$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6c0c944-d7b9-3e98-8022-042a749262e1.roa File: e6c0c944-d7b9-3e98-8022-042a749262e1.roa (raw, json) Hash identifier: PVZ2fOkrUg2rRDJW7+ANkVGVmqgZyuAybEcnFXu1MqQ= Subject key identifier: C8:79:D5:76:AF:33:B6:C9:A4:54:C5:C9:1F:D6:72:6E:97:40:1B:79 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848960B4F729ECB7AE5BEF52800 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6c0c944-d7b9-3e98-8022-042a749262e1.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 202 IP address blocks: 20.137.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:4f:72:9e:cb:7a:e5:be:f5:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=82bf5059-5204-4976-bf0a-161338ca93d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:fb:5e:37:c9:1b:f6:fd:48:28:af:fc:cb: 68:10:98:0d:30:e0:81:5d:ea:0a:2c:db:e8:13:df: ce:4c:ae:68:f9:42:bf:ee:48:8f:49:b8:ef:14:42: a4:10:c7:37:b9:09:15:cf:ce:9b:68:8d:93:f4:c2: 77:23:e8:5d:65:aa:91:79:6e:a8:f4:8d:1a:3c:b8: 1d:59:c2:29:cc:b6:30:be:81:6f:de:0e:1c:00:cc: e2:db:a0:21:8f:66:3e:cc:c9:f3:fe:95:77:68:e2: 48:5f:ca:9b:61:64:7c:fa:5a:51:c1:4e:7d:73:51: 2a:98:0b:bd:75:0c:2d:1e:c0:a9:2a:a7:f6:c9:e9: 69:b2:84:c0:db:57:6b:80:07:8f:1d:3d:26:bb:20: 70:94:d2:fe:a1:b7:38:38:6a:3a:1b:82:67:b1:be: 92:4d:06:f6:b0:67:a1:1a:79:f9:8e:92:c2:25:b2: 10:a4:5d:fa:82:17:8b:bf:c1:57:3f:26:67:b7:e8: 24:54:25:07:84:8c:7b:3e:23:3d:f3:ff:14:d6:26: 58:de:0d:b1:0d:d6:f9:41:da:dd:78:14:e7:b4:8f: e7:34:e4:93:2b:30:97:e2:b3:01:a9:14:35:a8:46: 3d:40:4c:51:a1:99:88:cc:b6:7d:a6:59:f0:19:f4: fb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:79:D5:76:AF:33:B6:C9:A4:54:C5:C9:1F:D6:72:6E:97:40:1B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6c0c944-d7b9-3e98-8022-042a749262e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:6b:1e:4b:8d:e0:03:a5:67:2d:7b:f3:3a:67:ff:ac:7f:f3: 3a:90:41:c6:74:89:fe:0e:c5:77:48:c8:cb:28:a0:2e:3b:50: 8a:6d:86:16:d0:69:59:77:63:a6:ce:a8:60:05:4a:60:4e:1f: 8d:7f:6b:34:1a:fa:c1:4b:c1:de:f8:ae:b4:c1:ee:88:5c:38: ea:8f:77:1a:1d:dc:9b:cb:ba:9e:52:95:f6:37:2e:ad:52:b3: 0b:57:a1:03:0b:14:10:00:5b:63:01:39:48:e5:32:4a:36:f6: ec:2b:70:13:e0:f7:fd:6a:54:4d:e8:fd:c9:a5:72:8c:36:73: 51:85:94:e9:e4:b0:78:aa:a1:88:b3:73:65:9e:cf:d3:7e:4e: 45:e7:92:4c:8b:cf:6e:ed:24:70:69:bc:97:1c:d0:0f:30:f6: 3a:4b:3a:95:4b:ac:ee:42:a8:66:09:d9:48:35:df:08:5b:79: 3c:e3:00:ce:76:aa:21:10:08:a7:ee:9f:4d:89:60:90:38:0a: 7a:94:70:26:6f:2e:52:0f:75:3e:82:ef:f8:5a:2c:79:6b:ae: d5:4c:c4:a3:97:f1:40:9d:dd:0f:ad:3b:a8:10:d7:9a:f5:5a: 91:b2:5c:c9:8c:01:d7:8f:22:9b:44:fc:c5:dc:a3:f4:29:60: dd:9e:55:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC09ynst65b71KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk ODJiZjUwNTktNTIwNC00OTc2LWJmMGEtMTYxMzM4Y2E5M2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugj7XjfJG/b9SCiv/MtoEJgNMOCBXeoKLNvo E9/OTK5o+UK/7kiPSbjvFEKkEMc3uQkVz86baI2T9MJ3I+hdZaqReW6o9I0aPLgd WcIpzLYwvoFv3g4cAMzi26Ahj2Y+zMnz/pV3aOJIX8qbYWR8+lpRwU59c1EqmAu9 dQwtHsCpKqf2yelpsoTA21drgAePHT0muyBwlNL+obc4OGo6G4Jnsb6STQb2sGeh Gnn5jpLCJbIQpF36gheLv8FXPyZnt+gkVCUHhIx7PiM98/8U1iZY3g2xDdb5Qdrd eBTntI/nNOSTKzCX4rMBqRQ1qEY9QExRoZmIzLZ9plnwGfT7jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMh51XavM7bJpFTFyR/Wcm6XQBt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTZjMGM5NDQtZDdiOS0z ZTk4LTgwMjItMDQyYTc0OTI2MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFInwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlrHkuN4AOlZy178zpn/6x/8zqQQcZ0if4OxXdIyMsooC47UIpthhbQ aVl3Y6bOqGAFSmBOH41/azQa+sFLwd74rrTB7ohcOOqPdxod3JvLup5SlfY3Lq1S swtXoQMLFBAAW2MBOUjlMko29uwrcBPg9/1qVE3o/cmlcow2c1GFlOnksHiqoYiz c2Wez9N+TkXnkkyLz27tJHBpvJcc0A8w9jpLOpVLrO5CqGYJ2Ug13whbeTzjAM52 qiEQCKfun02JYJA4CnqUcCZvLlIPdT6C7/haLHlrrtVMxKOX8UCd3Q+tO6gQ15r1 WpGyXMmMAdePIptE/MXco/QpYN2eVbw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:17 2025 by rpki-client