$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e4ddcd8f-6399-36d3-8ec6-4238b7737ef4.roa File: e4ddcd8f-6399-36d3-8ec6-4238b7737ef4.roa (raw, json) Hash identifier: BBvUZaIIfVsDFP9zRisYWm7Arc78x10mnrWYxZ7L7Yg= Subject key identifier: 87:FB:F2:4D:EB:9B:11:18:9B:A8:FB:24:2D:B3:86:F0:8C:11:93:57 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F4F6A4CA4B05105EA3404740 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e4ddcd8f-6399-36d3-8ec6-4238b7737ef4.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 3360 IP address blocks: 20.134.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a4:ca:4b:05:10:5e:a3:40:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d2fd30b8-f89d-40cc-ae82-e5d705a36611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fa:85:54:2d:b5:f5:12:e0:43:70:91:64:c4: 90:86:f6:e7:19:70:83:25:e0:02:03:2e:1c:05:54: a6:4f:84:0a:e8:08:a7:3e:6e:16:b5:85:d1:87:2a: 48:25:29:a8:17:26:c4:bc:c8:15:6d:18:59:fc:dd: 92:39:15:40:ef:73:8d:fa:94:26:e1:1c:ab:27:7f: 3f:b3:cb:b1:4a:49:70:90:46:a5:91:87:93:87:26: b9:50:c4:6c:8c:10:c5:bd:eb:4f:69:fc:cc:00:0d: b6:8f:76:bd:19:82:de:b1:09:32:a1:37:65:d9:08: ab:86:91:8b:82:98:bf:c5:c6:0b:0b:70:83:33:36: 10:0a:d8:21:1d:b9:88:d0:bd:10:12:5e:28:44:a6: ec:6f:70:96:38:98:e5:e3:b9:16:4c:77:81:14:ff: ed:6c:14:3d:ea:2d:ec:c4:b1:30:cb:7e:f6:e6:ca: 32:ee:4b:e9:35:fe:10:b4:eb:d6:eb:94:b5:fa:a0: 13:b2:89:b3:e1:7f:ee:3e:3f:4f:bd:3d:92:4d:4b: 7f:db:b8:8b:9c:8f:b9:70:e3:2b:ae:9e:3e:01:14: 63:03:97:24:ad:c2:8f:c0:1d:30:de:03:c7:3c:84: 91:dd:d3:93:cc:c4:44:d8:ec:7f:4b:27:18:e1:ca: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FB:F2:4D:EB:9B:11:18:9B:A8:FB:24:2D:B3:86:F0:8C:11:93:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e4ddcd8f-6399-36d3-8ec6-4238b7737ef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e6:a3:40:9e:1b:ab:f2:e0:5a:15:a0:f2:45:07:69:3c:85: de:43:42:64:83:28:88:fa:7b:07:d7:fe:56:29:70:4a:65:a9: 02:2e:f8:87:84:4a:69:e7:88:dc:72:55:b7:f5:8f:35:97:7c: a8:c2:5a:47:7e:49:bc:92:f1:fc:2d:24:f5:59:cc:93:dc:a6: e2:ef:e9:46:19:08:f2:52:63:05:81:05:49:f5:22:9e:a7:0a: f3:28:93:5c:8d:a6:de:da:2e:22:ee:e4:5e:8c:67:47:d0:45: 4f:28:eb:7c:9e:4a:a7:5b:8b:e2:4b:4f:0b:40:9e:b3:61:8c: ca:f5:30:fa:bb:c8:32:76:18:50:d2:36:77:b8:96:d3:3c:c0: a4:b1:59:87:15:c4:8d:55:c0:e0:31:96:d1:d8:82:aa:99:ee: aa:77:54:62:79:c6:61:b1:a1:e9:2d:bf:3d:66:9f:de:eb:7a: a0:3a:38:af:00:70:a2:14:35:99:78:a4:1c:51:24:cd:91:ed: b9:cf:88:87:44:b7:d5:2d:d8:b4:3f:e0:5e:9d:fa:04:14:45: 49:cf:d7:3b:37:06:a9:c4:cc:52:74:a7:fd:10:8c:f1:e8:d8: 68:5f:ed:ee:51:f1:52:74:e7:15:f0:0a:e4:81:46:40:ed:bf: ef:a6:dc:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qTKSwUQXqNAR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDJmZDMwYjgtZjg5ZC00MGNjLWFlODItZTVkNzA1YTM2NjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivqFVC219RLgQ3CRZMSQhvbnGXCDJeACAy4c BVSmT4QK6AinPm4WtYXRhypIJSmoFybEvMgVbRhZ/N2SORVA73ON+pQm4RyrJ38/ s8uxSklwkEalkYeThya5UMRsjBDFvetPafzMAA22j3a9GYLesQkyoTdl2QirhpGL gpi/xcYLC3CDMzYQCtghHbmI0L0QEl4oRKbsb3CWOJjl47kWTHeBFP/tbBQ96i3s xLEwy3725soy7kvpNf4QtOvW65S1+qATsomz4X/uPj9PvT2STUt/27iLnI+5cOMr rp4+ARRjA5ckrcKPwB0w3gPHPISR3dOTzMRE2Ox/SycY4coZ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf78k3rmxEYm6j7JC2zhvCMEZNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTRkZGNkOGYtNjM5OS0z NmQzLThlYzYtNDIzOGI3NzM3ZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbmo0CeG6vy4FoVoPJFB2k8hd5DQmSDKIj6ewfX/lYpcEplqQIu+IeE SmnniNxyVbf1jzWXfKjCWkd+SbyS8fwtJPVZzJPcpuLv6UYZCPJSYwWBBUn1Ip6n CvMok1yNpt7aLiLu5F6MZ0fQRU8o63yeSqdbi+JLTwtAnrNhjMr1MPq7yDJ2GFDS Nne4ltM8wKSxWYcVxI1VwOAxltHYgqqZ7qp3VGJ5xmGxoektvz1mn97reqA6OK8A cKIUNZl4pBxRJM2R7bnPiIdEt9Ut2LQ/4F6d+gQURUnP1zs3BqnEzFJ0p/0QjPHo 2Ghf7e5R8VJ05xXwCuSBRkDtv++m3Hc= -----END CERTIFICATE-----Generated at Fri Mar 14 09:40:35 2025 by rpki-client