$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa File: b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa (raw, json) Hash identifier: OWULlhueAiX4qxlVHOpGf6749dBHJFBolaQKprYV1kA= Subject key identifier: BD:A4:68:EC:34:1E:70:5F:B3:A5:1F:49:B4:AE:1C:91:4E:A3:21:5D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848170510DA3163711F37E1E700 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa Signing time: Wed 04 Dec 2024 02:00:39 +0000 ROA not before: Wed 04 Dec 2024 02:00:39 +0000 ROA not after: Tue 04 Mar 2025 02:00:39 +0000 asID: 3356 IP address blocks: 20.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:17:05:10:da:31:63:71:1f:37:e1:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 4 02:00:39 2024 GMT Not After : Mar 4 02:00:39 2025 GMT Subject: CN=a53b158f-66db-4012-b329-4f4747263bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:88:e4:97:ab:42:e2:95:00:f5:f1:d8:5b: 81:83:ac:74:85:28:fb:3b:d3:43:04:46:96:af:d0: e4:cd:b8:f9:8d:5f:25:f2:67:bb:bd:5c:d6:6a:e2: 76:6d:6f:2c:b5:df:4e:b3:89:de:30:ce:16:09:c3: 5d:51:08:4e:a3:97:8d:9b:60:9f:35:79:22:1f:3f: 85:64:6a:70:9d:84:52:e4:b5:e2:07:37:7b:70:bf: 76:77:57:cb:91:2c:a2:39:fb:7e:a1:48:75:90:97: df:00:6d:1b:b7:a5:3c:01:f0:67:4f:17:9a:4d:b6: 6b:44:ca:a8:83:47:66:9b:98:81:1c:66:55:82:07: 55:9d:92:5c:63:2d:8a:6c:bb:68:e0:e5:f0:0b:87: 89:e3:07:4c:c4:66:97:d9:b1:d2:e4:21:de:a6:a7: 36:51:f0:ed:03:5e:24:a5:0a:21:24:a1:81:ed:c5: 74:5b:dc:fc:36:3e:5a:b3:f5:7d:4f:26:49:82:a6: d2:9d:14:70:2a:58:aa:7f:ba:72:c4:22:d8:69:b1: 2a:2d:53:2f:89:f4:ab:53:01:be:09:34:10:66:4b: 95:c4:ea:82:b9:f2:3d:06:18:d6:cf:fc:5d:72:a2: 1b:0e:5c:fb:7d:10:40:f1:a4:d5:b4:b6:a1:80:df: 63:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A4:68:EC:34:1E:70:5F:B3:A5:1F:49:B4:AE:1C:91:4E:A3:21:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f0:d2:6e:9f:93:87:b3:bf:d9:1b:0f:a1:60:f3:92:53:fa: e4:07:3f:cd:71:cc:00:aa:c2:07:76:7c:36:c1:bc:b8:ed:03: 64:2c:d2:68:7c:bd:54:85:97:6d:10:62:b1:41:33:07:5f:3c: c3:3f:44:5b:e6:b0:3a:88:5f:c6:26:5c:24:c7:ea:fb:00:5d: 58:01:f5:01:4e:f4:7c:88:f4:f7:1c:cc:ed:e6:da:d6:01:57: 80:d0:ea:93:1c:de:22:c7:0c:ed:bf:37:bc:b8:ca:0f:c8:55: f8:25:f3:7c:55:06:65:a2:db:4f:78:51:fb:b2:89:d4:4d:23: c5:55:68:7d:1d:88:01:5b:c8:9f:cf:53:be:ae:44:96:ac:88: 4c:89:62:4a:6f:21:be:05:1e:45:e5:86:23:12:a4:df:ab:38: ff:7f:fa:ab:23:a0:e0:0f:c8:58:83:34:16:1c:b5:80:5e:f0: 3e:74:e6:9a:5e:6a:07:0e:4a:4b:0c:06:0a:c1:6e:d8:ea:ab: b0:d2:22:32:00:69:2f:62:48:22:c9:af:81:27:e3:09:93:d3: 10:96:15:5d:69:f4:9f:af:01:e0:c6:0c:ba:7a:d1:93:c0:ca: 59:c2:90:a2:9e:e7:94:cc:36:12:ac:fd:6a:81:d4:e2:af:56: f4:e0:bb:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXBRDaMWNxHzfh5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIwNDAyMDAzOVoXDTI1MDMwNDAyMDAzOVowLzEtMCsGA1UEAxMk YTUzYjE1OGYtNjZkYi00MDEyLWIzMjktNGY0NzQ3MjYzYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RmI5JerQuKVAPXx2FuBg6x0hSj7O9NDBEaW r9Dkzbj5jV8l8me7vVzWauJ2bW8std9Os4neMM4WCcNdUQhOo5eNm2CfNXkiHz+F ZGpwnYRS5LXiBzd7cL92d1fLkSyiOft+oUh1kJffAG0bt6U8AfBnTxeaTbZrRMqo g0dmm5iBHGZVggdVnZJcYy2KbLto4OXwC4eJ4wdMxGaX2bHS5CHepqc2UfDtA14k pQohJKGB7cV0W9z8Nj5as/V9TyZJgqbSnRRwKliqf7pyxCLYabEqLVMvifSrUwG+ CTQQZkuVxOqCufI9BhjWz/xdcqIbDlz7fRBA8aTVtLahgN9jQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2kaOw0HnBfs6UfSbSuHJFOoyFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjJlY2Y1MjUtOGM4ZS0z MWFmLWI0ZTAtMGJmYzI3MmEzM2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHw0m6fk4ezv9kbD6Fg85JT+uQHP81xzACqwgd2fDbBvLjtA2Qs0mh8 vVSFl20QYrFBMwdfPMM/RFvmsDqIX8YmXCTH6vsAXVgB9QFO9HyI9PcczO3m2tYB V4DQ6pMc3iLHDO2/N7y4yg/IVfgl83xVBmWi2094UfuyidRNI8VVaH0diAFbyJ/P U76uRJasiEyJYkpvIb4FHkXlhiMSpN+rOP9/+qsjoOAPyFiDNBYctYBe8D505ppe agcOSksMBgrBbtjqq7DSIjIAaS9iSCLJr4En4wmT0xCWFV1p9J+vAeDGDLp60ZPA ylnCkKKe55TMNhKs/WqB1OKvVvTgu7c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:50 2025 by rpki-client