$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa File: b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa (raw, json) Hash identifier: 6fOuEO7ycRJDEVOzTHmchITNeRQwp5/OCj9k7ykEUDA= Subject key identifier: FF:4D:BC:73:38:87:D0:45:B9:4E:80:06:72:36:32:A9:CF:4C:C0:9D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848143A841991F010C752E78540 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 3360 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:84:19:91:f0:10:c7:52:e7:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=9b19e188-2079-4dfd-af0a-1ad5c769e629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:66:cf:95:63:47:86:90:c3:27:1a:fd:88: 01:2f:a8:ee:b5:02:7c:42:3f:92:bf:ee:60:d7:6c: f7:93:ac:4e:f3:92:5d:c2:80:3c:32:da:c5:a5:4f: 44:ce:ca:91:59:13:e6:90:6c:1c:f9:37:e3:09:6f: 0b:7a:59:11:26:90:af:a6:15:d2:54:df:44:96:fd: b3:03:64:ff:4b:80:e8:28:62:ff:c8:09:d9:62:16: e9:f3:ff:f8:73:87:5b:31:6d:4e:e3:82:eb:ae:10: 9d:3f:71:f6:bb:6c:2e:61:35:69:e5:40:2c:02:3b: f2:01:5b:1c:66:5d:4c:f4:7b:0e:2b:68:70:25:2b: 7d:99:89:92:7b:8c:1d:63:bb:08:db:0e:73:e1:9d: 67:36:2e:6e:b2:76:8c:3d:8e:e8:5e:57:03:ba:38: 75:6b:98:6a:63:c3:dd:4a:a8:ef:6b:fd:2e:a6:fd: 3a:8d:7b:5a:1f:2d:55:87:8f:21:c8:c4:06:ab:7c: dd:0e:fd:e1:57:93:57:6d:02:96:4e:d1:ae:03:95: 35:dc:e0:f2:38:eb:fa:70:7a:25:fa:0a:89:7f:c2: 38:c3:2e:c5:de:bc:6c:ce:d7:10:33:ad:60:b4:40: d0:a0:65:35:c4:ab:d8:dd:d1:a6:d6:05:13:77:9e: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4D:BC:73:38:87:D0:45:B9:4E:80:06:72:36:32:A9:CF:4C:C0:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:5d:6b:7f:dd:bd:a6:c2:8e:c7:c7:b5:7c:97:b0:51:42:a5: c4:da:b1:30:72:a5:a2:81:9f:88:d0:7d:31:7d:7a:c5:0a:a5: 38:c9:7a:96:eb:85:3c:9f:da:2e:91:7d:80:a0:42:57:68:d6: 78:67:66:12:3e:00:5b:b4:64:01:13:ba:5a:00:29:cb:21:7e: cc:ac:67:8b:0f:db:13:c8:3b:66:bc:68:b3:a9:f5:31:c5:23: a8:4f:c2:ff:7d:1f:ed:34:6c:c1:7c:76:8e:14:f3:f0:0f:61: f1:4f:82:a5:16:d7:2e:85:17:74:9d:00:16:81:36:03:e3:6e: 37:91:14:aa:5c:42:25:0b:56:a5:f3:ad:0b:a5:b2:3b:1a:b5: e7:5c:ee:57:fd:47:bb:19:5d:e2:43:18:02:bb:4a:b8:c4:34: 4b:2b:7c:98:e2:08:f1:d8:4d:e7:3c:04:3e:e3:c5:17:61:83: 0f:7d:e7:f2:65:64:03:c7:a5:82:29:a1:c7:54:8f:7f:a9:c0: 09:a1:6b:4b:84:2a:31:6f:77:81:ef:a9:63:8a:06:8a:02:4c: 51:e2:77:ca:a3:18:a9:f3:37:d8:59:2f:cc:83:01:56:4f:c3: 7a:de:30:dd:b4:9a:46:ca:eb:f2:3b:52:85:37:c7:56:f0:28: e5:74:ac:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOoQZkfAQx1LnhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk OWIxOWUxODgtMjA3OS00ZGZkLWFmMGEtMWFkNWM3NjllNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCRmz5VjR4aQwyca/YgBL6jutQJ8Qj+Sv+5g 12z3k6xO85JdwoA8MtrFpU9EzsqRWRPmkGwc+TfjCW8LelkRJpCvphXSVN9Elv2z A2T/S4DoKGL/yAnZYhbp8//4c4dbMW1O44LrrhCdP3H2u2wuYTVp5UAsAjvyAVsc Zl1M9HsOK2hwJSt9mYmSe4wdY7sI2w5z4Z1nNi5usnaMPY7oXlcDujh1a5hqY8Pd Sqjva/0upv06jXtaHy1Vh48hyMQGq3zdDv3hV5NXbQKWTtGuA5U13ODyOOv6cHol +gqJf8I4wy7F3rxsztcQM61gtEDQoGU1xKvY3dGm1gUTd57RYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9NvHM4h9BFuU6ABnI2MqnPTMCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjlmMjAyNGMtZGE1Yy0z ZTVlLWIyMTUtYTVhZWZiZTJmMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJda3/dvabCjsfHtXyXsFFCpcTasTBypaKBn4jQfTF9esUKpTjJepbr hTyf2i6RfYCgQldo1nhnZhI+AFu0ZAETuloAKcshfsysZ4sP2xPIO2a8aLOp9THF I6hPwv99H+00bMF8do4U8/APYfFPgqUW1y6FF3SdABaBNgPjbjeRFKpcQiULVqXz rQulsjsatedc7lf9R7sZXeJDGAK7SrjENEsrfJjiCPHYTec8BD7jxRdhgw995/Jl ZAPHpYIpocdUj3+pwAmha0uEKjFvd4HvqWOKBooCTFHid8qjGKnzN9hZL8yDAVZP w3reMN20mkbK6/I7UoU3x1bwKOV0rE8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:03 2025 by rpki-client