$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa File: 0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa (raw, json) Hash identifier: jyAdQ6j0ZAyEp8enBZFngHLYD+Eyf6WnSc7FAfs88co= Subject key identifier: DE:36:62:EA:3E:0D:D6:AC:73:87:FB:8C:B8:E3:BA:A5:E7:33:D2:9F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584737907D277F3FD23D0EAE9680 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa Signing time: Sun 15 Sep 2024 01:00:30 +0000 ROA not before: Sun 15 Sep 2024 01:00:30 +0000 ROA not after: Sat 14 Dec 2024 02:00:30 +0000 asID: 3356 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:37:90:7d:27:7f:3f:d2:3d:0e:ae:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 15 01:00:30 2024 GMT Not After : Dec 14 02:00:30 2024 GMT Subject: CN=adcb8c11-18a1-4f2e-a648-5ce85dda822d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c0:89:a6:83:d5:0a:55:7f:ef:28:bb:4c:84: 95:65:e7:ed:57:eb:0e:7a:44:09:43:61:8b:52:57: 26:a1:46:9a:7a:6b:a8:cc:0a:f2:f0:5d:da:e0:b6: fe:62:b1:db:0e:6f:68:c7:f5:6d:65:9b:97:40:83: e4:c3:3a:c9:6b:ae:59:5e:a2:d1:2e:c7:c3:69:2b: b0:15:b2:04:d3:4a:66:f8:b4:f9:f3:f1:83:32:fb: be:dd:7b:f4:2d:93:c5:3a:5f:a5:96:55:8d:76:b8: 97:2e:07:61:f1:50:d2:66:bb:5e:3c:7d:6c:02:04: a2:5e:12:da:cc:21:2e:68:62:6b:d1:76:79:ca:dd: 8e:2b:a5:a5:c8:77:35:52:63:aa:5b:52:1f:f6:30: fb:2e:7f:5e:1b:71:26:4b:5e:c3:2a:82:11:90:59: a0:5e:1e:33:a3:99:52:c3:3a:ac:6f:9f:33:88:fb: 7c:81:f4:21:50:48:bd:84:cb:a1:2c:a3:c9:8d:79: 95:f0:ff:34:db:de:35:a8:4c:2b:a4:59:df:9a:78: 8d:6f:1d:cd:e5:fb:17:94:43:a6:25:94:ab:9a:a1: 37:89:ec:b8:8b:6d:8e:35:82:d0:3f:a2:d3:b7:09: e2:9b:d4:9b:92:1d:cc:9d:72:51:ee:39:4c:18:28: a0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:36:62:EA:3E:0D:D6:AC:73:87:FB:8C:B8:E3:BA:A5:E7:33:D2:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ac0a9ef-665e-324c-b70d-e56f5bd3a914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d5:54:8e:91:3c:c6:e3:21:29:9d:64:16:65:d5:76:40:03: 24:9c:b4:bc:f6:9d:2c:b4:ed:6e:31:59:d1:d6:44:10:55:b1: 26:78:46:25:cc:88:df:87:c5:0c:32:83:5a:78:9f:35:af:91: ba:6c:29:7f:ae:63:b6:f2:ae:db:7a:c4:4d:5b:ad:5a:a9:ba: 5f:4b:60:19:d4:5b:11:58:d1:85:0b:bf:3c:0c:6d:ce:db:69: 7a:2d:54:1b:e0:4c:5c:c6:5d:9e:a0:92:bc:1e:d8:94:72:7f: c0:2a:eb:93:52:7f:93:2b:b6:7a:48:23:23:b6:4f:cc:8c:8c: 46:11:39:62:8d:1c:5c:1f:14:96:bf:e6:7d:c9:5a:7e:03:85: a6:49:df:c9:74:01:0b:7b:61:3e:43:c1:25:61:02:88:75:ed: a3:cf:eb:da:81:a6:d0:87:9b:37:75:15:01:1e:62:c3:90:f3: b1:51:6b:f5:d4:cd:27:6f:e4:c6:e6:a2:b8:cc:62:5b:79:c0: 22:73:63:76:0e:8e:c1:4c:97:57:9a:42:19:27:a8:1c:62:65: cf:30:24:09:5c:d1:f5:f9:9c:8c:48:ae:4c:43:f9:a9:3c:b4: 10:2e:97:7f:2b:cb:7b:b5:d2:ed:f7:71:79:ee:0d:d5:fc:01: 17:36:2c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc3kH0nfz/SPQ6uloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDkxNTAxMDAzMFoXDTI0MTIxNDAyMDAzMFowLzEtMCsGA1UEAxMk YWRjYjhjMTEtMThhMS00ZjJlLWE2NDgtNWNlODVkZGE4MjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8CJpoPVClV/7yi7TISVZeftV+sOekQJQ2GL UlcmoUaaemuozAry8F3a4Lb+YrHbDm9ox/VtZZuXQIPkwzrJa65ZXqLRLsfDaSuw FbIE00pm+LT58/GDMvu+3Xv0LZPFOl+lllWNdriXLgdh8VDSZrtePH1sAgSiXhLa zCEuaGJr0XZ5yt2OK6WlyHc1UmOqW1If9jD7Ln9eG3EmS17DKoIRkFmgXh4zo5lS wzqsb58ziPt8gfQhUEi9hMuhLKPJjXmV8P802941qEwrpFnfmniNbx3N5fsXlEOm JZSrmqE3iey4i22ONYLQP6LTtwnim9Sbkh3MnXJR7jlMGCigVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN42Yuo+Ddasc4f7jLjjuqXnM9KfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGFjMGE5ZWYtNjY1ZS0z MjRjLWI3MGQtZTU2ZjViZDNhOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzVVI6RPMbjISmdZBZl1XZAAySctLz2nSy07W4xWdHWRBBVsSZ4RiXM iN+HxQwyg1p4nzWvkbpsKX+uY7byrtt6xE1brVqpul9LYBnUWxFY0YULvzwMbc7b aXotVBvgTFzGXZ6gkrwe2JRyf8Aq65NSf5MrtnpIIyO2T8yMjEYROWKNHFwfFJa/ 5n3JWn4DhaZJ38l0AQt7YT5DwSVhAoh17aPP69qBptCHmzd1FQEeYsOQ87FRa/XU zSdv5MbmorjMYlt5wCJzY3YOjsFMl1eaQhknqBxiZc8wJAlc0fX5nIxIrkxD+ak8 tBAul38ry3u10u33cXnuDdX8ARc2LPE= -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:38 2024 by rpki-client on console-fra.rpki-client.org