$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa File: 40d296d1-278c-3f5b-b993-eb056d922ec1.roa (raw, json) Hash identifier: H7oreqc5Ait47QVAsztoAw3k81B18pm/NhwiF9uxtgM= Subject key identifier: 48:24:6F:A9:49:5E:54:4D:A3:EA:35:A0:8A:1F:66:EB:DA:5A:66:A8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848D94726E2CAA4FCD3C09E9B40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa Signing time: Tue 11 Feb 2025 16:00:40 +0000 ROA not before: Tue 11 Feb 2025 16:00:40 +0000 ROA not after: Mon 12 May 2025 15:00:40 +0000 asID: 202 IP address blocks: 20.149.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:47:26:e2:ca:a4:fc:d3:c0:9e:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 11 16:00:40 2025 GMT Not After : May 12 15:00:40 2025 GMT Subject: CN=8e3e268a-7ab4-4d84-bc77-c19b8974ee04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1e:04:b2:63:19:ed:7c:21:7b:ac:e6:7f:1d: 92:94:d6:93:bc:6f:e2:ce:91:50:d7:87:25:42:b0: 89:b4:39:57:34:1b:08:07:87:ee:3d:13:3e:1d:29: 2f:e6:ec:71:7e:ed:9e:4d:b6:d5:20:76:d9:35:32: 9f:66:9b:e4:b5:00:ca:23:34:46:a7:3a:5c:90:6f: e9:1f:ba:38:68:46:40:c6:be:e2:05:e3:ac:01:fe: 03:f1:ef:3b:d2:75:57:a6:62:dd:ae:fb:87:7c:0f: 2a:8b:ec:6f:88:a1:58:3a:c3:f1:50:82:d3:51:63: 0f:b8:35:e6:3f:6e:bc:3a:ee:10:b2:4a:0d:c5:8c: 4f:ef:e3:8a:49:1e:1e:6f:ea:82:3c:18:a6:37:17: f5:fd:00:b0:df:8d:20:c3:2a:50:20:ac:99:21:af: 13:70:39:89:86:3d:5e:be:17:76:33:4f:2f:1b:e5: d0:43:47:5b:cc:ce:c4:01:9c:93:97:1e:9e:1b:a6: 89:ee:82:ff:06:71:cb:34:37:40:3a:ad:cf:c2:12: fe:a3:cb:63:e0:4f:a8:4b:24:42:30:73:a4:c7:45: 40:79:af:25:dc:79:10:54:44:e9:7e:43:08:4c:1e: f6:76:7f:a3:16:bd:94:bc:84:ff:c0:bb:53:57:1b: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:24:6F:A9:49:5E:54:4D:A3:EA:35:A0:8A:1F:66:EB:DA:5A:66:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:44:6e:06:8c:77:70:2f:cc:76:95:fb:51:0b:90:c5:e8:ec: 7d:c2:45:31:91:8d:26:b7:04:97:34:bd:e0:1a:98:65:e2:f9: 31:d5:b4:e0:f6:2b:fb:30:46:f5:fd:69:4c:cd:f3:d6:f6:60: d9:70:24:04:b9:da:d2:f0:0a:fd:54:46:cd:52:b5:32:9e:f4: 41:92:83:87:c9:dc:cc:68:26:ad:73:77:31:0e:fe:0c:44:08: 71:1e:85:91:88:28:9f:06:53:d8:16:31:88:ae:55:fa:a3:b3: 38:82:0c:ad:37:87:90:e1:e5:1c:62:4a:20:1e:37:90:48:cd: f6:40:ba:5f:2a:e1:a3:d5:6f:0a:c0:23:f1:e5:ef:df:09:63: 64:4e:d5:6d:15:e5:33:33:dd:da:57:bb:73:e5:7b:57:46:18: fe:08:84:f7:76:1b:84:12:4a:9f:ef:50:2b:cf:43:1f:2c:d6: 83:11:a0:6b:c7:01:3c:c8:76:d8:d9:7a:2e:51:6b:0e:69:bb: 62:7b:ca:c3:88:71:24:d0:9e:0e:18:16:ae:c7:0c:54:f1:6d: 4f:ea:15:db:ac:32:91:df:76:be:a4:85:f1:54:e3:4d:46:77: cb:25:b6:a3:b5:1b:9e:d5:c3:6b:18:a2:40:8c:9f:4e:15:49: aa:a6:21:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZRybiyqT808Cem0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxMTE2MDA0MFoXDTI1MDUxMjE1MDA0MFowLzEtMCsGA1UEAxMk OGUzZTI2OGEtN2FiNC00ZDg0LWJjNzctYzE5Yjg5NzRlZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR4EsmMZ7Xwhe6zmfx2SlNaTvG/izpFQ14cl QrCJtDlXNBsIB4fuPRM+HSkv5uxxfu2eTbbVIHbZNTKfZpvktQDKIzRGpzpckG/p H7o4aEZAxr7iBeOsAf4D8e870nVXpmLdrvuHfA8qi+xviKFYOsPxUILTUWMPuDXm P268Ou4QskoNxYxP7+OKSR4eb+qCPBimNxf1/QCw340gwypQIKyZIa8TcDmJhj1e vhd2M08vG+XQQ0dbzM7EAZyTlx6eG6aJ7oL/BnHLNDdAOq3PwhL+o8tj4E+oSyRC MHOkx0VAea8l3HkQVETpfkMITB72dn+jFr2UvIT/wLtTVxtpHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgkb6lJXlRNo+o1oIofZuvaWmaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDBkMjk2ZDEtMjc4Yy0z ZjViLWI5OTMtZWIwNTZkOTIyZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1EbgaMd3AvzHaV+1ELkMXo7H3CRTGRjSa3BJc0veAamGXi+THVtOD2 K/swRvX9aUzN89b2YNlwJAS52tLwCv1URs1StTKe9EGSg4fJ3MxoJq1zdzEO/gxE CHEehZGIKJ8GU9gWMYiuVfqjsziCDK03h5Dh5RxiSiAeN5BIzfZAul8q4aPVbwrA I/Hl798JY2RO1W0V5TMz3dpXu3Ple1dGGP4IhPd2G4QSSp/vUCvPQx8s1oMRoGvH ATzIdtjZei5Raw5pu2J7ysOIcSTQng4YFq7HDFTxbU/qFdusMpHfdr6khfFU401G d8sltqO1G57Vw2sYokCMn04VSaqmIT0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:17 2025 by rpki-client