$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c00a48d0-53f7-3c34-a123-70fbf7b25125.roa File: c00a48d0-53f7-3c34-a123-70fbf7b25125.roa (raw, json) Hash identifier: FEsysh7hYBpkHA0E3pq+Dh8YU0Ezh7cMWlqD96Nf18A= Subject key identifier: 0A:A0:BB:B3:24:A0:01:B1:6D:65:7A:74:D7:92:BC:64:D3:E5:09:9C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F4F6A4AC7BB9524448B13A40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c00a48d0-53f7-3c34-a123-70fbf7b25125.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 3360 IP address blocks: 20.134.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a4:ac:7b:b9:52:44:48:b1:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ee89589e-c1d0-4c3a-9637-a8d90d653bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6a:39:f5:00:ed:58:80:85:be:d6:12:85:da: 67:8d:9f:a7:11:98:ea:13:44:a3:f9:70:a6:f4:74: d1:fa:cd:8b:0c:2e:b5:13:39:09:6d:e5:32:cd:05: fb:24:43:95:e9:37:3a:b1:11:0d:ec:9a:b2:76:9b: cb:8e:80:0f:ab:37:51:59:cb:5f:21:c9:d6:79:ad: 7f:7b:80:0e:e5:9c:98:6b:74:18:1a:57:4c:ed:f2: e1:42:63:68:c5:9e:4c:d1:3e:c1:ce:64:64:f4:bf: a3:08:85:9a:25:99:9b:d4:35:27:53:fe:72:b4:2e: 6c:6f:a8:df:4c:19:08:aa:56:4b:c1:86:9d:56:2b: 32:70:78:a1:76:22:98:17:0c:05:01:25:4f:6b:63: 2d:04:e0:02:7c:5c:e0:d0:84:69:2d:44:0a:58:11: d4:09:a3:a5:45:e0:96:48:a7:7a:0f:e2:57:5e:d0: 0d:fa:48:9a:79:ef:97:4e:18:23:33:75:48:46:fa: a0:23:69:c3:11:f5:e8:f5:ad:e9:82:c7:6f:c8:12: 3e:2a:bc:21:49:bb:0f:03:5c:b1:9f:df:4a:a3:4f: 45:b6:63:4a:5f:07:a6:7d:9a:54:c5:e4:ed:8f:11: 32:a8:6c:81:09:95:4e:d5:5b:bb:a5:0c:b0:a6:2a: b4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A0:BB:B3:24:A0:01:B1:6D:65:7A:74:D7:92:BC:64:D3:E5:09:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c00a48d0-53f7-3c34-a123-70fbf7b25125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:7d:6a:2d:de:0c:7b:34:50:2d:d2:76:1e:01:6e:96:63:e9: 90:6f:8a:a4:38:dd:c8:98:d5:5f:3c:bc:55:8a:ae:11:ab:2e: a0:39:1e:85:ef:28:cf:e6:2b:ae:89:4a:08:d1:6f:b7:81:a2: e1:e2:a5:44:a0:aa:44:d9:5a:ed:07:15:a5:43:55:73:9d:08: ff:63:6d:80:21:0c:cb:62:0d:f2:4b:93:d3:7c:a6:29:ba:05: 89:57:ea:74:c4:e3:2b:c0:46:d2:19:fe:40:b2:9f:1d:9c:b5: 59:6d:24:9b:83:a9:43:8c:8b:2a:8e:e4:bf:00:e2:97:f8:7f: ad:ec:18:7c:2b:19:c9:8b:ea:29:0f:c1:bb:9b:23:da:45:77: d5:70:4f:c7:56:d1:a4:3f:e2:47:de:69:fa:77:13:83:52:39: e1:55:1f:11:50:26:af:d7:f5:ad:2f:1b:e5:76:7a:65:7e:3d: 71:11:22:13:ff:14:02:7e:5d:9a:f6:37:06:53:24:01:29:c0: f9:28:14:50:5e:ba:0f:47:1e:c2:75:32:79:bc:54:50:2e:bf: 35:55:5d:17:29:93:04:11:9b:36:46:02:c0:1b:bc:76:04:f9: 3c:49:c8:2f:81:67:c0:0d:41:61:1d:87:8d:1b:50:22:d6:da: 17:89:d1:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qSse7lSREixOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZWU4OTU4OWUtYzFkMC00YzNhLTk2MzctYThkOTBkNjUzYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2o59QDtWICFvtYShdpnjZ+nEZjqE0Sj+XCm 9HTR+s2LDC61EzkJbeUyzQX7JEOV6Tc6sREN7JqydpvLjoAPqzdRWctfIcnWea1/ e4AO5ZyYa3QYGldM7fLhQmNoxZ5M0T7BzmRk9L+jCIWaJZmb1DUnU/5ytC5sb6jf TBkIqlZLwYadVisycHihdiKYFwwFASVPa2MtBOACfFzg0IRpLUQKWBHUCaOlReCW SKd6D+JXXtAN+kiaee+XThgjM3VIRvqgI2nDEfXo9a3pgsdvyBI+KrwhSbsPA1yx n99Ko09FtmNKXwemfZpUxeTtjxEyqGyBCZVO1Vu7pQywpiq0DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqgu7MkoAGxbWV6dNeSvGTT5QmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzAwYTQ4ZDAtNTNmNy0z YzM0LWExMjMtNzBmYmY3YjI1MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJx9ai3eDHs0UC3Sdh4BbpZj6ZBviqQ43ciY1V88vFWKrhGrLqA5HoXv KM/mK66JSgjRb7eBouHipUSgqkTZWu0HFaVDVXOdCP9jbYAhDMtiDfJLk9N8pim6 BYlX6nTE4yvARtIZ/kCynx2ctVltJJuDqUOMiyqO5L8A4pf4f63sGHwrGcmL6ikP wbubI9pFd9VwT8dW0aQ/4kfeafp3E4NSOeFVHxFQJq/X9a0vG+V2emV+PXERIhP/ FAJ+XZr2NwZTJAEpwPkoFFBeug9HHsJ1Mnm8VFAuvzVVXRcpkwQRmzZGAsAbvHYE +TxJyC+BZ8ANQWEdh40bUCLW2heJ0QI= -----END CERTIFICATE-----Generated at Fri Mar 14 09:45:41 2025 by rpki-client