$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa File: b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa (raw, json) Hash identifier: mamsyVioja1a5lv3IWUps4MbG3EijNuAufxlTM3wU/c= Subject key identifier: 7E:3C:78:62:88:B4:C9:7A:73:F0:8C:68:EA:9E:DE:3C:DD:A5:DF:AA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13CC0487C857291DD9980 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3c:c0:48:7c:85:72:91:dd:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=2144dfc7-2213-441c-b36d-541ba0623ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:88:21:22:c2:6c:2f:19:a0:31:cf:da:9f: 03:22:79:8f:c8:d4:1a:a1:90:1a:69:09:b6:4d:30: d8:d4:70:db:18:3c:a7:d9:f9:f0:2d:8f:ba:2e:84: 3f:bf:34:c3:5c:03:f4:26:a3:b2:15:20:04:5e:54: 38:f3:4e:ae:60:f5:32:ed:d0:bf:20:83:0d:08:e6: dd:96:16:6d:72:6c:15:fb:5d:8f:74:1d:67:7b:38: a1:c7:ed:89:5f:4d:4c:15:98:c6:e6:2e:59:35:bd: 32:1f:db:e7:19:ae:ed:50:b3:7a:bd:0f:3d:e6:26: b7:8c:88:d4:0f:ce:fb:fe:aa:70:87:91:02:a1:57: 47:ba:c0:d5:55:9f:88:03:a1:da:e9:d6:c0:ed:b3: 82:92:c6:90:6d:c1:11:7e:46:f4:2f:e8:df:f7:05: 3c:79:69:68:6c:f6:4d:23:2a:47:e5:b1:d5:69:b2: 01:9d:9e:8c:10:5b:67:bf:6d:23:68:fd:7b:1b:95: a4:f2:2d:95:8a:e9:a2:e3:41:74:17:a8:e6:26:13: d9:07:63:8b:79:89:32:f0:66:53:b3:03:b1:1e:5e: 92:8c:49:bf:4c:23:76:ac:b9:09:d5:0f:56:9a:f5: 7e:f5:8f:48:d8:ac:c7:5f:cf:76:67:cd:bc:ea:42: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3C:78:62:88:B4:C9:7A:73:F0:8C:68:EA:9E:DE:3C:DD:A5:DF:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b2ecf525-8c8e-31af-b4e0-0bfc272a33bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:50:6e:d8:e3:e4:df:4a:8f:cd:f2:af:02:df:c9:31:7b:bb: 31:93:71:61:69:6f:a9:97:01:10:73:da:d8:aa:92:eb:78:2b: 3c:6d:f5:35:7a:9f:ca:fc:05:e9:86:f4:77:6e:eb:81:d8:82: 18:87:bf:50:11:8d:c0:43:ba:7a:6d:31:71:31:46:ae:21:3c: 46:5f:82:56:be:60:7f:b6:5c:38:f1:f2:28:34:a8:8b:66:da: d9:c7:6c:bb:c5:b6:23:4d:ef:fd:73:79:a9:45:72:e2:3c:22: 64:e0:cc:0c:b0:76:4c:80:24:bf:a2:66:df:6a:1b:a3:d6:f1: 5f:32:d2:50:44:b1:2b:34:6c:57:4c:ec:24:c6:4b:ba:3f:68: 21:7c:26:ca:95:aa:10:71:42:8e:93:fb:33:9d:c2:4c:f7:a3: a1:2d:50:5f:95:b7:8a:07:7b:88:f2:6c:83:e5:10:75:f5:b4: f3:b9:1a:ad:85:e8:6c:6d:e3:eb:7b:b9:9c:17:2d:c9:7f:b7: c4:2b:6f:4a:8a:63:0e:ab:02:76:69:60:ec:fb:e2:da:64:ab: 70:05:b3:8f:74:fa:1b:3a:56:6f:d7:88:26:3a:a7:a8:2b:f1: ac:1e:a0:75:83:a1:84:e2:5c:98:57:5e:78:94:5e:14:0a:17: 44:f0:80:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTzASHyFcpHdmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk MjE0NGRmYzctMjIxMy00NDFjLWIzNmQtNTQxYmEwNjIzZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5eIISLCbC8ZoDHP2p8DInmPyNQaoZAaaQm2 TTDY1HDbGDyn2fnwLY+6LoQ/vzTDXAP0JqOyFSAEXlQ4806uYPUy7dC/IIMNCObd lhZtcmwV+12PdB1nezihx+2JX01MFZjG5i5ZNb0yH9vnGa7tULN6vQ895ia3jIjU D877/qpwh5ECoVdHusDVVZ+IA6Ha6dbA7bOCksaQbcERfkb0L+jf9wU8eWlobPZN IypH5bHVabIBnZ6MEFtnv20jaP17G5Wk8i2Viumi40F0F6jmJhPZB2OLeYky8GZT swOxHl6SjEm/TCN2rLkJ1Q9WmvV+9Y9I2KzHX892Z8286kKtLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH48eGKItMl6c/CMaOqe3jzdpd+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjJlY2Y1MjUtOGM4ZS0z MWFmLWI0ZTAtMGJmYzI3MmEzM2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpQbtjj5N9Kj83yrwLfyTF7uzGTcWFpb6mXARBz2tiqkut4Kzxt9TV6 n8r8BemG9Hdu64HYghiHv1ARjcBDunptMXExRq4hPEZfgla+YH+2XDjx8ig0qItm 2tnHbLvFtiNN7/1zealFcuI8ImTgzAywdkyAJL+iZt9qG6PW8V8y0lBEsSs0bFdM 7CTGS7o/aCF8JsqVqhBxQo6T+zOdwkz3o6EtUF+Vt4oHe4jybIPlEHX1tPO5Gq2F 6Gxt4+t7uZwXLcl/t8Qrb0qKYw6rAnZpYOz74tpkq3AFs490+hs6Vm/XiCY6p6gr 8aweoHWDoYTiXJhXXniUXhQKF0TwgDk= -----END CERTIFICATE-----Generated at Fri Mar 14 08:32:10 2025 by rpki-client