$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0dd11bd1-0dfd-345b-9d68-4dd026605e40.roa File: 0dd11bd1-0dfd-345b-9d68-4dd026605e40.roa (raw, json) Hash identifier: ZvYSf51VTG4QuPDOjILSW0ZpJw/inrRU5VKfXBAdYQU= Subject key identifier: FE:37:0A:78:16:6E:D0:49:95:46:CD:A5:86:F2:B2:EA:92:3F:1B:25 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847643B72F678AA7DA499275608 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0dd11bd1-0dfd-345b-9d68-4dd026605e40.roa Signing time: Tue 01 Oct 2024 01:00:31 +0000 ROA not before: Tue 01 Oct 2024 01:00:31 +0000 ROA not after: Mon 30 Dec 2024 02:00:31 +0000 asID: 202 IP address blocks: 20.137.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:64:3b:72:f6:78:aa:7d:a4:99:27:56:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 1 01:00:31 2024 GMT Not After : Dec 30 02:00:31 2024 GMT Subject: CN=4ef56e5a-628e-42f0-976d-49173a12dbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:77:58:45:95:d1:e4:5e:74:1d:ef:b1:2d:fa: dc:4e:31:15:df:b1:9a:63:fd:b7:e2:60:f9:ed:a2: 46:38:86:4f:47:db:ff:d6:b0:35:26:07:ac:00:97: 7d:9f:c7:a4:33:3c:2b:a4:5d:28:54:10:15:41:d6: f6:17:cf:aa:f3:1d:e7:b7:8b:8d:83:96:56:ab:1b: 84:e4:13:cd:0d:2c:f5:1a:1e:b0:01:ed:34:84:aa: b9:a0:8f:08:34:9a:e6:af:33:57:3c:0a:ba:2a:48: 36:13:41:68:13:be:42:b8:44:6f:95:5c:ec:b3:0c: 62:ff:e5:3a:4e:82:6a:e1:40:7e:83:4d:d2:b7:d1: 79:1c:2f:66:ce:08:a3:6a:38:cb:45:f5:5b:52:3f: 39:95:80:d2:d4:6f:7c:ba:f7:24:b5:5e:87:14:e5: af:67:11:ec:5f:39:47:65:79:1d:1e:cb:c8:b3:ad: b0:29:9b:4e:7c:d6:df:29:b1:ad:f7:84:1e:75:b0: 48:25:ae:ed:4b:da:53:22:1d:92:63:24:76:ee:ce: ef:ca:bc:ed:3e:fe:62:8f:7e:42:34:c6:d1:02:a4: ee:aa:7c:a6:4b:3e:84:b1:8a:48:01:3f:11:1b:f6: ff:c7:6f:f8:52:68:75:3d:73:65:a1:53:e3:25:77: 3e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:37:0A:78:16:6E:D0:49:95:46:CD:A5:86:F2:B2:EA:92:3F:1B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0dd11bd1-0dfd-345b-9d68-4dd026605e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e5:cc:91:a3:cb:1a:ed:53:86:af:3c:b2:1d:c6:31:32:35: f4:89:26:87:51:2d:2b:d1:28:10:98:6d:82:4f:8c:2d:9a:3d: d2:4d:34:c7:3d:62:69:ee:e2:6a:22:38:2a:94:8a:75:1a:b2: f5:e2:8a:39:6c:2c:4a:dd:3c:08:2c:31:8f:ff:ca:df:f5:60: 65:72:1c:88:ba:6a:b5:95:56:53:35:50:41:8e:93:35:b2:1a: be:02:5d:89:88:0a:b6:e5:9a:43:70:62:93:d6:d7:b1:7e:0c: b8:0b:10:32:04:60:e0:70:81:a5:a7:30:67:24:f4:b3:35:3d: de:51:c8:b2:3d:6f:5d:f2:ed:89:df:f8:62:19:81:04:b3:d5: 46:67:01:f4:31:a4:38:23:43:1b:15:a1:ff:ff:59:65:d8:e0: 7c:14:61:3d:54:ad:fa:d2:bb:09:20:01:8e:33:d8:3b:00:22: 32:3c:b6:fc:60:7f:f6:00:d5:43:a9:02:ac:9b:cf:f8:5d:87: 9c:6d:87:00:b1:ee:25:b3:2b:84:c9:d5:13:cf:73:b7:23:c2: c2:86:84:48:b4:c8:b0:fb:3d:07:ac:27:13:4c:72:27:96:66: f4:c4:e0:6a:09:96:3a:d5:3c:46:8a:05:41:47:0c:d1:d8:b3: 18:5b:fb:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdkO3L2eKp9pJknVggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAwMTAxMDAzMVoXDTI0MTIzMDAyMDAzMVowLzEtMCsGA1UEAxMk NGVmNTZlNWEtNjI4ZS00MmYwLTk3NmQtNDkxNzNhMTJkYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHdYRZXR5F50He+xLfrcTjEV37GaY/234mD5 7aJGOIZPR9v/1rA1JgesAJd9n8ekMzwrpF0oVBAVQdb2F8+q8x3nt4uNg5ZWqxuE 5BPNDSz1Gh6wAe00hKq5oI8INJrmrzNXPAq6Kkg2E0FoE75CuERvlVzsswxi/+U6 ToJq4UB+g03St9F5HC9mzgijajjLRfVbUj85lYDS1G98uvcktV6HFOWvZxHsXzlH ZXkdHsvIs62wKZtOfNbfKbGt94QedbBIJa7tS9pTIh2SYyR27s7vyrztPv5ij35C NMbRAqTuqnymSz6EsYpIAT8RG/b/x2/4Umh1PXNloVPjJXc+EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP43CngWbtBJlUbNpYbysuqSPxslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGRkMTFiZDEtMGRmZC0z NDViLTlkNjgtNGRkMDI2NjA1ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/lzJGjyxrtU4avPLIdxjEyNfSJJodRLSvRKBCYbYJPjC2aPdJNNMc9 Ymnu4moiOCqUinUasvXiijlsLErdPAgsMY//yt/1YGVyHIi6arWVVlM1UEGOkzWy Gr4CXYmICrblmkNwYpPW17F+DLgLEDIEYOBwgaWnMGck9LM1Pd5RyLI9b13y7Ynf +GIZgQSz1UZnAfQxpDgjQxsVof//WWXY4HwUYT1UrfrSuwkgAY4z2DsAIjI8tvxg f/YA1UOpAqybz/hdh5xthwCx7iWzK4TJ1RPPc7cjwsKGhEi0yLD7PQesJxNMcieW ZvTE4GoJljrVPEaKBUFHDNHYsxhb+wI= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:22 2024 by rpki-client on console-ams.rpki-client.org