$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa File: c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa (raw, json) Hash identifier: Ocs2HKufwS7DzaZtbms3MdikG49n8HLi4XW713O6xU8= Subject key identifier: 36:62:18:9C:C7:EA:DA:B4:A3:9F:BD:F4:7C:CC:B8:AB:F4:17:C7:D3 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D943C8BA1D1959E15D1F22F8 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa Signing time: Tue 11 Feb 2025 15:53:53 +0000 ROA not before: Tue 11 Feb 2025 15:53:53 +0000 ROA not after: Mon 12 May 2025 14:53:53 +0000 asID: 202 IP address blocks: 20.138.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:43:c8:ba:1d:19:59:e1:5d:1f:22:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 15:53:53 2025 GMT Not After : May 12 14:53:53 2025 GMT Subject: CN=bf4fb951-f169-403a-aa64-f2a4e94be309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:89:07:62:10:95:30:36:00:c0:f1:87:ea:e3: 01:cd:1a:fb:93:59:49:5a:aa:5a:0b:12:10:bb:ea: c4:4f:d6:c4:aa:9d:cc:dd:b8:d4:b1:94:45:ae:d9: 69:f1:df:95:77:21:66:96:e7:93:59:28:17:27:42: 3a:3d:3b:b2:1c:9b:49:48:70:d3:85:2d:07:f6:40: 49:2b:aa:f2:e6:e4:fd:7e:64:00:f4:b5:47:f5:4e: 63:df:2c:58:7b:80:f3:8d:8f:46:13:35:f0:07:f8: 19:a7:48:50:2b:86:36:5d:6f:03:16:f0:80:9b:bf: e1:d9:62:f9:52:06:0c:fe:e3:1d:db:00:e3:3a:84: e3:7f:71:d9:fd:4e:1a:b5:79:22:72:7a:a5:be:9e: 75:48:b6:93:d1:84:98:53:04:63:1f:0c:fb:60:d2: 90:ca:50:83:9d:83:63:28:4e:7b:56:79:ab:a1:6e: 4d:cd:8e:2e:e8:92:86:74:0f:83:ca:ef:98:ff:6c: 7d:c1:04:d4:89:0e:92:fa:f7:e4:7f:ad:7a:b7:1d: 16:8a:66:dd:50:8f:cb:7a:88:8d:44:79:49:56:71: 19:29:0d:78:3f:9f:40:82:1d:20:ca:62:10:b1:57: e5:ca:eb:01:08:81:8c:c6:f7:ce:04:6a:aa:36:eb: 39:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:62:18:9C:C7:EA:DA:B4:A3:9F:BD:F4:7C:CC:B8:AB:F4:17:C7:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b1:c8:20:53:7a:23:92:75:fb:86:54:df:e4:93:a7:05:37: 52:20:de:1c:b5:53:84:4c:09:3e:2b:0d:0e:d4:3b:ac:eb:d6: 51:26:6e:38:b5:a7:69:91:e2:92:7c:dd:e0:55:da:6a:42:54: a3:88:83:e0:6c:0d:1c:ab:07:8a:c5:b8:7b:e8:c7:1e:d1:63: 8e:2c:69:77:db:91:a0:21:d7:5a:07:0d:35:27:aa:b5:9c:0e: 02:31:46:4e:8c:c8:20:f5:b5:ec:13:04:45:b6:36:00:48:14: d2:65:e8:0c:fd:00:52:db:1b:5b:3a:06:1f:0f:c3:ea:32:9d: d8:44:74:09:ca:ea:68:d3:08:fe:70:a2:c6:de:ba:65:79:9d: 1f:1c:b6:3f:95:aa:b4:b5:a7:96:a5:8b:c6:1a:1c:c9:c4:3d: ba:60:1e:3f:47:58:e7:7f:fb:87:f0:84:82:48:03:80:1f:0b: f1:7b:f8:ef:90:61:78:ee:bc:61:5d:50:9f:f2:b8:df:6a:d7: e5:87:95:8f:27:ba:7c:70:71:34:a2:9f:f1:0d:2a:ae:eb:74: 19:4e:07:25:08:ad:03:e2:7b:07:dd:e3:39:bf:60:1b:af:ea: ee:12:96:9d:bb:dd:bf:76:68:b8:f8:1f:11:49:28:68:a0:42: dc:1c:8e:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZQ8i6HRlZ4V0fIvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE1NTM1M1oXDTI1MDUxMjE0NTM1M1owLzEtMCsGA1UEAxMk YmY0ZmI5NTEtZjE2OS00MDNhLWFhNjQtZjJhNGU5NGJlMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkokHYhCVMDYAwPGH6uMBzRr7k1lJWqpaCxIQ u+rET9bEqp3M3bjUsZRFrtlp8d+VdyFmlueTWSgXJ0I6PTuyHJtJSHDThS0H9kBJ K6ry5uT9fmQA9LVH9U5j3yxYe4DzjY9GEzXwB/gZp0hQK4Y2XW8DFvCAm7/h2WL5 UgYM/uMd2wDjOoTjf3HZ/U4atXkicnqlvp51SLaT0YSYUwRjHwz7YNKQylCDnYNj KE57VnmroW5NzY4u6JKGdA+Dyu+Y/2x9wQTUiQ6S+vfkf616tx0WimbdUI/LeoiN RHlJVnEZKQ14P59Agh0gymIQsVflyusBCIGMxvfOBGqqNus53QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZiGJzH6tq0o5+99HzMuKv0F8fTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzQ4Y2M3MzAtOWE4Yi0z Mzc2LWFiNTctOWY0YWFmYzc5MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABixyCBTeiOSdfuGVN/kk6cFN1Ig3hy1U4RMCT4rDQ7UO6zr1lEmbji1 p2mR4pJ83eBV2mpCVKOIg+BsDRyrB4rFuHvoxx7RY44saXfbkaAh11oHDTUnqrWc DgIxRk6MyCD1tewTBEW2NgBIFNJl6Az9AFLbG1s6Bh8Pw+oyndhEdAnK6mjTCP5w osbeumV5nR8ctj+VqrS1p5ali8YaHMnEPbpgHj9HWOd/+4fwhIJIA4AfC/F7+O+Q YXjuvGFdUJ/yuN9q1+WHlY8nunxwcTSin/ENKq7rdBlOByUIrQPiewfd4zm/YBuv 6u4Slp273b92aLj4HxFJKGigQtwcjvg= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:01 2025 by rpki-client