$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa File: c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa (raw, json) Hash identifier: fwLe1c2spvyHvTiPYKWTMDYVgwbDgw1wclZIq+Cv1Ng= Subject key identifier: CD:DC:6C:89:10:A6:C5:8F:B8:05:EC:F2:EC:9B:24:E9:CE:A4:57:A7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848960B4E1B73381274A4360F00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 3360 IP address blocks: 20.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:4e:1b:73:38:12:74:a4:36:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=f2c47f57-7872-4405-af9a-766209d13256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:76:a8:6d:2d:7a:ce:e7:c4:24:8d:73:29: 3a:97:0c:41:f1:1e:75:64:34:a2:f6:c2:10:d9:a5: a8:57:62:fe:34:d8:37:2d:15:71:bc:7c:b6:e9:3a: 28:e2:33:06:13:c9:cf:fb:50:4f:51:1c:3f:68:f6: f8:3b:bb:6f:d2:03:56:ef:9b:3c:dc:dd:36:4e:55: 63:e8:8d:fb:d3:ff:87:58:76:5f:4a:c0:55:8c:4f: 38:2f:5d:3c:d9:d4:01:a0:e4:83:15:9d:ba:55:46: 4c:e4:fa:48:af:cf:bb:03:71:8a:c3:5b:40:0b:40: b1:6d:6b:0d:37:c0:e7:9c:c4:f2:2f:3a:b0:f7:f3: fb:87:a1:02:e7:6a:8f:3f:ea:cc:12:a3:d3:c7:d4: 02:26:93:ff:7b:9b:4f:07:46:8f:be:4e:2b:88:d7: c0:ff:f8:be:57:68:cd:6e:64:64:95:95:af:7f:22: c5:f6:e6:66:cd:ec:54:f5:67:95:70:89:09:59:26: 18:52:70:2b:db:bd:97:58:0d:48:84:f9:13:77:34: b1:9d:5d:32:c8:28:d8:c4:81:20:47:d5:55:50:a4: ed:e7:3b:97:e9:67:5b:bc:17:5f:63:9f:f7:5d:9e: c0:e7:3f:57:a6:f4:48:06:98:53:17:bd:86:1a:13: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DC:6C:89:10:A6:C5:8F:B8:05:EC:F2:EC:9B:24:E9:CE:A4:57:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:16:78:c8:4e:e0:4d:78:98:9c:a6:a8:26:03:f6:cd:82:c4: 88:79:fd:59:3e:c4:09:e5:5a:b9:5b:71:77:e4:91:d6:45:26: 8d:b1:d2:f8:de:1b:4b:ca:aa:9b:77:00:ef:a6:55:7e:ce:8d: 49:33:ee:bb:f4:2d:f7:64:69:86:39:ff:43:6e:7f:29:c5:30: 04:74:70:bb:3c:d0:b3:78:0a:87:11:59:4c:8f:55:7b:3e:b6: c1:53:0c:ca:d0:2e:55:d4:df:ca:7a:45:ea:81:fd:b9:d9:5e: 10:44:da:62:db:f2:84:84:7f:a9:b2:83:e9:48:99:d0:6c:b5: a5:c5:6e:04:35:fb:2f:30:62:81:6c:a8:1d:5b:48:e2:47:25: 58:70:92:3f:57:e4:c9:32:59:65:27:6e:1e:81:20:a9:36:d7: 94:b2:41:48:3d:dc:46:6a:72:82:0f:c5:a1:da:33:3e:1a:bf: b5:43:ef:4c:80:93:40:24:c4:44:ad:db:61:16:e3:2a:44:40: 77:48:70:76:83:02:9d:f8:87:d6:e2:63:b4:a7:fa:4b:7b:64: 95:1e:6f:ee:90:5d:c6:ae:ec:50:8c:9b:0e:db:e6:a0:e9:71: 2b:41:16:2a:f9:c0:3b:c3:89:b8:d1:57:12:a2:93:35:82:c9: e7:63:ee:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC04bczgSdKQ2DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk ZjJjNDdmNTctNzg3Mi00NDA1LWFmOWEtNzY2MjA5ZDEzMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubR2qG0tes7nxCSNcyk6lwxB8R51ZDSi9sIQ 2aWoV2L+NNg3LRVxvHy26Too4jMGE8nP+1BPURw/aPb4O7tv0gNW75s83N02TlVj 6I370/+HWHZfSsBVjE84L1082dQBoOSDFZ26VUZM5PpIr8+7A3GKw1tAC0CxbWsN N8DnnMTyLzqw9/P7h6EC52qPP+rMEqPTx9QCJpP/e5tPB0aPvk4riNfA//i+V2jN bmRklZWvfyLF9uZmzexU9WeVcIkJWSYYUnAr272XWA1IhPkTdzSxnV0yyCjYxIEg R9VVUKTt5zuX6WdbvBdfY5/3XZ7A5z9XpvRIBphTF72GGhNrxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3cbIkQpsWPuAXs8uybJOnOpFenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzNjNjcyNWYtZTRlMy0z MWFjLTkzYTYtZDAyZGRiZjdjNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEWeMhO4E14mJymqCYD9s2CxIh5/Vk+xAnlWrlbcXfkkdZFJo2x0vje G0vKqpt3AO+mVX7OjUkz7rv0LfdkaYY5/0NufynFMAR0cLs80LN4CocRWUyPVXs+ tsFTDMrQLlXU38p6ReqB/bnZXhBE2mLb8oSEf6myg+lImdBstaXFbgQ1+y8wYoFs qB1bSOJHJVhwkj9X5MkyWWUnbh6BIKk215SyQUg93EZqcoIPxaHaMz4av7VD70yA k0AkxESt22EW4ypEQHdIcHaDAp34h9biY7Sn+kt7ZJUeb+6QXcau7FCMmw7b5qDp cStBFir5wDvDibjRVxKikzWCyedj7mk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:23 2025 by rpki-client