$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa File: b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa (raw, json) Hash identifier: cgGl7MUyg4w+gcLW0WwIWfx1sIJRZ4UUQYzHPPWsa3k= Subject key identifier: 47:4E:9B:6F:3B:37:8E:62:B3:96:B0:01:92:83:D1:E6:AF:CB:7D:36 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F4F6A4E8AF6C6BD3B694B880 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 3360 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a4:e8:af:6c:6b:d3:b6:94:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=df7fe4e4-34da-4ee2-abc3-c7958275d5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9c:2e:e3:69:16:20:0d:f0:4e:f1:8b:9d:88: d1:00:05:63:55:22:14:6d:1d:a8:78:64:94:15:e8: c1:6a:30:ad:4f:d9:0e:f4:3f:95:bd:f0:2f:9d:bb: a7:f3:ea:c5:9b:6c:8f:09:75:46:c6:94:1b:ab:a8: fd:ed:2d:33:87:08:5d:8e:da:b7:45:d6:d4:be:f4: a1:83:e2:c8:1e:b9:70:12:de:62:63:89:7e:d7:7a: 63:bf:5b:b9:2c:4d:3b:1e:f9:cd:05:05:42:3d:12: d7:2c:24:36:3d:0d:96:fe:58:f8:01:a3:8c:7c:a3: ba:2b:70:6d:ab:b7:f6:aa:7e:e4:df:59:61:35:d2: 58:dd:84:e6:a7:ae:7d:9a:42:f5:d0:6a:fe:61:86: ec:13:ec:af:8f:ce:f6:60:6c:95:ba:c0:43:24:55: 46:8d:ba:28:2a:b4:4d:ae:3a:4e:7e:74:78:d5:f5: a6:55:3e:ba:c7:bf:7b:cf:53:dc:5c:8e:b3:f1:7c: 29:f6:74:4a:68:dc:3c:4c:7f:fb:74:06:14:47:bd: 58:7b:fa:3a:07:2b:07:59:9b:2d:dc:45:ea:13:be: b3:ea:05:7f:78:3b:f0:4b:1a:96:ab:b8:51:0f:17: eb:e2:b0:b5:a0:fa:ed:bd:5e:98:de:57:b3:1c:71: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4E:9B:6F:3B:37:8E:62:B3:96:B0:01:92:83:D1:E6:AF:CB:7D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:31:0c:aa:0f:c7:a6:76:8d:83:ab:a0:72:a9:0b:5d:96:8b: 56:15:07:29:74:78:91:8c:bc:9b:80:c3:a2:69:cb:1d:4f:f9: a1:27:4a:de:84:26:54:32:01:8d:8f:e6:9f:bf:2e:38:d3:61: ba:6f:1b:b4:ed:c7:95:ab:80:5f:f7:dd:4c:8f:60:70:4b:08: 3e:b4:17:27:91:8f:12:af:1a:fc:83:01:b2:12:5b:b7:15:fb: 82:a4:67:20:bb:24:71:2b:19:57:e9:db:08:d1:93:43:85:15: fe:dc:06:95:39:94:8f:9b:91:c6:66:ac:fd:1b:a9:a7:0d:42: 51:cc:36:be:25:c0:e0:be:5b:72:76:5f:3a:91:68:8c:1f:09: 87:06:12:90:66:1e:43:c7:ff:f8:9b:61:5a:4c:41:15:66:a2: 02:d9:31:76:a3:d8:16:c7:67:8f:76:af:a1:29:68:ed:69:49: 93:96:34:c6:6d:b5:ba:f9:b9:1b:bb:bd:64:ad:ed:eb:25:66: bb:51:97:75:7c:1b:5f:11:d7:8b:04:16:ab:cb:c1:b5:c7:be: 7a:d8:71:1c:0f:20:69:d8:7d:91:68:35:1b:6a:53:04:52:a3: 4a:a6:25:4f:50:c2:fc:9c:bd:76:60:85:8e:b6:17:92:ab:50: 8c:e8:3b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qTor2xr07aUuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZGY3ZmU0ZTQtMzRkYS00ZWUyLWFiYzMtYzc5NTgyNzVkNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJwu42kWIA3wTvGLnYjRAAVjVSIUbR2oeGSU FejBajCtT9kO9D+VvfAvnbun8+rFm2yPCXVGxpQbq6j97S0zhwhdjtq3RdbUvvSh g+LIHrlwEt5iY4l+13pjv1u5LE07HvnNBQVCPRLXLCQ2PQ2W/lj4AaOMfKO6K3Bt q7f2qn7k31lhNdJY3YTmp659mkL10Gr+YYbsE+yvj872YGyVusBDJFVGjbooKrRN rjpOfnR41fWmVT66x797z1PcXI6z8Xwp9nRKaNw8TH/7dAYUR71Ye/o6BysHWZst 3EXqE76z6gV/eDvwSxqWq7hRDxfr4rC1oPrtvV6Y3lezHHEPdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdOm287N45is5awAZKD0eavy302MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjlmMjAyNGMtZGE1Yy0z ZTVlLWIyMTUtYTVhZWZiZTJmMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4xDKoPx6Z2jYOroHKpC12Wi1YVByl0eJGMvJuAw6Jpyx1P+aEnSt6E JlQyAY2P5p+/LjjTYbpvG7Ttx5WrgF/33UyPYHBLCD60FyeRjxKvGvyDAbISW7cV +4KkZyC7JHErGVfp2wjRk0OFFf7cBpU5lI+bkcZmrP0bqacNQlHMNr4lwOC+W3J2 XzqRaIwfCYcGEpBmHkPH//ibYVpMQRVmogLZMXaj2BbHZ492r6EpaO1pSZOWNMZt tbr5uRu7vWSt7eslZrtRl3V8G18R14sEFqvLwbXHvnrYcRwPIGnYfZFoNRtqUwRS o0qmJU9QwvycvXZghY62F5KrUIzoOzE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:11 2025 by rpki-client