$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c7d3d65e-b485-3d8c-9588-f44e7f31f3c1.roa File: c7d3d65e-b485-3d8c-9588-f44e7f31f3c1.roa (raw, json) Hash identifier: h63RsFw6u/hNRRFtxmOMKCoslpPfyLYkP9khEA6eyS8= Subject key identifier: 72:C8:C0:12:99:50:4C:8C:09:81:CB:72:36:AB:6A:5A:EE:C1:9C:4D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849244E6EC268D8FAB1E7623300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c7d3d65e-b485-3d8c-9588-f44e7f31f3c1.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 4237 IP address blocks: 20.137.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:6e:c2:68:d8:fa:b1:e7:62:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=4a1f3df5-f20c-45c0-922d-50fea0dc73ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:32:f1:52:0a:98:f6:a9:8a:86:bf:10:3d:d2: 0d:43:26:fd:c7:80:a8:26:07:80:09:19:6d:65:27: 2e:2a:e4:53:f1:e1:8e:0b:99:20:7f:21:71:0e:d5: 03:b1:f2:94:fb:c1:df:1c:07:6d:3e:16:8a:c7:d5: 59:20:6e:1b:0f:ab:29:80:0c:96:14:c1:83:fb:bc: e3:0f:55:71:dd:c4:3b:89:34:1a:02:ff:a4:ea:6d: c5:c6:7c:86:54:4b:e7:b9:99:76:4b:90:ee:b6:62: 6d:7d:5d:cf:0d:72:ee:90:e3:5e:87:ff:e4:e5:61: fa:99:9d:13:b5:2f:0d:0f:1a:c6:64:df:6d:30:de: 21:5e:5e:cd:d7:ac:40:d2:d5:8e:2c:f5:3d:d4:ba: 39:fa:03:cc:8e:84:30:18:63:24:4d:2d:b3:36:5b: 56:70:8e:97:36:8b:60:79:49:2d:f9:20:f0:30:34: f8:25:68:8f:bd:d7:39:55:f8:1e:5e:3c:d2:4f:86: 08:ab:0c:7d:36:06:8a:c8:ca:f5:ac:3e:dc:cd:b0: 9d:d9:15:aa:55:2c:ed:15:06:27:48:76:54:b5:c0: 13:0d:d6:9b:9c:00:ef:f9:a1:4a:1e:ef:6a:dd:b1: c5:1c:36:58:f7:83:2d:7c:b9:da:60:33:1f:ea:df: c8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C8:C0:12:99:50:4C:8C:09:81:CB:72:36:AB:6A:5A:EE:C1:9C:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c7d3d65e-b485-3d8c-9588-f44e7f31f3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b2:45:4b:88:44:53:95:f5:8d:96:eb:0d:21:ef:0d:74:1a: 71:51:5a:46:7f:38:3e:a6:a7:d8:0d:10:86:80:02:5d:fd:00: d3:f6:ed:80:66:56:fb:00:6f:d4:29:9a:e8:95:7b:41:52:b1: e2:68:eb:f6:53:1e:ba:d4:d5:6a:42:6e:e4:c9:2d:2c:0e:99: 9f:6b:e3:ef:31:01:90:a5:55:f2:e6:51:69:f7:0a:09:83:6f: cb:0a:f0:b6:4a:50:81:b6:3e:ea:d5:ec:33:19:d9:4e:3b:23: 90:68:df:0c:e2:e7:ec:9d:70:c5:e0:6e:96:85:d7:9c:89:ea: 4e:97:eb:b0:d6:fa:f2:6e:25:06:3f:c4:9a:7e:25:f0:79:31: 33:57:d2:3b:3d:0c:77:dc:fd:9e:2f:6f:9b:8b:3b:d4:93:ef: 65:bc:57:86:3c:ec:60:51:50:e8:f4:68:67:7b:58:8e:9e:8d: ba:db:71:68:5f:13:8a:ae:73:f8:71:18:66:97:77:f1:cd:08: fa:a5:7a:12:72:d5:53:b1:97:8f:1c:e6:30:10:8a:1c:00:68: 59:53:59:97:9c:bf:eb:d8:3c:3a:86:fa:8c:8a:a5:9b:e4:c3: 37:94:4c:9b:b3:34:9a:d8:82:d2:6c:ca:40:0c:79:87:04:d0: 30:3a:5d:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTm7CaNj6sediMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NGExZjNkZjUtZjIwYy00NWMwLTkyMmQtNTBmZWEwZGM3M2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TLxUgqY9qmKhr8QPdINQyb9x4CoJgeACRlt ZScuKuRT8eGOC5kgfyFxDtUDsfKU+8HfHAdtPhaKx9VZIG4bD6spgAyWFMGD+7zj D1Vx3cQ7iTQaAv+k6m3FxnyGVEvnuZl2S5DutmJtfV3PDXLukONeh//k5WH6mZ0T tS8NDxrGZN9tMN4hXl7N16xA0tWOLPU91Lo5+gPMjoQwGGMkTS2zNltWcI6XNotg eUkt+SDwMDT4JWiPvdc5VfgeXjzST4YIqwx9NgaKyMr1rD7czbCd2RWqVSztFQYn SHZUtcATDdabnADv+aFKHu9q3bHFHDZY94MtfLnaYDMf6t/I8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLIwBKZUEyMCYHLcjaralruwZxNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzdkM2Q2NWUtYjQ4NS0z ZDhjLTk1ODgtZjQ0ZTdmMzFmM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuyRUuIRFOV9Y2W6w0h7w10GnFRWkZ/OD6mp9gNEIaAAl39ANP27YBm VvsAb9QpmuiVe0FSseJo6/ZTHrrU1WpCbuTJLSwOmZ9r4+8xAZClVfLmUWn3CgmD b8sK8LZKUIG2PurV7DMZ2U47I5Bo3wzi5+ydcMXgbpaF15yJ6k6X67DW+vJuJQY/ xJp+JfB5MTNX0js9DHfc/Z4vb5uLO9ST72W8V4Y87GBRUOj0aGd7WI6ejbrbcWhf E4quc/hxGGaXd/HNCPqlehJy1VOxl48c5jAQihwAaFlTWZecv+vYPDqG+oyKpZvk wzeUTJuzNJrYgtJsykAMeYcE0DA6XYM= -----END CERTIFICATE-----Generated at Fri Mar 14 11:16:24 2025 by rpki-client