv96OFBbPn3xiSsSuTzLjhUy3bam/IzgABP4RobjPEQq5ZSRPQjDKivBwhNaH IXWWi1rr6jj9po3fgvVCUPFBCmAPYjZNjw7aUs6uxQb2LMK8Vt8k4pZsLUbgimU8 uzxVBt/E0bjWpNa5GUwOPWYmeFH03G4BXNK+xR05xdcuCi9DvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPMucObJKGvZ40egkW2ykuT2VN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTBhNzY2MmUtNzQ3Yi0z M2UzLTgzNTQtZmJiZWQ5YjY5NmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJypMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8yWAaqZHr4/ZdunLDdekY4hAupnZoZUc2bAFX2nj+hDp96X/n2hG7z qN75QAV6ejC5ZYorqCcIBqB/gJuzd0kmT0C8N5y8NPFdbQ+4UWZGomvtDfyQ8aEj kOAvscCjxG3O+81ItpyNYdpLPOm9XqzFc7JeMJy/KHFVv6akd+OvkHiJbBgUvnbp fJ5njD9i3NxgV7Bd2uMjtrHurjy3TIInlAMmMcL/4ADa8fMWOuKT94dbBviZqQTw aQyCECtDSNe9kWe4311j68xWpveWS5k9PjYZ+rME43JqUpBHKQryNJTxHIGEK//6 tPo5cL1dtP5TqZ+Azds06BI2XTg2SFY= -----END CERTIFICATE-----Generated at Thu Apr 10 21:38:05 2025 by rpki-client