$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa File: 74c04573-b423-34d6-a92c-a33a7e85298a.roa (raw, json) Hash identifier: fGzrHnTbD9dkqUa4n8nYqLT5Us8hjTvx66WgH3gXzcg= Subject key identifier: 8B:8E:04:00:68:58:7F:AB:AB:61:E2:FE:1C:28:3D:2C:65:85:DF:C3 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F7C13D08ECCF24EFC1CEF040 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 203 IP address blocks: 20.139.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3d:08:ec:cf:24:ef:c1:ce:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=fac05742-fb8f-47f6-8db8-3ed050b19972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0d:d1:c1:f6:1f:c5:ae:ee:32:e8:c6:5a:68: 76:40:fb:0d:d0:9d:c1:e9:db:20:e3:e0:e6:7d:4b: 70:a4:22:26:77:22:29:e9:52:f7:b4:af:88:f7:b1: 4d:93:ae:12:91:26:48:08:5c:16:d1:ad:81:56:6b: 12:09:cf:1e:b9:49:76:94:2e:28:ea:89:34:b9:99: 4b:92:23:94:cd:71:29:f6:ba:2b:ff:f0:1e:d4:96: 76:bc:d6:94:58:8b:14:f2:46:90:a5:77:c5:10:d7: 1c:33:75:5a:87:ad:24:9c:4b:ad:cb:5d:7b:c7:2b: 32:95:9f:91:a7:4b:57:93:31:66:29:ec:78:28:db: 5a:49:37:1b:54:dc:df:e3:e9:dd:e2:13:b2:bd:37: bf:d8:1d:be:9f:b6:95:7e:f6:f0:60:aa:ec:d4:ca: cd:db:3b:f0:61:79:53:d6:9d:7f:32:dd:b6:db:7c: 15:ae:74:17:1f:e4:ec:38:6e:0b:66:70:82:ba:04: e4:84:d6:12:6b:e1:ff:d1:7a:3b:a1:c0:31:2a:19: 47:a1:a1:03:6f:76:9e:1f:58:93:f0:a3:b1:6f:28: d3:e3:34:4b:e1:b6:6b:d9:f9:28:af:51:89:ea:cd: 58:07:47:c8:d4:d2:ee:d6:96:2c:74:b5:f7:6e:24: ae:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8E:04:00:68:58:7F:AB:AB:61:E2:FE:1C:28:3D:2C:65:85:DF:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:21:a7:62:84:cc:5f:f8:fe:ee:d2:ab:23:bd:36:e7:04:cb: 1f:7a:30:a8:db:7e:96:4c:9c:b6:4f:96:bd:0b:90:9e:ca:70: 5d:00:e4:2e:b5:98:d0:05:20:4a:04:bb:9c:68:6f:bb:48:df: 10:88:7a:8b:ac:7e:89:61:9a:fa:e2:01:bf:d8:95:35:4a:ba: 72:30:ac:b6:d2:22:7b:0f:e2:b1:0e:ff:b7:97:63:c6:af:c4: c9:76:e6:d2:0f:81:ab:ac:81:0f:a2:76:78:f9:89:32:ba:90: 6e:80:a0:e5:b9:d8:e7:2a:4a:91:05:be:47:f1:00:be:d2:80: 2b:5e:6d:23:d6:39:8e:71:f9:d1:65:ea:2d:86:9e:d7:c1:fb: 9b:34:9c:a9:f6:ab:43:b8:55:c2:86:4a:36:58:62:17:ee:19: 46:25:b3:93:38:c3:12:9e:aa:2e:f9:cc:e1:4f:f3:e3:c3:df: 32:be:bf:23:0a:36:45:8b:d2:d5:07:a4:80:da:0e:92:b7:5d: 07:bb:c7:1d:0b:da:1e:8e:6b:13:07:51:80:16:a6:dc:e4:f9: e6:c6:f8:54:82:f8:83:a8:34:09:b2:01:84:d0:b9:4c:63:6a: 21:73:12:31:43:d5:18:6d:73:07:23:91:2a:10:ce:1c:cf:c3: 2f:b7:bd:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wT0I7M8k78HO8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk ZmFjMDU3NDItZmI4Zi00N2Y2LThkYjgtM2VkMDUwYjE5OTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg3RwfYfxa7uMujGWmh2QPsN0J3B6dsg4+Dm fUtwpCImdyIp6VL3tK+I97FNk64SkSZICFwW0a2BVmsSCc8euUl2lC4o6ok0uZlL kiOUzXEp9ror//Ae1JZ2vNaUWIsU8kaQpXfFENccM3Vah60knEuty117xysylZ+R p0tXkzFmKex4KNtaSTcbVNzf4+nd4hOyvTe/2B2+n7aVfvbwYKrs1MrN2zvwYXlT 1p1/Mt2223wVrnQXH+TsOG4LZnCCugTkhNYSa+H/0Xo7ocAxKhlHoaEDb3aeH1iT 8KOxbyjT4zRL4bZr2fkor1GJ6s1YB0fI1NLu1pYsdLX3biSuoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuOBABoWH+rq2Hi/hwoPSxlhd/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzRjMDQ1NzMtYjQyMy0z NGQ2LWE5MmMtYTMzYTdlODUyOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEhp2KEzF/4/u7SqyO9NucEyx96MKjbfpZMnLZPlr0LkJ7KcF0A5C61 mNAFIEoEu5xob7tI3xCIeousfolhmvriAb/YlTVKunIwrLbSInsP4rEO/7eXY8av xMl25tIPgausgQ+idnj5iTK6kG6AoOW52OcqSpEFvkfxAL7SgCtebSPWOY5x+dFl 6i2GntfB+5s0nKn2q0O4VcKGSjZYYhfuGUYls5M4wxKeqi75zOFP8+PD3zK+vyMK NkWL0tUHpIDaDpK3XQe7xx0L2h6OaxMHUYAWptzk+ebG+FSC+IOoNAmyAYTQuUxj aiFzEjFD1RhtcwcjkSoQzhzPwy+3vQs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:11 2025 by rpki-client