$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa File: e3806760-7d79-3d01-859b-ff7d8faa361a.roa (raw, json) Hash identifier: glCm8ESsJ7tWm3a+3H7ucHnNqdRjAnQjfLFZMcBrtH0= Subject key identifier: 94:CE:0E:FD:8D:12:46:F1:B6:97:B2:39:96:58:E7:24:80:DE:1A:CE Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D9414007F91B2CB719621900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa Signing time: Tue 11 Feb 2025 15:48:46 +0000 ROA not before: Tue 11 Feb 2025 15:48:46 +0000 ROA not after: Mon 12 May 2025 14:48:46 +0000 asID: 203 IP address blocks: 20.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:41:40:07:f9:1b:2c:b7:19:62:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 15:48:46 2025 GMT Not After : May 12 14:48:46 2025 GMT Subject: CN=559579b2-13a3-4a7b-9320-9f65d9f94894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8a:c7:2f:d7:70:b4:54:26:a6:36:b6:0a:e1: ac:e0:69:ac:2e:32:6d:be:28:c8:3e:9d:c6:e8:20: 32:dc:4d:03:dd:f9:ee:b8:26:50:1c:95:56:15:3b: d4:86:66:62:19:6a:fa:d9:cb:d4:13:fb:c4:2b:05: be:4c:d1:6b:63:ed:b6:f2:3a:df:de:b5:7c:3b:63: a5:9c:79:aa:de:e6:10:12:12:ae:e4:6b:63:d1:08: 90:da:d1:74:ff:c5:b6:cc:63:4c:3a:35:f6:29:bf: e7:93:13:ff:a1:cc:75:16:a5:ca:d5:64:1b:a3:c7: d4:20:57:89:74:85:68:4d:65:a0:e6:79:45:57:50: 3b:4f:ea:08:6c:5c:fe:c6:1e:9e:fa:18:9d:4c:ac: 6e:3a:c9:14:ec:80:a4:4f:7d:23:64:5c:22:59:db: a6:56:2f:c8:09:94:37:34:20:7f:e4:2e:57:56:7b: ef:f0:a3:5c:a9:24:f5:40:ff:f8:d0:3e:e4:75:6a: 59:5b:57:11:b6:6f:f7:df:5d:2e:72:50:e7:f9:ad: 30:7c:c8:92:32:b4:9a:18:6c:31:5f:82:20:a0:65: bf:3b:54:c5:21:bc:c1:3d:9a:97:fe:ef:ac:09:d9: b1:75:7e:50:d8:84:8b:9c:d0:2e:65:f3:6d:9b:7a: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CE:0E:FD:8D:12:46:F1:B6:97:B2:39:96:58:E7:24:80:DE:1A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9c:e3:19:ee:87:53:05:3b:b0:7a:65:65:cd:16:be:91:e3: 53:59:11:f2:73:7d:63:ac:5a:72:68:68:39:d5:df:56:8a:e5: 04:a6:dd:cc:5f:32:01:f6:ae:84:18:05:57:4b:d3:cc:77:a7: ff:cb:ae:0e:14:90:95:bf:4f:f0:60:3b:79:5c:57:f2:5b:06: 5f:45:8a:28:9a:08:25:ed:bf:86:dd:eb:25:32:6e:1f:ca:c3: 7c:0a:e0:d5:da:97:24:76:dd:55:8d:78:46:a9:ef:24:0a:2c: e1:90:55:af:65:24:3a:89:a0:f4:59:bb:f9:f3:0d:06:ca:a4: 4d:89:b8:60:15:1f:d4:d0:5d:be:b5:c1:97:4f:59:a8:b2:1a: 59:8c:f2:3a:a3:a2:e4:ad:18:28:ee:c2:a0:10:cb:bd:bb:8c: ff:2d:b0:7c:22:89:1b:2d:95:b4:ea:bb:5e:2a:4a:ab:a1:76: 22:c5:bf:3a:b8:aa:b1:58:10:97:82:15:7b:ef:47:1e:12:f3: a8:91:d7:bc:fc:a4:82:ea:26:43:23:b8:62:6f:f6:b4:c2:12: d7:0a:e6:17:7a:22:16:50:03:e1:38:92:34:83:11:cf:d2:a8: 80:87:4a:e7:21:c3:07:07:70:56:31:c5:5d:e1:80:b6:6c:7e: 49:2d:f4:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZQUAH+RsstxliGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE1NDg0NloXDTI1MDUxMjE0NDg0NlowLzEtMCsGA1UEAxMk NTU5NTc5YjItMTNhMy00YTdiLTkzMjAtOWY2NWQ5Zjk0ODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YrHL9dwtFQmpja2CuGs4GmsLjJtvijIPp3G 6CAy3E0D3fnuuCZQHJVWFTvUhmZiGWr62cvUE/vEKwW+TNFrY+228jrf3rV8O2Ol nHmq3uYQEhKu5Gtj0QiQ2tF0/8W2zGNMOjX2Kb/nkxP/ocx1FqXK1WQbo8fUIFeJ dIVoTWWg5nlFV1A7T+oIbFz+xh6e+hidTKxuOskU7ICkT30jZFwiWdumVi/ICZQ3 NCB/5C5XVnvv8KNcqST1QP/40D7kdWpZW1cRtm/3310uclDn+a0wfMiSMrSaGGwx X4IgoGW/O1TFIbzBPZqX/u+sCdmxdX5Q2ISLnNAuZfNtm3otMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTODv2NEkbxtpeyOZZY5ySA3hrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTM4MDY3NjAtN2Q3OS0z ZDAxLTg1OWItZmY3ZDhmYWEzNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOc4xnuh1MFO7B6ZWXNFr6R41NZEfJzfWOsWnJoaDnV31aK5QSm3cxf MgH2roQYBVdL08x3p//Lrg4UkJW/T/BgO3lcV/JbBl9FiiiaCCXtv4bd6yUybh/K w3wK4NXalyR23VWNeEap7yQKLOGQVa9lJDqJoPRZu/nzDQbKpE2JuGAVH9TQXb61 wZdPWaiyGlmM8jqjouStGCjuwqAQy727jP8tsHwiiRstlbTqu14qSquhdiLFvzq4 qrFYEJeCFXvvRx4S86iR17z8pILqJkMjuGJv9rTCEtcK5hd6IhZQA+E4kjSDEc/S qICHSuchwwcHcFYxxV3hgLZsfkkt9DI= -----END CERTIFICATE-----Generated at Sat Apr 12 00:20:54 2025 by rpki-client