$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa File: da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa (raw, json) Hash identifier: 6yDmcXT45Y4wMPYt8VP4BV0m/AuKuig8p3Qe//1Xp18= Subject key identifier: CD:5F:0C:A2:79:D8:81:39:6D:A9:4C:06:A1:AD:F2:3D:42:25:B6:81 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D9474FB1A735207B6DA19080 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa Signing time: Tue 11 Feb 2025 16:00:59 +0000 ROA not before: Tue 11 Feb 2025 16:00:59 +0000 ROA not after: Mon 12 May 2025 15:00:59 +0000 asID: 203 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:47:4f:b1:a7:35:20:7b:6d:a1:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 16:00:59 2025 GMT Not After : May 12 15:00:59 2025 GMT Subject: CN=d94c602d-a046-4a1b-be13-09b401d2d22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:02:62:2f:ee:fe:e1:14:b0:0a:9f:c8:ab: 1b:81:7e:d3:d7:11:22:fa:54:ab:13:c5:a6:26:f4: d6:2f:9c:29:7d:bd:99:fe:9d:97:7b:b7:1c:58:0e: 1a:41:24:23:f5:b3:af:7b:93:5f:36:fa:1c:0a:9c: cf:5a:41:6b:ad:51:93:52:df:09:0e:39:25:6d:a7: 47:05:a5:83:2e:b1:59:28:85:55:78:77:e5:e4:4e: 7f:b9:7f:16:50:1b:90:e1:67:6a:00:90:83:81:f1: e6:62:93:86:0e:38:35:ab:c5:b8:d7:e0:90:da:cd: 7d:a9:65:ba:36:7d:38:cc:09:59:7d:9e:92:40:8d: bc:87:b3:88:03:f0:48:5a:b4:4c:93:60:aa:15:4e: 37:5c:93:4c:b0:5c:2d:59:31:3e:e3:a6:bc:70:76: 6f:99:50:1b:bd:92:d9:5f:3e:fe:72:6f:de:6d:4b: 76:e3:91:a1:9f:7e:9d:46:6e:10:c8:4a:e7:dc:9f: 2b:92:4c:a9:1f:ff:1e:7f:b1:b8:52:d8:af:1c:ae: 9d:67:99:84:15:7b:df:05:0c:53:87:89:79:fa:69: 51:67:6a:db:9b:5d:f9:75:aa:3e:8e:a8:c9:f8:f5: 2f:34:eb:8f:04:d2:ce:41:b1:14:19:a2:4a:7c:53: 03:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5F:0C:A2:79:D8:81:39:6D:A9:4C:06:A1:AD:F2:3D:42:25:B6:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da0aa5f1-59e6-3fdd-82bb-a049241f6077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c9:98:cc:80:0d:d1:38:8d:e5:05:65:e8:8a:a6:72:fc:0c: dd:eb:cc:41:04:b2:ae:fd:32:1a:e0:ef:51:16:de:48:61:b7: 2b:49:f5:54:92:15:2e:d4:97:ef:cf:aa:64:66:ed:cc:25:93: a7:46:da:6e:3a:d0:76:84:35:af:3b:59:f9:e9:53:49:2a:3c: fa:ff:4d:b2:75:b0:35:2f:0e:79:18:8c:8b:d9:bd:00:72:64: 55:57:ac:e8:c0:7a:de:58:77:3e:98:67:4f:2c:f1:67:ca:b3: d1:62:af:44:44:76:4c:3e:7f:d7:bf:c7:9e:a3:aa:48:c1:d9: 3c:38:07:6a:4d:6a:47:54:19:1e:ce:68:de:43:b5:6e:ee:4a: d9:10:b0:01:4d:c7:4c:b3:70:b8:5c:4d:2b:6f:67:ce:3f:4f: 9c:07:82:48:3b:88:27:f0:2e:fc:66:f5:bc:57:0d:70:21:39: dc:2b:c3:01:8e:e8:a5:9e:2d:ae:91:d6:3b:41:1d:cb:23:39: 06:bd:37:68:8f:0e:78:3c:f3:b6:c7:73:16:e6:c3:04:8f:17: 7d:2e:aa:b8:a8:8e:c8:45:31:ea:4d:4e:3f:b9:c8:c5:05:b4: ef:a5:ad:25:52:f6:cf:62:b6:bc:22:0f:18:79:e7:72:08:7f: 6b:81:dc:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZR0+xpzUge22hkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE2MDA1OVoXDTI1MDUxMjE1MDA1OVowLzEtMCsGA1UEAxMk ZDk0YzYwMmQtYTA0Ni00YTFiLWJlMTMtMDliNDAxZDJkMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzkCYi/u/uEUsAqfyKsbgX7T1xEi+lSrE8Wm JvTWL5wpfb2Z/p2Xe7ccWA4aQSQj9bOve5NfNvocCpzPWkFrrVGTUt8JDjklbadH BaWDLrFZKIVVeHfl5E5/uX8WUBuQ4WdqAJCDgfHmYpOGDjg1q8W41+CQ2s19qWW6 Nn04zAlZfZ6SQI28h7OIA/BIWrRMk2CqFU43XJNMsFwtWTE+46a8cHZvmVAbvZLZ Xz7+cm/ebUt245Ghn36dRm4QyErn3J8rkkypH/8ef7G4UtivHK6dZ5mEFXvfBQxT h4l5+mlRZ2rbm135dao+jqjJ+PUvNOuPBNLOQbEUGaJKfFMDFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1fDKJ52IE5balMBqGt8j1CJbaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwYWE1ZjEtNTllNi0z ZmRkLTgyYmItYTA0OTI0MWY2MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzJmMyADdE4jeUFZeiKpnL8DN3rzEEEsq79Mhrg71EW3khhtytJ9VSS FS7Ul+/PqmRm7cwlk6dG2m460HaENa87WfnpU0kqPPr/TbJ1sDUvDnkYjIvZvQBy ZFVXrOjAet5Ydz6YZ08s8WfKs9Fir0REdkw+f9e/x56jqkjB2Tw4B2pNakdUGR7O aN5DtW7uStkQsAFNx0yzcLhcTStvZ84/T5wHgkg7iCfwLvxm9bxXDXAhOdwrwwGO 6KWeLa6R1jtBHcsjOQa9N2iPDng887bHcxbmwwSPF30uqriojshFMepNTj+5yMUF tO+lrSVS9s9itrwiDxh553IIf2uB3OU= -----END CERTIFICATE-----Generated at Fri Apr 11 23:20:52 2025 by rpki-client