$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa File: e0509c46-0481-335e-9abf-5705ae2ce135.roa (raw, json) Hash identifier: gV9izae2jjzgxacGche47ewmpGn42Iodkn3j0XXUD2A= Subject key identifier: C0:E2:B4:59:D9:A6:D8:4C:31:BA:5D:F7:B1:DF:32:24:DA:A6:0E:56 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE93CE0FE9BD68058FD680 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:93:ce:0f:e9:bd:68:05:8f:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=0fbb3c95-70c9-4a94-922e-a8eac5b47755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ec:ae:aa:74:e0:fc:41:fe:7d:3b:b5:ac:52: c5:32:8c:c4:a4:42:88:ea:7a:6f:a3:45:e0:09:0a: 2d:23:ee:64:b1:8e:70:35:db:57:91:64:d6:99:18: 08:39:1c:0e:a0:61:c9:71:a6:6a:b8:73:df:95:1e: b3:ee:ac:df:67:b4:10:27:6d:9f:a8:33:c1:ec:0a: f7:24:24:23:43:04:42:29:27:f9:2b:be:23:ef:e6: a5:fa:98:b0:f7:5f:69:81:36:4c:15:d2:6b:48:8e: 4d:28:bc:3a:2b:7e:9e:75:0d:e6:eb:14:49:fb:5e: e0:47:f8:c8:12:4c:be:58:80:10:20:ca:43:77:1b: 02:11:6d:6a:1c:06:e8:1b:cb:f6:84:bd:92:3b:90: 00:71:d4:0f:af:88:eb:97:4a:ba:e0:94:20:e9:69: c9:8d:25:40:3f:15:ec:d0:80:d9:c7:1d:75:dd:b7: f6:99:c4:7a:b0:ea:3d:5c:86:15:99:87:db:6b:ed: 85:27:e6:85:d1:e6:1c:e3:b5:f9:aa:11:30:20:ef: c2:66:70:10:ef:cb:7a:92:6a:d6:3e:37:8c:30:d6: 2a:87:69:e0:5e:05:47:96:b0:85:c7:c8:ec:96:a4: 3d:0f:0d:0f:fc:71:e2:3c:ff:07:ef:4d:fb:53:c6: d0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E2:B4:59:D9:A6:D8:4C:31:BA:5D:F7:B1:DF:32:24:DA:A6:0E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6c:6c:59:85:05:5e:44:e0:33:67:33:74:07:d3:4d:f3:6d: fb:21:64:0a:73:80:19:99:d8:f1:b7:80:89:ae:08:73:c9:9d: 55:95:a6:32:de:91:69:1f:e8:f9:b9:f8:cc:91:4e:23:67:ed: 9e:8a:5a:2b:dc:79:4a:8f:76:89:d1:4d:eb:ef:d6:f0:9e:67: 98:2c:fa:dd:46:28:1b:27:02:91:ea:ce:85:14:27:31:da:b0: da:52:ca:ef:fe:ab:4b:64:a9:a7:dc:19:4c:c2:e5:76:36:20: 9a:d3:c3:44:f5:ed:bd:61:00:3d:63:57:3a:db:db:d8:51:a9: be:47:a4:3c:8c:26:22:08:e1:bf:91:28:d9:81:af:f5:db:25: 1b:f6:31:e4:82:80:bc:f9:71:68:e8:e2:a7:48:4e:fb:19:3c: 9e:61:75:d2:24:7d:48:f7:63:94:27:85:5e:b0:02:6a:fe:1e: c1:a0:8e:a0:88:e9:bf:08:12:db:aa:87:f8:ec:d0:e6:5b:ba: e9:27:3d:04:c9:57:79:a0:1e:86:29:d9:84:bc:46:a1:77:e9: 55:b8:bd:cf:60:8c:e7:26:ef:13:34:55:30:38:a6:cb:65:2a: bf:ea:d2:e5:1c:89:44:4d:4e:a4:b2:1c:fc:02:7a:8f:13:a4: 56:fa:92:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpPOD+m9aAWP1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MGZiYjNjOTUtNzBjOS00YTk0LTkyMmUtYThlYWM1YjQ3NzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+yuqnTg/EH+fTu1rFLFMozEpEKI6npvo0Xg CQotI+5ksY5wNdtXkWTWmRgIORwOoGHJcaZquHPflR6z7qzfZ7QQJ22fqDPB7Ar3 JCQjQwRCKSf5K74j7+al+piw919pgTZMFdJrSI5NKLw6K36edQ3m6xRJ+17gR/jI Eky+WIAQIMpDdxsCEW1qHAboG8v2hL2SO5AAcdQPr4jrl0q64JQg6WnJjSVAPxXs 0IDZxx113bf2mcR6sOo9XIYVmYfba+2FJ+aF0eYc47X5qhEwIO/CZnAQ78t6kmrW PjeMMNYqh2ngXgVHlrCFx8jslqQ9Dw0P/HHiPP8H7037U8bQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDitFnZpthMMbpd97HfMiTapg5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTA1MDljNDYtMDQ4MS0z MzVlLTlhYmYtNTcwNWFlMmNlMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhsbFmFBV5E4DNnM3QH003zbfshZApzgBmZ2PG3gImuCHPJnVWVpjLe kWkf6Pm5+MyRTiNn7Z6KWivceUqPdonRTevv1vCeZ5gs+t1GKBsnApHqzoUUJzHa sNpSyu/+q0tkqafcGUzC5XY2IJrTw0T17b1hAD1jVzrb29hRqb5HpDyMJiII4b+R KNmBr/XbJRv2MeSCgLz5cWjo4qdITvsZPJ5hddIkfUj3Y5QnhV6wAmr+HsGgjqCI 6b8IEtuqh/js0OZbuuknPQTJV3mgHoYp2YS8RqF36VW4vc9gjOcm7xM0VTA4pstl Kr/q0uUciURNTqSyHPwCeo8TpFb6kv0= -----END CERTIFICATE-----Generated at Fri Mar 14 08:23:53 2025 by rpki-client