$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa File: 094276eb-a22a-3e33-8c6d-37f68e1f7695.roa (raw, json) Hash identifier: t73yADwl+H7MBtPKhUTiAuu0YYbB2jHvSZ9jMleykcA= Subject key identifier: F8:49:B7:7F:8A:AB:CF:C6:49:78:DF:D7:4D:81:CA:1B:A4:C7:2D:F2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584737907BBE6BEF28CC21A45210 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa Signing time: Sun 15 Sep 2024 01:00:30 +0000 ROA not before: Sun 15 Sep 2024 01:00:30 +0000 ROA not after: Sat 14 Dec 2024 02:00:30 +0000 asID: 203 IP address blocks: 20.134.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:37:90:7b:be:6b:ef:28:cc:21:a4:52:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 15 01:00:30 2024 GMT Not After : Dec 14 02:00:30 2024 GMT Subject: CN=2372b166-b88f-4f78-852e-6064c448ce82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:52:19:8a:2d:e1:53:b3:ac:91:4a:82:35:b5: e1:2c:68:75:96:4d:30:b8:06:67:82:6a:89:55:5b: 1e:dc:57:3b:54:e8:a5:95:53:5b:8a:d3:13:b5:c5: 8e:a8:3e:e7:20:0c:7a:0a:fa:80:3f:43:20:1e:5e: 43:b8:8e:58:65:96:ab:fc:99:51:71:d7:6e:e1:67: 80:ae:37:37:45:cb:fa:4d:47:30:71:22:28:31:31: 9e:e6:b4:24:2a:20:1d:f5:ca:12:48:0b:05:c1:28: bc:70:3b:b7:63:ce:79:21:d4:e2:bb:ef:65:11:ec: a0:d9:ba:aa:c4:a7:85:3b:4f:a2:63:1e:59:16:7b: 87:87:e0:d2:2b:fa:0f:d8:c4:ba:80:23:14:ba:02: 5f:83:21:57:f5:69:85:a3:ed:24:1c:54:a1:8f:45: 0c:19:6b:41:41:b4:ea:e4:b2:93:66:bf:fa:07:2d: 79:e1:ae:3b:63:47:b4:3a:1d:ac:78:cf:b1:b8:bb: 38:f0:c3:b7:7a:cd:63:c0:77:1b:8f:3f:94:f3:d7: 57:c8:65:f9:b5:95:b0:86:9a:fb:64:e9:57:4d:17: cf:a3:f9:e3:00:c4:c2:14:36:09:81:8e:dc:ae:20: d4:1a:ad:8a:be:29:c3:6c:61:71:bc:b2:33:c0:99: ed:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:49:B7:7F:8A:AB:CF:C6:49:78:DF:D7:4D:81:CA:1B:A4:C7:2D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:23:76:be:03:73:15:9f:c5:06:dc:f7:1c:ff:01:d3:02:d9: 91:76:f6:c4:11:5f:cc:4a:44:53:09:f8:fe:a8:bd:0c:27:72: 42:46:df:1b:97:c1:b2:9c:93:19:29:bd:e3:10:56:e4:b2:20: 24:10:05:6c:92:5d:9e:7e:8d:69:dd:13:96:1a:73:67:17:ad: 09:39:9d:06:90:bb:2c:dd:7e:f3:f4:a2:6d:ff:36:7b:5a:52: fa:fa:14:10:fe:4f:51:d9:a7:1e:59:ae:d1:20:45:8b:fe:b4: 18:6b:18:2d:b2:35:e4:cc:72:2b:06:4c:16:68:f7:6a:81:2c: ef:be:3d:d8:6a:d0:d4:1b:8c:fe:06:c0:75:0c:fc:d8:d6:32: 58:19:07:48:f6:38:76:8e:3a:69:64:81:49:fd:43:70:f5:7c: 68:17:73:0c:de:98:85:1f:55:63:76:f1:2b:96:08:74:22:43: 41:33:52:ab:9d:40:1e:1f:2f:86:58:54:11:53:7c:dd:f7:a9: 08:43:d9:62:73:cd:51:0c:40:91:0a:af:bf:bf:30:83:43:8c: 27:60:49:7c:d3:91:8a:09:d1:25:a5:48:b1:fb:2f:95:92:30: c7:77:1e:b0:cb:4a:30:59:61:51:44:32:90:6c:18:0c:b7:ee: 0a:57:e3:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc3kHu+a+8ozCGkUhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDkxNTAxMDAzMFoXDTI0MTIxNDAyMDAzMFowLzEtMCsGA1UEAxMk MjM3MmIxNjYtYjg4Zi00Zjc4LTg1MmUtNjA2NGM0NDhjZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglIZii3hU7OskUqCNbXhLGh1lk0wuAZngmqJ VVse3Fc7VOillVNbitMTtcWOqD7nIAx6CvqAP0MgHl5DuI5YZZar/JlRcddu4WeA rjc3Rcv6TUcwcSIoMTGe5rQkKiAd9coSSAsFwSi8cDu3Y855IdTiu+9lEeyg2bqq xKeFO0+iYx5ZFnuHh+DSK/oP2MS6gCMUugJfgyFX9WmFo+0kHFShj0UMGWtBQbTq 5LKTZr/6By154a47Y0e0Oh2seM+xuLs48MO3es1jwHcbjz+U89dXyGX5tZWwhpr7 ZOlXTRfPo/njAMTCFDYJgY7criDUGq2KvinDbGFxvLIzwJntSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhJt3+Kq8/GSXjf102Byhukxy3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDk0Mjc2ZWItYTIyYS0z ZTMzLThjNmQtMzdmNjhlMWY3Njk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcjdr4DcxWfxQbc9xz/AdMC2ZF29sQRX8xKRFMJ+P6ovQwnckJG3xuX wbKckxkpveMQVuSyICQQBWySXZ5+jWndE5Yac2cXrQk5nQaQuyzdfvP0om3/Nnta Uvr6FBD+T1HZpx5ZrtEgRYv+tBhrGC2yNeTMcisGTBZo92qBLO++Pdhq0NQbjP4G wHUM/NjWMlgZB0j2OHaOOmlkgUn9Q3D1fGgXcwzemIUfVWN28SuWCHQiQ0EzUqud QB4fL4ZYVBFTfN33qQhD2WJzzVEMQJEKr7+/MINDjCdgSXzTkYoJ0SWlSLH7L5WS MMd3HrDLSjBZYVFEMpBsGAy37gpX47A= -----END CERTIFICATE-----Generated at Sat Sep 21 02:29:14 2024 by rpki-client on console-ams.rpki-client.org