$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa File: e0509c46-0481-335e-9abf-5705ae2ce135.roa (raw, json) Hash identifier: Z7GhvSu29FGByFkeOCjXJRlhQMBfuXB4IXxUhqnGc4c= Subject key identifier: AE:19:8B:EA:88:33:9C:34:56:71:61:90:E6:D4:D2:EF:AA:69:64:D2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858484C1014A2ACEEA3D007710440 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 202 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:14:a2:ac:ee:a3:d0:07:71:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=4b5d5356-4ff0-4254-98f1-e5bd046c2cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e9:85:a2:9f:86:5b:ce:1a:b8:fe:b5:89:37: 32:8d:9c:9d:e8:f8:aa:09:87:38:56:00:2e:b7:c7: 17:26:c0:12:e5:ec:25:39:36:9d:b5:61:02:ed:c7: 2e:d5:2a:65:35:a1:82:b1:62:e7:6c:28:4a:3e:d8: 06:1d:b2:6c:22:be:17:74:aa:51:3a:92:91:8b:7c: 00:4d:f5:4e:87:94:1e:08:a1:8c:87:9c:db:46:b0: af:85:d3:98:63:10:b5:9b:c7:0e:2e:f1:1c:0d:fc: 36:02:3f:16:67:7d:ec:7b:e7:4d:10:1e:2e:73:bc: 0d:08:aa:12:ef:0a:32:0b:a7:15:84:67:6b:62:f1: a8:74:ee:eb:8b:88:62:83:f7:09:87:9c:c8:5f:04: 71:15:20:d0:f2:d9:e7:3e:6b:7a:2b:38:f7:15:8e: 9a:d8:a0:6c:95:b6:d3:19:74:c1:57:6b:6e:48:e0: 64:26:6e:e6:38:09:21:bc:35:5b:3f:98:5d:62:dd: ed:d5:8b:39:fa:26:eb:28:56:11:a5:d5:af:aa:ed: 44:70:1c:68:e5:cf:d2:1f:49:77:9f:fe:fe:2f:22: 04:6a:73:74:5e:fd:53:0e:58:06:c3:8a:7c:e1:c7: 97:73:ca:1d:26:e0:4e:69:99:bc:a7:a1:34:5b:5c: 27:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:19:8B:EA:88:33:9C:34:56:71:61:90:E6:D4:D2:EF:AA:69:64:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:74:6f:92:02:65:0a:0e:8b:de:b7:16:a8:6c:9b:7d:cd:6e: 6b:f1:32:78:e0:c0:bb:38:bc:22:07:04:f2:e9:a7:ed:c2:44: 41:54:be:39:fc:09:25:4e:c6:4f:c2:f9:b5:4e:7a:05:27:1c: a8:cf:91:89:34:f4:70:bf:74:78:69:12:65:4a:15:fc:ab:88: c3:c3:14:df:7a:2b:bd:98:a4:e4:29:79:4f:d5:20:58:9c:96: 92:2a:ff:70:53:a3:cf:b9:cf:e8:c2:f1:d5:47:81:70:c1:45: a2:97:45:7c:47:bd:0e:c1:b6:cc:e4:73:31:79:15:70:38:7b: cd:ba:9d:a1:f6:31:fa:4c:49:fb:d4:28:50:d8:69:55:8e:3a: db:d9:03:da:73:46:0a:65:f6:48:bd:87:7b:e1:e3:14:bb:12: 34:c9:d6:b6:71:a0:37:bc:be:83:80:1b:43:29:47:48:91:ce: 17:27:d4:fa:3d:83:c2:00:58:ec:24:1e:e1:e8:5e:7f:5f:3e: ee:19:bc:e6:f1:f3:99:f0:91:5f:91:78:cf:5b:00:71:a6:18: 8f:19:75:f6:0b:75:54:de:39:c6:36:1d:ed:c4:28:7e:a1:db: d7:be:e9:d1:c3:b6:4f:b1:a4:9b:06:4c:19:8f:ed:49:11:d9: 83:81:91:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEBSirO6j0AdxBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk NGI1ZDUzNTYtNGZmMC00MjU0LTk4ZjEtZTViZDA0NmMyY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhumFop+GW84auP61iTcyjZyd6PiqCYc4VgAu t8cXJsAS5ewlOTadtWEC7ccu1SplNaGCsWLnbChKPtgGHbJsIr4XdKpROpKRi3wA TfVOh5QeCKGMh5zbRrCvhdOYYxC1m8cOLvEcDfw2Aj8WZ33se+dNEB4uc7wNCKoS 7woyC6cVhGdrYvGodO7ri4hig/cJh5zIXwRxFSDQ8tnnPmt6Kzj3FY6a2KBslbbT GXTBV2tuSOBkJm7mOAkhvDVbP5hdYt3t1Ys5+ibrKFYRpdWvqu1EcBxo5c/SH0l3 n/7+LyIEanN0Xv1TDlgGw4p84ceXc8odJuBOaZm8p6E0W1wn8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4Zi+qIM5w0VnFhkObU0u+qaWTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTA1MDljNDYtMDQ4MS0z MzVlLTlhYmYtNTcwNWFlMmNlMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGF0b5ICZQoOi963Fqhsm33NbmvxMnjgwLs4vCIHBPLpp+3CREFUvjn8 CSVOxk/C+bVOegUnHKjPkYk09HC/dHhpEmVKFfyriMPDFN96K72YpOQpeU/VIFic lpIq/3BTo8+5z+jC8dVHgXDBRaKXRXxHvQ7BtszkczF5FXA4e826naH2MfpMSfvU KFDYaVWOOtvZA9pzRgpl9ki9h3vh4xS7EjTJ1rZxoDe8voOAG0MpR0iRzhcn1Po9 g8IAWOwkHuHoXn9fPu4ZvObx85nwkV+ReM9bAHGmGI8ZdfYLdVTeOcY2He3EKH6h 29e+6dHDtk+xpJsGTBmP7UkR2YOBkYc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:06 2025 by rpki-client