$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c7d3d65e-b485-3d8c-9588-f44e7f31f3c1.roa File: c7d3d65e-b485-3d8c-9588-f44e7f31f3c1.roa (raw, json) Hash identifier: s1aBKY8nr36JdwAW64koZ88bVdxLQgWjgH9pybO/rho= Subject key identifier: BC:54:DA:D4:15:35:DE:BC:E0:94:5B:76:55:AC:21:8F:76:D2:05:AA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584843B00B5E4DAA5DC9EDE1DE00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c7d3d65e-b485-3d8c-9588-f44e7f31f3c1.roa Signing time: Fri 20 Dec 2024 02:00:40 +0000 ROA not before: Fri 20 Dec 2024 02:00:40 +0000 ROA not after: Thu 20 Mar 2025 01:00:40 +0000 asID: 4237 IP address blocks: 20.137.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:43:b0:0b:5e:4d:aa:5d:c9:ed:e1:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 20 02:00:40 2024 GMT Not After : Mar 20 01:00:40 2025 GMT Subject: CN=fa0fceef-6017-4c2d-b8f9-473406fb498b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5b:d9:8e:31:55:55:00:ab:4b:f9:a2:14:06: d5:7e:e5:0d:cc:01:1c:cb:60:a3:86:b0:c2:0b:14: df:c4:81:53:d6:58:73:28:80:8a:3c:2a:c6:b4:35: 66:56:8b:f9:52:7a:bd:2c:f7:57:69:ad:ab:17:34: 02:e6:bb:8e:fa:b3:9b:7a:4e:ed:28:71:93:76:61: d3:30:f7:77:6e:70:00:58:b5:3f:41:24:99:3c:9c: f4:28:2f:73:3c:27:c1:25:3c:19:f5:9e:8d:5f:fd: c9:7c:94:21:b9:55:8f:7b:18:b6:88:d5:3d:2a:3f: 94:f2:3a:92:1f:50:f9:9c:e4:fc:9e:9f:00:11:fc: f4:de:c7:d8:95:e6:ab:74:9d:62:2d:1c:52:4f:92: 35:cc:db:c7:2b:5f:13:52:d5:66:f3:e7:75:4e:c7: eb:be:a2:2f:57:09:86:64:4d:0b:c3:fa:74:fc:3f: 20:7e:60:98:08:13:4e:60:52:c8:ad:e9:d2:7c:61: 53:71:04:45:9a:06:35:cc:be:76:3d:33:5c:32:db: 64:db:8e:fd:d0:e4:fd:c5:19:78:28:de:db:33:8c: fe:74:80:3e:0f:77:74:7b:11:6a:f3:94:d8:f1:3d: de:d8:3c:2e:d6:1c:22:f0:b0:20:b4:ab:6a:d3:f5: 2f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:54:DA:D4:15:35:DE:BC:E0:94:5B:76:55:AC:21:8F:76:D2:05:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c7d3d65e-b485-3d8c-9588-f44e7f31f3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ad:7b:a8:8b:ca:bf:f8:e2:7c:51:9e:51:73:87:6b:92:9f: 77:81:08:6b:8a:4c:a5:f8:30:c2:24:e2:73:54:63:5c:d8:ad: b8:62:4c:a6:83:75:ed:f0:a2:70:ea:de:bc:32:b9:5d:c6:85: a0:2f:87:12:3e:11:01:09:8a:84:12:97:67:2c:35:a7:46:17: 89:50:fb:98:02:7e:fc:2b:2d:75:c0:e5:79:f9:dd:0f:db:1a: e6:cf:9b:83:df:7d:ca:ea:c3:32:66:9c:6c:eb:1f:36:e0:01: e4:51:1a:99:42:4f:cc:b6:2e:85:9e:b5:9b:0d:49:6d:47:0e: 5d:87:9b:d3:5d:97:a2:d9:60:9f:f6:50:95:5b:2d:d0:31:9a: 29:14:43:05:ce:e1:db:26:a6:40:0f:f0:bb:41:ec:73:fe:c6: 2c:e6:65:39:d1:49:da:65:fa:af:20:40:02:ad:61:38:48:53: 4b:ef:6a:72:d0:a2:df:38:88:33:90:b5:44:04:4a:95:1b:db: 1b:3d:cc:a7:87:ce:3e:7e:fd:b8:67:14:82:af:33:b1:e4:8e: 50:b6:a0:b2:a9:33:f2:f5:90:fa:d6:6e:02:9b:11:11:6f:7d: c2:6f:de:49:fa:f9:d1:a3:da:3d:87:0e:a4:97:ef:db:3e:e4: 12:6a:8f:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhDsAteTapdye3h3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIyMDAyMDA0MFoXDTI1MDMyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZmEwZmNlZWYtNjAxNy00YzJkLWI4ZjktNDczNDA2ZmI0OThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1vZjjFVVQCrS/miFAbVfuUNzAEcy2CjhrDC CxTfxIFT1lhzKICKPCrGtDVmVov5Unq9LPdXaa2rFzQC5ruO+rObek7tKHGTdmHT MPd3bnAAWLU/QSSZPJz0KC9zPCfBJTwZ9Z6NX/3JfJQhuVWPexi2iNU9Kj+U8jqS H1D5nOT8np8AEfz03sfYleardJ1iLRxST5I1zNvHK18TUtVm8+d1TsfrvqIvVwmG ZE0Lw/p0/D8gfmCYCBNOYFLIrenSfGFTcQRFmgY1zL52PTNcMttk24790OT9xRl4 KN7bM4z+dIA+D3d0exFq85TY8T3e2Dwu1hwi8LAgtKtq0/UvrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxU2tQVNd684JRbdlWsIY920gWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzdkM2Q2NWUtYjQ4NS0z ZDhjLTk1ODgtZjQ0ZTdmMzFmM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCte6iLyr/44nxRnlFzh2uSn3eBCGuKTKX4MMIk4nNUY1zYrbhiTKaD de3wonDq3rwyuV3GhaAvhxI+EQEJioQSl2csNadGF4lQ+5gCfvwrLXXA5Xn53Q/b GubPm4PffcrqwzJmnGzrHzbgAeRRGplCT8y2LoWetZsNSW1HDl2Hm9Ndl6LZYJ/2 UJVbLdAxmikUQwXO4dsmpkAP8LtB7HP+xizmZTnRSdpl+q8gQAKtYThIU0vvanLQ ot84iDOQtUQESpUb2xs9zKeHzj5+/bhnFIKvM7HkjlC2oLKpM/L1kPrWbgKbERFv fcJv3kn6+dGj2j2HDqSX79s+5BJqj0o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:08 2025 by rpki-client