$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa File: f8da539f-a988-3038-8316-0c63126db070.roa (raw, json) Hash identifier: eD64NVP6dIt5EGSlsxlFgkcd0fxk6F8kvLGLFOftDKs= Subject key identifier: 01:B8:D6:74:DF:9A:14:58:01:92:44:FC:E4:55:48:76:A5:B4:F9:40 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D94504EA8464043E546C5480 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa Signing time: Tue 11 Feb 2025 15:56:22 +0000 ROA not before: Tue 11 Feb 2025 15:56:22 +0000 ROA not after: Mon 12 May 2025 14:56:22 +0000 asID: 203 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:45:04:ea:84:64:04:3e:54:6c:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 15:56:22 2025 GMT Not After : May 12 14:56:22 2025 GMT Subject: CN=fbac5104-33d7-49d3-b8d6-2eaf4cf69f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:b8:b7:35:c0:36:fa:f2:25:a0:6e:d8:93: 1b:dc:61:57:2e:45:a8:31:1b:f7:14:8e:a8:6e:e7: 0a:46:19:60:cd:ce:45:1c:6e:d3:b2:b7:91:ca:a8: e4:62:63:ae:05:30:f4:52:41:c4:b9:32:17:72:4e: cd:d8:8f:a6:c9:68:f3:7f:2e:59:66:51:cb:b7:32: 73:1c:d8:56:62:d6:3a:01:7a:75:1d:d6:49:20:70: 59:83:62:de:6c:f2:d1:f8:4f:b7:0f:51:6b:6e:34: 86:f6:54:99:ab:7c:95:b5:9e:cb:d6:36:5c:38:48: 35:76:67:1e:a1:e0:91:85:05:79:56:11:71:15:74: 7e:e7:2a:a6:0c:1c:dc:5e:43:0b:10:27:00:7f:c6: a1:78:f8:9a:6f:46:63:e0:7b:67:40:29:6d:01:29: 12:54:7a:01:17:7b:c1:af:53:11:51:4c:bf:98:fe: 65:d8:1e:6e:fa:e3:66:f5:b7:6a:6f:c2:94:4d:d5: 90:70:ce:6d:fe:78:68:be:ad:1b:72:4e:3a:50:04: 22:52:24:e0:08:3c:a1:31:90:6b:87:6e:cf:06:26: 7c:cc:d9:a0:f8:34:e5:d0:ac:52:a2:78:48:91:0f: 42:57:fa:3b:40:fe:77:78:c5:f7:78:5f:10:1a:c4: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B8:D6:74:DF:9A:14:58:01:92:44:FC:E4:55:48:76:A5:B4:F9:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ad:64:67:f1:6b:e3:31:af:4c:20:a9:a4:9f:0d:cd:62:df: 8a:8f:40:b5:12:65:92:6d:c6:fc:61:ba:95:98:a9:dc:c1:0a: fe:6d:9d:a7:99:ed:84:43:ef:f0:bd:a0:eb:de:96:3c:1d:4f: 30:68:35:14:8e:9e:c0:ba:33:48:10:43:a4:93:8b:6b:53:31: 3e:bf:07:65:e0:69:61:bf:a7:34:e6:b0:ac:3b:29:b2:c1:f4: 72:e8:f9:14:e5:7f:bd:b3:17:4c:af:12:72:bf:16:bf:a5:15: 27:b2:dc:76:f0:e9:91:e4:70:73:f7:17:f9:01:26:c2:00:09: 61:7c:86:ed:24:49:c4:7a:39:27:a7:1b:54:10:2c:79:c9:15: 0e:ff:04:a6:e3:6b:c2:4a:b3:74:d7:22:9e:5c:01:52:65:fd: f5:5b:d8:9e:71:02:f6:50:3a:35:1b:51:66:33:93:88:da:b3: 03:48:9e:29:33:e8:2b:d8:2a:be:f1:45:de:81:2f:f2:57:be: 0f:e3:b4:fa:8f:0a:65:a7:3e:96:a6:75:19:f2:98:ef:ba:78: ec:93:78:8b:09:5f:79:c7:ea:55:f1:12:f8:b8:10:b2:45:f6: 3e:b8:c5:c6:8b:6c:3a:b5:8f:72:81:53:ac:cc:3b:9e:40:d2: bf:9e:68:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZRQTqhGQEPlRsVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE1NTYyMloXDTI1MDUxMjE0NTYyMlowLzEtMCsGA1UEAxMk ZmJhYzUxMDQtMzNkNy00OWQzLWI4ZDYtMmVhZjRjZjY5ZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7e4tzXANvryJaBu2JMb3GFXLkWoMRv3FI6o bucKRhlgzc5FHG7TsreRyqjkYmOuBTD0UkHEuTIXck7N2I+myWjzfy5ZZlHLtzJz HNhWYtY6AXp1HdZJIHBZg2LebPLR+E+3D1FrbjSG9lSZq3yVtZ7L1jZcOEg1dmce oeCRhQV5VhFxFXR+5yqmDBzcXkMLECcAf8ahePiab0Zj4HtnQCltASkSVHoBF3vB r1MRUUy/mP5l2B5u+uNm9bdqb8KUTdWQcM5t/nhovq0bck46UAQiUiTgCDyhMZBr h27PBiZ8zNmg+DTl0KxSonhIkQ9CV/o7QP53eMX3eF8QGsSowwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG41nTfmhRYAZJE/ORVSHaltPlAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjhkYTUzOWYtYTk4OC0z MDM4LTgzMTYtMGM2MzEyNmRiMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqtZGfxa+Mxr0wgqaSfDc1i34qPQLUSZZJtxvxhupWYqdzBCv5tnaeZ 7YRD7/C9oOveljwdTzBoNRSOnsC6M0gQQ6STi2tTMT6/B2XgaWG/pzTmsKw7KbLB 9HLo+RTlf72zF0yvEnK/Fr+lFSey3Hbw6ZHkcHP3F/kBJsIACWF8hu0kScR6OSen G1QQLHnJFQ7/BKbja8JKs3TXIp5cAVJl/fVb2J5xAvZQOjUbUWYzk4jaswNInikz 6CvYKr7xRd6BL/JXvg/jtPqPCmWnPpamdRnymO+6eOyTeIsJX3nH6lXxEvi4ELJF 9j64xcaLbDq1j3KBU6zMO55A0r+eaME= -----END CERTIFICATE-----Generated at Fri Apr 11 23:14:16 2025 by rpki-client