$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa File: b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa (raw, json) Hash identifier: J1RHhFTbkKNclavVdmSkCHtYByK43hoPDA/p909hQNQ= Subject key identifier: 11:A5:51:BD:92:15:25:DD:8A:40:A2:D9:06:F4:97:46:BF:9A:FF:32 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13B51CCA025292F23CD30 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3b:51:cc:a0:25:29:2f:23:cd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=83800958-bafe-473d-802a-d5c691c63a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:12:e3:b6:57:ea:e7:24:c1:b0:44:a7:47:2d: 73:c1:da:cc:30:b2:52:83:98:15:98:d5:65:5a:fd: d2:e7:f9:cb:28:66:7d:3d:02:fc:22:c2:3c:0f:2f: 43:b4:e9:90:c8:b6:43:11:e5:6e:23:6d:12:e4:56: d8:9a:35:ac:61:e3:ea:f1:8b:68:ee:92:b7:cd:4b: 67:a8:f8:3e:30:de:2c:ff:0e:66:80:af:fe:fe:52: ac:bd:7f:61:a7:3c:ec:82:7f:1f:61:71:34:be:df: e1:d7:b0:2f:26:2a:7d:56:47:d8:5d:ba:68:ed:76: 5a:d4:f1:0f:cd:50:f3:4a:54:c0:53:e6:69:f8:64: 0e:a2:06:67:84:d0:ed:62:38:cb:a2:25:b0:73:46: a7:34:8e:42:af:2b:d3:48:14:06:b4:a9:91:01:f5: 93:b2:ab:33:83:ae:b6:15:2c:29:e2:01:d7:27:76: d8:2c:83:f6:eb:7c:7f:72:9f:34:b5:13:b5:c7:c2: ac:28:f3:6a:14:20:28:63:23:e3:ac:da:b7:7e:98: de:1a:fe:48:70:d3:d9:14:4f:86:c0:6e:24:83:e7: c3:00:af:60:a4:7d:d5:09:e0:1b:2d:2d:59:86:dd: 82:5a:61:90:5e:43:bf:cc:71:0f:a3:d7:21:75:b2: e3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A5:51:BD:92:15:25:DD:8A:40:A2:D9:06:F4:97:46:BF:9A:FF:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b16db6aa-3eeb-3230-980f-18c0a60c3ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4b:90:54:9f:2b:6b:b6:5a:6e:90:a2:b3:8f:71:b9:cf:4d: af:47:2e:f7:1a:a8:22:47:7d:fc:8a:b0:44:d9:d2:83:35:78: a2:1d:95:9f:cc:a0:e7:84:07:b9:4f:68:6c:bb:c7:d7:94:8a: 0a:ec:07:70:cf:90:5e:04:f5:aa:5f:90:64:99:94:63:af:0b: c5:c1:63:73:94:84:d2:85:8d:c8:d5:49:ec:e0:9e:e4:3e:00: 22:57:56:31:8c:78:d2:a5:96:e9:53:39:54:97:5b:78:0e:f4: 6e:e3:3c:3c:43:aa:e6:a7:43:8e:ea:85:44:e8:f3:92:cb:39: 60:9d:0c:70:86:4f:10:6d:e7:d5:f2:83:2a:4f:6b:b6:f0:a8: 53:f7:d9:e1:ea:8f:f6:13:11:f5:3e:8c:1a:45:01:cf:b0:09: f7:cc:f9:21:dc:26:05:90:d0:e6:2e:99:da:a3:49:12:4c:c8: 79:7e:87:bf:6f:49:5b:2b:ea:a6:d0:16:5d:dc:13:47:93:6e: 6b:bb:8b:0e:36:43:e5:d7:a8:03:4c:d0:0b:c4:de:68:1c:06: 7b:c4:63:d0:ba:00:1f:23:bf:bf:50:38:6c:a6:c8:62:50:fc: 9d:e4:e1:3c:b0:d4:13:e2:b6:26:ae:a8:af:f2:d3:45:9e:82: 3a:2e:0a:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTtRzKAlKS8jzTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk ODM4MDA5NTgtYmFmZS00NzNkLTgwMmEtZDVjNjkxYzYzYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxLjtlfq5yTBsESnRy1zwdrMMLJSg5gVmNVl Wv3S5/nLKGZ9PQL8IsI8Dy9DtOmQyLZDEeVuI20S5FbYmjWsYePq8Yto7pK3zUtn qPg+MN4s/w5mgK/+/lKsvX9hpzzsgn8fYXE0vt/h17AvJip9VkfYXbpo7XZa1PEP zVDzSlTAU+Zp+GQOogZnhNDtYjjLoiWwc0anNI5CryvTSBQGtKmRAfWTsqszg662 FSwp4gHXJ3bYLIP263x/cp80tRO1x8KsKPNqFCAoYyPjrNq3fpjeGv5IcNPZFE+G wG4kg+fDAK9gpH3VCeAbLS1Zht2CWmGQXkO/zHEPo9chdbLjHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGlUb2SFSXdikCi2Qb0l0a/mv8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjE2ZGI2YWEtM2VlYi0z MjMwLTk4MGYtMThjMGE2MGMzYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9LkFSfK2u2Wm6QorOPcbnPTa9HLvcaqCJHffyKsETZ0oM1eKIdlZ/M oOeEB7lPaGy7x9eUigrsB3DPkF4E9apfkGSZlGOvC8XBY3OUhNKFjcjVSezgnuQ+ ACJXVjGMeNKllulTOVSXW3gO9G7jPDxDquanQ47qhUTo85LLOWCdDHCGTxBt59Xy gypPa7bwqFP32eHqj/YTEfU+jBpFAc+wCffM+SHcJgWQ0OYumdqjSRJMyHl+h79v SVsr6qbQFl3cE0eTbmu7iw42Q+XXqANM0AvE3mgcBnvEY9C6AB8jv79QOGymyGJQ /J3k4Tyw1BPitiauqK/y00WegjouCuk= -----END CERTIFICATE-----Generated at Fri Mar 14 13:56:41 2025 by rpki-client