$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d99a5305-6483-3f7c-aa24-6e3e80884735.roa File: d99a5305-6483-3f7c-aa24-6e3e80884735.roa (raw, json) Hash identifier: 1HrmByofAoJwmgCNeWDpPkNmVQJ6tQaLZhJtlr+PmrI= Subject key identifier: 9F:D5:86:3E:ED:27:C2:FF:49:DD:6C:35:A8:57:E1:C0:F0:33:60:82 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848170510F188224C6DF5D80000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d99a5305-6483-3f7c-aa24-6e3e80884735.roa Signing time: Wed 04 Dec 2024 02:00:39 +0000 ROA not before: Wed 04 Dec 2024 02:00:39 +0000 ROA not after: Tue 04 Mar 2025 02:00:39 +0000 asID: 202 IP address blocks: 20.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:17:05:10:f1:88:22:4c:6d:f5:d8:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 4 02:00:39 2024 GMT Not After : Mar 4 02:00:39 2025 GMT Subject: CN=3e6bf1df-1a02-4282-a2b4-1b0b94b699a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:4d:0b:1e:76:7c:cf:3e:c5:a6:0b:cf:6f: d8:6e:2f:c4:5c:6d:f9:e1:57:3f:19:3d:46:35:70: e5:f9:ab:5c:72:c8:34:0e:75:38:d1:80:65:8e:79: 91:9f:21:12:b5:ad:04:49:e1:b2:14:ac:78:16:1d: ca:19:03:87:74:27:9e:b0:48:f3:e9:1b:4a:aa:f3: 8d:b9:73:c5:1e:7f:1f:eb:0e:c9:76:e2:6d:42:dc: 8f:ff:e9:63:71:a9:59:11:1b:ac:28:9c:0f:00:f4: 5c:6a:fb:58:ed:b1:cc:d5:e4:cd:51:76:26:24:af: ec:5d:d2:61:24:25:f9:22:26:e9:c0:a7:26:3d:a3: 97:f1:42:ee:70:60:61:98:47:33:68:13:f2:27:ed: 72:67:a4:a4:e7:f9:cd:c1:27:d2:a7:81:30:d3:ef: b6:ae:ae:9a:bf:be:31:5f:a3:e0:0f:db:84:4d:a2: ac:6a:72:9a:52:01:8f:0a:c7:1c:e7:fe:bd:4f:7b: 76:34:cf:c1:ec:5c:f9:82:69:80:2c:63:e7:69:4b: 74:05:c1:75:c5:11:ec:d1:bd:05:53:c5:eb:02:67: 27:87:06:c6:bf:76:d6:3e:9c:d2:2e:a9:c5:52:10: 9a:cc:c4:f2:a7:4e:4c:39:2f:a3:08:63:f0:88:34: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D5:86:3E:ED:27:C2:FF:49:DD:6C:35:A8:57:E1:C0:F0:33:60:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d99a5305-6483-3f7c-aa24-6e3e80884735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:16:8c:ea:c1:30:59:c1:b3:91:f7:38:8e:40:ba:b5:53:54: d2:48:f0:19:3f:ff:29:73:13:86:07:96:02:64:17:4a:b9:77: 84:ac:be:dd:3b:07:07:1c:cd:d0:46:28:ee:f7:a8:dd:f8:7f: 40:31:a6:53:e1:48:39:66:b5:95:58:48:b2:2a:43:7c:7e:64: ae:30:5c:e9:bb:61:b7:84:4d:f8:0f:38:dd:80:d5:58:bd:31: a5:8c:63:84:b5:93:dc:cf:7c:09:95:bd:8e:66:34:d4:19:76: 5e:f9:fa:24:03:f8:59:5a:fa:13:d9:64:b0:8b:aa:64:f1:5a: 42:43:54:3b:fe:51:02:5d:e2:b8:79:16:9a:f7:2b:8e:06:31: d6:57:3e:15:ad:87:96:51:8d:7b:1f:e4:b2:44:2c:a8:48:21: 7a:05:e4:39:b8:0c:6c:97:f0:a8:f9:2c:bf:4f:f3:73:fa:6f: 02:53:81:6e:44:64:67:ad:dc:b9:fb:06:a7:53:5d:d7:a4:89: 74:98:f3:f5:9b:6d:ee:da:6c:24:05:ee:01:a1:e6:17:33:65: 97:f9:15:62:c8:80:77:64:27:c4:57:46:d0:f5:0a:8e:f6:e5: 21:3b:70:b0:d6:d3:0e:a1:46:ca:d9:98:d2:24:92:7d:11:c7: 64:94:73:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXBRDxiCJMbfXYAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIwNDAyMDAzOVoXDTI1MDMwNDAyMDAzOVowLzEtMCsGA1UEAxMk M2U2YmYxZGYtMWEwMi00MjgyLWEyYjQtMWIwYjk0YjY5OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaJNCx52fM8+xaYLz2/Ybi/EXG354Vc/GT1G NXDl+atccsg0DnU40YBljnmRnyESta0ESeGyFKx4Fh3KGQOHdCeesEjz6RtKqvON uXPFHn8f6w7JduJtQtyP/+ljcalZERusKJwPAPRcavtY7bHM1eTNUXYmJK/sXdJh JCX5IibpwKcmPaOX8ULucGBhmEczaBPyJ+1yZ6Sk5/nNwSfSp4Ew0++2rq6av74x X6PgD9uETaKsanKaUgGPCscc5/69T3t2NM/B7Fz5gmmALGPnaUt0BcF1xRHs0b0F U8XrAmcnhwbGv3bWPpzSLqnFUhCazMTyp05MOS+jCGPwiDRU9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/Vhj7tJ8L/Sd1sNahX4cDwM2CCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDk5YTUzMDUtNjQ4My0z ZjdjLWFhMjQtNmUzZTgwODg0NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMWjOrBMFnBs5H3OI5AurVTVNJI8Bk//ylzE4YHlgJkF0q5d4Ssvt07 BwcczdBGKO73qN34f0AxplPhSDlmtZVYSLIqQ3x+ZK4wXOm7YbeETfgPON2A1Vi9 MaWMY4S1k9zPfAmVvY5mNNQZdl75+iQD+Fla+hPZZLCLqmTxWkJDVDv+UQJd4rh5 Fpr3K44GMdZXPhWth5ZRjXsf5LJELKhIIXoF5Dm4DGyX8Kj5LL9P83P6bwJTgW5E ZGet3Ln7BqdTXdekiXSY8/Wbbe7abCQF7gGh5hczZZf5FWLIgHdkJ8RXRtD1Co72 5SE7cLDW0w6hRsrZmNIkkn0Rx2SUc6M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:55 2025 by rpki-client