$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa File: b012200c-09b0-31d7-a7d9-1df154b56fae.roa (raw, json) Hash identifier: /tG8KwVpyQpn+nLsm1JJfTdCPUNxIDI0eaF3V4XEtUM= Subject key identifier: B4:2B:B2:C0:35:70:F6:FF:CA:D7:42:7D:51:F3:04:63:BC:CD:AD:DA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584817051034D89E2835EDE2BCE0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa Signing time: Wed 04 Dec 2024 02:00:39 +0000 ROA not before: Wed 04 Dec 2024 02:00:39 +0000 ROA not after: Tue 04 Mar 2025 02:00:39 +0000 asID: 202 IP address blocks: 20.134.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:17:05:10:34:d8:9e:28:35:ed:e2:bc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 4 02:00:39 2024 GMT Not After : Mar 4 02:00:39 2025 GMT Subject: CN=1b697c78-8ae1-4ef1-adb1-b92736e5294d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:bf:c7:ad:23:37:97:60:ae:06:f8:a1:51: 18:c8:f4:cd:8f:60:3e:8a:8e:f7:9a:c8:b3:9e:79: d6:52:f9:5f:15:6f:86:cd:d7:1f:de:b1:80:78:04: e1:44:70:e5:41:7b:a0:f2:27:62:6b:f3:69:c4:da: b2:da:ee:86:94:97:27:8c:68:1a:de:39:76:9d:19: a8:16:da:22:89:28:55:3d:01:90:c9:59:49:9d:5c: bb:68:1a:1f:a0:a7:f8:ca:60:91:79:8f:53:00:36: 5e:6f:ff:7d:55:5f:74:2f:a8:12:37:27:21:b8:e1: 16:bf:41:92:f2:68:07:29:2f:ee:3d:9c:9d:50:86: e9:7c:6e:89:84:d1:63:18:51:71:3b:ec:de:66:d0: f2:ee:46:fc:c0:1e:d2:18:e4:fc:6c:1a:6e:e0:39: 60:d4:71:4c:13:e8:13:ff:71:da:b4:7b:db:9a:9b: 62:b2:5a:61:aa:73:6f:1a:00:5a:0c:ac:76:f9:04: f5:d0:50:2b:7a:b1:1e:f3:d6:72:a9:18:b3:62:cd: 1c:ae:6d:54:92:be:9f:86:ae:fc:0f:86:2f:60:a5: 56:da:a2:39:2b:55:26:81:8f:21:c6:8a:41:d6:e7: 0d:ef:99:0e:98:e6:07:9a:54:b3:69:80:88:3f:5e: e5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2B:B2:C0:35:70:F6:FF:CA:D7:42:7D:51:F3:04:63:BC:CD:AD:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:af:a6:00:ff:b9:76:a9:a1:9f:17:96:5c:47:8a:76:11:89: da:fb:83:7b:d6:f3:4b:a3:b0:96:eb:ac:fa:29:31:40:8f:6d: 82:a7:af:1b:df:fd:b6:f0:51:0f:37:c4:1a:6a:e9:65:52:65: 1e:c2:17:3e:e7:6e:80:1b:c8:75:cc:b3:91:9e:1e:49:28:9e: bf:58:cf:10:fd:2a:a9:4d:ab:fe:32:59:a8:3a:cf:26:e6:d0: 4f:c2:20:3b:b7:a1:1c:3f:29:b2:df:da:e6:f1:d4:f1:ab:d3: e2:74:36:fb:f0:ee:ec:0d:4f:01:2e:be:ad:7e:d9:b0:da:8e: f8:b6:28:f1:04:c1:08:be:3c:62:ca:4f:25:11:1e:23:4e:4c: 74:bd:87:73:5d:65:9e:3c:cf:8e:51:cf:eb:80:f2:54:5f:98: 86:00:09:47:cd:5f:54:bb:6e:fa:84:a0:bb:82:ab:ca:ef:b1: 9c:79:b0:71:60:59:97:40:bf:c7:02:8c:f5:1b:5d:57:62:83: 37:49:1f:bb:42:9f:4e:8a:5d:98:60:fb:c5:ca:43:5b:3b:66: c9:13:b4:26:c3:74:3b:29:79:d3:1b:a4:86:a9:d6:1e:f2:86: a8:6d:03:f8:b4:b9:de:f8:60:36:93:ce:ba:f4:5a:ca:3f:cb: cd:0f:a3:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXBRA02J4oNe3ivOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIwNDAyMDAzOVoXDTI1MDMwNDAyMDAzOVowLzEtMCsGA1UEAxMk MWI2OTdjNzgtOGFlMS00ZWYxLWFkYjEtYjkyNzM2ZTUyOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/G/x60jN5dgrgb4oVEYyPTNj2A+io73msiz nnnWUvlfFW+Gzdcf3rGAeAThRHDlQXug8idia/NpxNqy2u6GlJcnjGga3jl2nRmo FtoiiShVPQGQyVlJnVy7aBofoKf4ymCReY9TADZeb/99VV90L6gSNychuOEWv0GS 8mgHKS/uPZydUIbpfG6JhNFjGFFxO+zeZtDy7kb8wB7SGOT8bBpu4Dlg1HFME+gT /3HatHvbmptislphqnNvGgBaDKx2+QT10FArerEe89ZyqRizYs0crm1Ukr6fhq78 D4YvYKVW2qI5K1UmgY8hxopB1ucN75kOmOYHmlSzaYCIP17l/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQrssA1cPb/ytdCfVHzBGO8za3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjAxMjIwMGMtMDliMC0z MWQ3LWE3ZDktMWRmMTU0YjU2ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSvpgD/uXapoZ8XllxHinYRidr7g3vW80ujsJbrrPopMUCPbYKnrxvf /bbwUQ83xBpq6WVSZR7CFz7nboAbyHXMs5GeHkkonr9YzxD9KqlNq/4yWag6zybm 0E/CIDu3oRw/KbLf2ubx1PGr0+J0Nvvw7uwNTwEuvq1+2bDajvi2KPEEwQi+PGLK TyURHiNOTHS9h3NdZZ48z45Rz+uA8lRfmIYACUfNX1S7bvqEoLuCq8rvsZx5sHFg WZdAv8cCjPUbXVdigzdJH7tCn06KXZhg+8XKQ1s7ZskTtCbDdDspedMbpIap1h7y hqhtA/i0ud74YDaTzrr0Wso/y80Po2k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:36 2025 by rpki-client