$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa File: 9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa (raw, json) Hash identifier: jDQ24Dm/HpTFD98MpHGgLoqo49Qipg+7CQXUuKD5dU0= Subject key identifier: 92:1C:D5:5A:B1:DA:02:09:70:42:7F:5F:60:E4:35:69:42:FB:49:C7 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858492CAE94A316FFBBAD78FEE000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 3356 IP address blocks: 20.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:94:a3:16:ff:bb:ad:78:fe:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=8007a02c-6eb5-49d2-b550-cea3f513b522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:99:13:d3:48:ff:4e:d9:d2:c2:87:4b:9b:98: 80:85:19:13:19:4e:5e:ea:c6:31:1d:8d:7f:94:39: 84:39:c3:46:9b:0a:77:6c:ec:39:87:27:fb:49:3b: 60:55:4b:c8:28:fe:f9:48:e0:5b:89:0f:fe:3b:b4: 18:87:c1:63:72:7d:19:f8:a3:67:f0:11:03:15:94: 0a:0a:f8:a8:5a:e7:ca:e3:b2:c2:7d:a0:32:ec:e2: 3d:9f:f4:87:8b:f6:f0:4f:b5:d9:1c:c1:99:c5:49: 27:fa:a3:5d:6e:37:de:ac:6b:5c:62:2f:65:4c:6a: de:ef:df:ef:23:85:4d:21:68:6b:1c:e0:67:c0:bd: 55:11:a0:c4:54:b3:7b:b9:9e:15:11:d2:64:be:6c: 18:0d:48:34:3a:71:4d:74:15:41:ad:59:3d:da:8d: 86:0f:58:e8:ef:0a:be:57:7a:93:67:b0:c7:0b:f4: 8a:e1:b8:8c:09:54:b1:40:b9:b2:18:46:b8:19:22: 57:4b:1c:41:16:6c:ff:b0:94:4f:f2:b7:1e:5b:46: f2:38:54:a3:37:7a:c9:3c:3a:b9:cf:cb:31:3f:8a: fc:02:e5:28:4f:6e:0c:5e:cb:f4:55:eb:f5:67:1c: f0:27:24:1d:40:5c:90:13:60:7c:02:0d:e6:b6:8c: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1C:D5:5A:B1:DA:02:09:70:42:7F:5F:60:E4:35:69:42:FB:49:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:33:5b:c3:86:c2:f7:f0:83:29:ad:64:b2:c0:85:0e:e4:89: 0d:b3:fe:79:1c:c9:1e:bc:c2:26:e5:ac:53:82:a0:16:78:56: 09:e2:85:fb:88:c9:b9:b7:0b:de:1d:c8:5c:66:fa:52:b9:08: 84:f6:5f:c8:aa:13:9d:21:46:d2:03:13:06:81:c6:71:2e:dc: b5:d5:67:ab:17:62:56:81:b7:db:fd:dc:21:7f:c2:cc:79:3b: ec:81:c3:8f:34:b1:99:4d:0a:17:54:53:61:32:64:00:d9:9d: cc:f2:bb:ff:cf:c7:04:41:bc:bf:9b:20:2a:2d:53:50:c2:52: 14:00:7e:87:db:7c:55:c3:85:3b:1a:c4:00:45:d1:43:f9:7e: 5a:9d:bb:e9:8c:94:2c:8a:68:cf:a4:0c:52:54:f9:a5:62:b0: ff:c4:fe:15:c0:e4:c9:49:51:d9:f2:af:ee:01:70:01:f2:2b: 06:79:89:3f:d0:e5:b3:11:1c:dc:20:5d:27:9e:10:2b:ce:da: b1:28:10:a7:1e:d8:59:00:40:94:d2:43:51:6a:1d:f6:9b:46: e3:c8:6d:99:8e:2e:ac:6a:55:75:eb:55:3c:66:de:c8:0d:8b: e9:95:de:74:0b:61:c0:0d:e0:13:4e:a1:29:ea:54:d0:78:0d: 87:38:4a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpSjFv+7rXj+4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODAwN2EwMmMtNmViNS00OWQyLWI1NTAtY2VhM2Y1MTNiNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpkT00j/TtnSwodLm5iAhRkTGU5e6sYxHY1/ lDmEOcNGmwp3bOw5hyf7STtgVUvIKP75SOBbiQ/+O7QYh8Fjcn0Z+KNn8BEDFZQK CvioWufK47LCfaAy7OI9n/SHi/bwT7XZHMGZxUkn+qNdbjferGtcYi9lTGre79/v I4VNIWhrHOBnwL1VEaDEVLN7uZ4VEdJkvmwYDUg0OnFNdBVBrVk92o2GD1jo7wq+ V3qTZ7DHC/SK4biMCVSxQLmyGEa4GSJXSxxBFmz/sJRP8rceW0byOFSjN3rJPDq5 z8sxP4r8AuUoT24MXsv0Vev1ZxzwJyQdQFyQE2B8Ag3mtoxXDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIc1Vqx2gIJcEJ/X2DkNWlC+0nHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWQyNjcxYjEtYjljMy0z OTQ5LThmYTQtOWI3MDQ2MGRmZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFInYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEszW8OGwvfwgymtZLLAhQ7kiQ2z/nkcyR68wiblrFOCoBZ4VgnihfuI ybm3C94dyFxm+lK5CIT2X8iqE50hRtIDEwaBxnEu3LXVZ6sXYlaBt9v93CF/wsx5 O+yBw480sZlNChdUU2EyZADZnczyu//PxwRBvL+bICotU1DCUhQAfofbfFXDhTsa xABF0UP5flqdu+mMlCyKaM+kDFJU+aVisP/E/hXA5MlJUdnyr+4BcAHyKwZ5iT/Q 5bMRHNwgXSeeECvO2rEoEKce2FkAQJTSQ1FqHfabRuPIbZmOLqxqVXXrVTxm3sgN i+mV3nQLYcAN4BNOoSnqVNB4DYc4SiU= -----END CERTIFICATE-----Generated at Sat Apr 26 20:25:41 2025 by rpki-client