$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa File: d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa (raw, json) Hash identifier: 1XMcDvjU0c/gXiBfMPDqfTKcZOukPNt+VseOeY2CCFg= Subject key identifier: A3:C0:FF:A2:28:74:39:55:26:1C:02:51:03:E9:8A:3C:5C:02:6C:D8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848960B4E46D0319F2528C89880 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:4e:46:d0:31:9f:25:28:c8:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=c82c6b0b-f5cb-4c33-865b-1adb6a46e310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a7:38:4b:94:46:66:c5:48:3b:32:f0:80:8c: 70:24:14:6f:7e:04:8e:a7:71:62:08:4a:36:46:e5: 91:c6:9a:b4:16:aa:e5:94:ad:75:f4:23:cf:18:bc: 0c:03:04:b3:46:6c:a1:bd:04:a9:6e:7b:bc:c6:62: 18:56:01:bc:70:5d:7e:21:79:00:c0:ff:f1:f6:b3: ea:cf:b5:1f:7f:e5:27:53:bc:f6:02:38:38:bc:a1: 2c:9b:7e:62:07:bb:73:2d:3f:f8:cd:d7:cd:b4:61: 33:50:48:37:50:5f:51:d5:f1:9d:73:42:ee:57:53: 3b:76:25:bf:e7:df:66:4f:a5:0c:21:7d:6f:7b:5e: 9d:11:96:22:50:24:0b:73:21:ab:92:40:63:3a:64: cd:db:1a:8b:43:67:7e:28:b6:a6:36:11:e2:66:a1: 50:bd:ec:3b:94:0b:7f:fb:eb:c8:b0:bb:78:c1:b4: f5:df:0a:10:e8:54:c5:ac:40:e1:0d:4c:39:03:6d: 29:f0:6a:da:cf:44:09:db:90:de:3a:b0:17:55:1b: 16:44:18:37:7e:3b:e5:0d:48:f5:25:0d:36:6b:89: 00:4f:2b:b8:fd:05:b6:a4:09:b8:eb:86:a5:b5:34: 11:e9:32:a1:1f:18:92:a2:9f:f0:31:58:c6:1c:73: 25:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C0:FF:A2:28:74:39:55:26:1C:02:51:03:E9:8A:3C:5C:02:6C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3c:5b:34:cc:8c:fc:3f:09:6e:66:ef:3f:59:05:9d:5e:15: f3:32:21:5f:f2:39:9d:86:70:3a:db:8b:54:b2:f3:f0:0e:e7: 0b:9f:98:2e:78:68:7d:29:b0:1a:7c:1e:c6:3c:bf:8b:4f:3d: 42:67:12:5e:15:d9:61:ed:c5:9b:06:48:87:89:2b:43:66:31: 59:f8:93:d5:19:e0:ef:ce:e5:ed:73:7e:93:75:8d:9c:53:d5: b0:7d:cb:5e:63:9f:e3:ab:bb:97:ba:4f:64:c7:a6:71:46:9e: 72:26:5c:80:83:71:e3:13:65:0d:20:77:0a:d0:41:2e:86:0d: fe:cf:1e:23:41:cc:bb:1f:56:55:a7:8e:02:91:ef:20:01:ed: 21:1f:aa:64:12:f2:3c:ad:b0:c6:b1:b4:bb:ed:54:8d:e2:27: 73:e5:e3:a4:a4:2e:c8:8a:6b:d8:f7:8e:9b:1d:8d:b1:b9:18: f8:52:18:3a:d5:2f:39:6a:b7:7b:c2:de:bf:70:b2:75:8d:1f: 8d:2d:e8:db:49:c3:7c:d3:f1:fe:eb:6b:ff:ed:a8:22:ba:35: 52:92:ea:6f:b9:0c:99:33:7a:ae:3e:c8:ce:0b:b9:9c:fd:3d: d4:a2:5f:c3:af:e2:cc:1c:18:5b:9d:ae:fd:0d:06:ad:d4:7c: 70:af:4e:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC05G0DGfJSjImIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk YzgyYzZiMGItZjVjYi00YzMzLTg2NWItMWFkYjZhNDZlMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kc4S5RGZsVIOzLwgIxwJBRvfgSOp3FiCEo2 RuWRxpq0FqrllK119CPPGLwMAwSzRmyhvQSpbnu8xmIYVgG8cF1+IXkAwP/x9rPq z7Uff+UnU7z2Ajg4vKEsm35iB7tzLT/4zdfNtGEzUEg3UF9R1fGdc0LuV1M7diW/ 599mT6UMIX1ve16dEZYiUCQLcyGrkkBjOmTN2xqLQ2d+KLamNhHiZqFQvew7lAt/ ++vIsLt4wbT13woQ6FTFrEDhDUw5A20p8Graz0QJ25DeOrAXVRsWRBg3fjvlDUj1 JQ02a4kATyu4/QW2pAm464altTQR6TKhHxiSop/wMVjGHHMllwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPA/6IodDlVJhwCUQPpijxcAmzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDFkOWIzMTEtY2U5ZS0z ODZhLWI1ZTUtYjZmMDFjZDFjZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM8WzTMjPw/CW5m7z9ZBZ1eFfMyIV/yOZ2GcDrbi1Sy8/AO5wufmC54 aH0psBp8HsY8v4tPPUJnEl4V2WHtxZsGSIeJK0NmMVn4k9UZ4O/O5e1zfpN1jZxT 1bB9y15jn+Oru5e6T2THpnFGnnImXICDceMTZQ0gdwrQQS6GDf7PHiNBzLsfVlWn jgKR7yAB7SEfqmQS8jytsMaxtLvtVI3iJ3Pl46SkLsiKa9j3jpsdjbG5GPhSGDrV Lzlqt3vC3r9wsnWNH40t6NtJw3zT8f7ra//tqCK6NVKS6m+5DJkzeq4+yM4LuZz9 PdSiX8Ov4swcGFudrv0NBq3UfHCvTus= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:35 2025 by rpki-client