$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa File: ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa (raw, json) Hash identifier: JhzjfRa2CEmvkn7jHCGnzEchBCZg023dg+zwcCoqtJM= Subject key identifier: D0:7A:8D:FD:B2:E3:6C:AE:C0:F5:3F:7C:4D:26:FE:43:AA:7C:A0:B9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848B35B6C825C3783CB74330A80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 202 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6c:82:5c:37:83:cb:74:33:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=8b480aa2-906d-4c61-834d-2376814d79a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fd:10:70:b3:4f:9e:5d:d5:41:d7:d9:1a:27: 3f:dc:ee:c4:6e:b4:f3:53:e3:1f:1e:f3:36:77:c3: d8:19:4d:11:d9:4e:72:58:d9:94:6c:24:da:b9:dc: 31:b8:c3:82:82:c5:bd:f1:7f:a4:c9:c8:a1:64:e3: 9a:52:d9:3e:43:a8:de:1e:23:43:1e:71:97:83:4c: 39:47:b7:55:b3:52:f0:ca:4e:67:77:15:69:6d:ff: 9c:17:0c:3a:f4:0b:fb:53:8d:be:34:1f:4e:d7:52: 70:89:bd:c7:3e:05:0d:9d:f9:e5:ea:e2:5c:8b:b4: af:d1:ea:30:b8:0a:ea:7b:46:f3:a9:d5:a9:fe:85: 83:ea:d4:09:27:aa:1d:31:44:fa:34:ab:a5:99:4c: c3:61:03:8b:72:d1:61:d1:c0:cd:2d:70:f1:c0:2b: 7a:08:3e:68:a4:85:99:46:65:cb:11:86:7d:61:23: 47:0e:9c:ca:6d:ad:8b:87:53:6b:11:12:aa:90:c8: cd:4c:f6:b2:0c:a6:a4:ce:6a:10:ac:2c:34:4a:75: 5a:8f:9d:11:99:85:1c:ab:63:9b:4a:e1:c2:6b:ae: 15:f4:e9:d6:f2:06:dc:6b:1f:d5:df:5e:dd:6b:97: 79:08:df:d3:2c:bb:fe:17:cd:29:05:46:c1:2a:c0: 5c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7A:8D:FD:B2:E3:6C:AE:C0:F5:3F:7C:4D:26:FE:43:AA:7C:A0:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b3:95:2f:77:1a:1c:af:24:d2:75:38:b3:c8:d5:c5:a9:72: dc:1f:9e:4e:81:c3:52:cc:9e:d8:82:a5:70:1d:f6:df:21:f5: d0:ae:ba:04:37:5c:90:06:75:76:ee:69:91:c3:27:f6:1e:27: 01:f2:82:21:76:11:c1:23:a1:ed:57:cc:71:37:80:4a:ce:87: 6a:e9:67:d6:a1:29:20:61:19:67:d1:71:62:52:a4:07:98:6d: 99:2b:91:f7:44:46:c0:18:00:ea:69:53:73:4d:90:65:c7:a9: 61:fb:4e:cc:f8:d2:21:fd:e0:8d:d9:c7:f9:74:af:e6:eb:08: 91:96:72:ee:81:e5:c8:24:ac:7d:b3:dc:13:d1:4b:63:a9:81: ab:a2:28:6e:75:8f:6b:16:90:27:7f:fd:97:96:3e:c3:7c:43: 65:53:b9:27:fc:22:11:b2:ff:94:13:61:93:ed:be:08:ad:3d: 4f:19:60:b7:1e:42:42:92:a6:86:72:fd:cf:28:80:71:06:69: 4a:ad:e7:db:41:7e:ef:38:9c:48:a8:38:3c:e7:6f:2e:73:17: 44:98:2b:aa:4b:b6:ae:13:64:de:a4:cb:12:16:5a:d5:14:48: 2e:e3:8a:1b:f9:9d:4a:7b:89:8e:5c:5c:45:0e:3b:03:71:7a: c2:d9:cc:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2yCXDeDy3QzCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk OGI0ODBhYTItOTA2ZC00YzYxLTgzNGQtMjM3NjgxNGQ3OWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf0QcLNPnl3VQdfZGic/3O7EbrTzU+MfHvM2 d8PYGU0R2U5yWNmUbCTaudwxuMOCgsW98X+kycihZOOaUtk+Q6jeHiNDHnGXg0w5 R7dVs1Lwyk5ndxVpbf+cFww69Av7U42+NB9O11Jwib3HPgUNnfnl6uJci7Sv0eow uArqe0bzqdWp/oWD6tQJJ6odMUT6NKulmUzDYQOLctFh0cDNLXDxwCt6CD5opIWZ RmXLEYZ9YSNHDpzKba2Lh1NrERKqkMjNTPayDKakzmoQrCw0SnVaj50RmYUcq2Ob SuHCa64V9OnW8gbcax/V317da5d5CN/TLLv+F80pBUbBKsBcIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNB6jf2y42yuwPU/fE0m/kOqfKC5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWQxZDM5OTQtY2EzZi0z NDVmLThkYmUtOWZlZTdkZDk3NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqzlS93GhyvJNJ1OLPI1cWpctwfnk6Bw1LMntiCpXAd9t8h9dCuugQ3 XJAGdXbuaZHDJ/YeJwHygiF2EcEjoe1XzHE3gErOh2rpZ9ahKSBhGWfRcWJSpAeY bZkrkfdERsAYAOppU3NNkGXHqWH7Tsz40iH94I3Zx/l0r+brCJGWcu6B5cgkrH2z 3BPRS2OpgauiKG51j2sWkCd//ZeWPsN8Q2VTuSf8IhGy/5QTYZPtvgitPU8ZYLce QkKSpoZy/c8ogHEGaUqt59tBfu84nEioODznby5zF0SYK6pLtq4TZN6kyxIWWtUU SC7jihv5nUp7iY5cXEUOOwNxesLZzCc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:07 2025 by rpki-client