$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa File: b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa (raw, json) Hash identifier: cpfVuOCGi+rchzp9okKDLBpeyq8eFokZjtL4N7VZwmw= Subject key identifier: BE:EB:2E:DA:BD:ED:D7:C2:67:0F:72:C3:B4:58:A5:14:23:2A:82:DE Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584817050F7A609DED4B51AD0000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa Signing time: Wed 04 Dec 2024 02:00:39 +0000 ROA not before: Wed 04 Dec 2024 02:00:39 +0000 ROA not after: Tue 04 Mar 2025 02:00:39 +0000 asID: 3356 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:17:05:0f:7a:60:9d:ed:4b:51:ad:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 4 02:00:39 2024 GMT Not After : Mar 4 02:00:39 2025 GMT Subject: CN=f9fb07b0-4c8d-4146-9703-86719e751ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:90:45:36:47:39:8f:73:33:2a:8f:77:2b:b8: 2f:0a:d0:c8:c0:f6:5d:b0:06:57:e2:b8:2a:7d:92: f6:a4:86:3a:f0:c4:f8:e4:c8:4a:44:82:b4:f2:ab: 72:d5:c7:59:67:c3:43:95:2c:94:15:cc:b1:de:3e: 78:7c:4a:f3:a4:03:0c:28:68:1a:83:3b:fe:2c:a5: 01:1e:b5:82:46:8a:e3:8d:17:4d:58:80:0d:2b:38: 00:5d:1d:78:6d:d6:6d:32:c9:4c:04:b2:e2:3b:31: 28:15:1f:b8:c1:30:ee:91:f4:6f:7d:87:fe:f2:d8: 0e:dc:eb:16:5c:cc:0c:c0:95:8f:ed:d1:43:82:87: 54:d8:6d:7a:ee:88:da:ce:e3:76:4c:31:f0:57:5b: 87:25:99:2a:f2:08:c1:75:2e:bb:ed:2e:a7:93:df: f4:19:3e:0c:e2:ff:9b:f3:fa:52:e3:1d:bd:80:a4: 70:bb:bb:a2:9c:22:9e:42:c7:11:31:4e:66:db:66: a8:db:c8:be:04:80:a8:64:50:8a:a9:34:ad:06:57: d1:61:17:e2:1f:90:f0:77:f0:fe:3d:da:62:7a:b5: ec:d3:89:33:a8:29:f9:ab:75:e4:57:0b:c5:cc:e7: b8:24:b2:0c:09:28:2b:90:b5:91:3f:f4:00:6a:02: 5c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EB:2E:DA:BD:ED:D7:C2:67:0F:72:C3:B4:58:A5:14:23:2A:82:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ec:93:1a:dc:bf:96:aa:48:7d:74:7e:a1:92:08:84:44:fc: c0:d4:d1:37:3d:73:94:57:43:b6:a0:7a:5f:93:9d:a7:e0:38: 09:3d:2c:82:ac:e1:f8:61:09:a7:49:94:71:ab:57:6b:67:f7: a8:71:36:b9:ee:0d:42:bc:ef:04:83:df:5a:6b:8b:73:72:e8: e0:7b:c0:f7:94:84:48:b8:f0:ad:97:7f:98:47:34:42:d8:d2: 0d:f9:78:77:ae:51:8c:ce:57:f2:87:57:f8:f6:e2:ea:7e:31: e6:9a:e1:92:8a:d3:8e:28:6a:21:58:f7:1a:39:6b:bd:a1:c3: 3d:41:4b:13:25:59:7c:f4:da:96:53:7e:e6:2b:3d:0f:a2:23: af:e2:e8:80:84:29:39:bb:0e:8f:e4:6d:ba:70:43:ed:b7:be: c4:2a:c1:70:9c:5e:60:f5:97:fe:72:5d:c0:2f:db:25:0e:66: ef:5e:42:d7:9b:8c:f3:fa:20:08:98:47:0c:4f:4e:ea:ef:2f: 6f:a5:15:b7:b5:91:d9:1a:d6:fd:84:78:a4:11:23:20:85:eb: 2c:3a:56:a2:dd:98:d1:12:59:c4:73:e4:8d:bb:48:20:5b:e2: 2b:ad:90:dd:a0:4c:32:ae:d4:65:c9:5c:f2:23:6b:bf:a8:40: 36:a3:56:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXBQ96YJ3tS1GtAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIwNDAyMDAzOVoXDTI1MDMwNDAyMDAzOVowLzEtMCsGA1UEAxMk ZjlmYjA3YjAtNGM4ZC00MTQ2LTk3MDMtODY3MTllNzUxZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5BFNkc5j3MzKo93K7gvCtDIwPZdsAZX4rgq fZL2pIY68MT45MhKRIK08qty1cdZZ8NDlSyUFcyx3j54fErzpAMMKGgagzv+LKUB HrWCRorjjRdNWIANKzgAXR14bdZtMslMBLLiOzEoFR+4wTDukfRvfYf+8tgO3OsW XMwMwJWP7dFDgodU2G167ojazuN2TDHwV1uHJZkq8gjBdS677S6nk9/0GT4M4v+b 8/pS4x29gKRwu7uinCKeQscRMU5m22ao28i+BICoZFCKqTStBlfRYRfiH5Dwd/D+ PdpierXs04kzqCn5q3XkVwvFzOe4JLIMCSgrkLWRP/QAagJcAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7rLtq97dfCZw9yw7RYpRQjKoLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjE2ZGI2YWEtM2VlYi0z MjMwLTk4MGYtMThjMGE2MGMzYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfskxrcv5aqSH10fqGSCIRE/MDU0Tc9c5RXQ7agel+TnafgOAk9LIKs 4fhhCadJlHGrV2tn96hxNrnuDUK87wSD31pri3Ny6OB7wPeUhEi48K2Xf5hHNELY 0g35eHeuUYzOV/KHV/j24up+Meaa4ZKK044oaiFY9xo5a72hwz1BSxMlWXz02pZT fuYrPQ+iI6/i6ICEKTm7Do/kbbpwQ+23vsQqwXCcXmD1l/5yXcAv2yUOZu9eQteb jPP6IAiYRwxPTurvL2+lFbe1kdka1v2EeKQRIyCF6yw6VqLdmNESWcRz5I27SCBb 4iutkN2gTDKu1GXJXPIja7+oQDajVpg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:46 2025 by rpki-client