$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa File: 0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa (raw, json) Hash identifier: q0s9oLaUc+R5BfMqxQ32vux7AXLvPfSw883dAb3meis= Subject key identifier: DA:E3:13:44:08:0B:2F:48:FF:B8:06:35:56:BC:21:74:F6:1A:6B:26 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858476B67721CD41D2957673231A0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa Signing time: Thu 03 Oct 2024 14:39:52 +0000 ROA not before: Thu 03 Oct 2024 14:39:52 +0000 ROA not after: Wed 01 Jan 2025 15:39:52 +0000 asID: 4237 IP address blocks: 20.148.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:67:72:1c:d4:1d:29:57:67:32:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 3 14:39:52 2024 GMT Not After : Jan 1 15:39:52 2025 GMT Subject: CN=47dc9673-ad5a-4be4-b5b2-081591688bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:0e:ad:b2:de:e6:4d:e2:02:28:11:3d:14: f1:8f:5c:0c:c8:98:1f:7e:5e:67:4b:d9:eb:a5:60: a6:25:f4:b8:f6:c5:3d:c5:90:cc:b4:32:2b:9d:1e: cd:c6:cc:95:5d:cb:80:fc:2f:a6:e2:96:97:39:e0: 84:15:91:0d:11:de:6b:89:b8:87:df:47:31:cd:96: 56:13:26:e0:8e:d7:30:6e:ed:73:81:37:16:dd:17: 21:55:c6:55:f7:e2:76:40:b9:4f:80:8c:e5:c9:b0: b6:1c:da:11:b5:22:27:9f:f5:7a:dd:a6:ea:2c:cc: cd:d7:54:06:d9:d9:72:84:e1:d2:ce:35:ca:38:c5: 23:10:9e:42:ea:ae:d8:67:0a:25:70:5d:84:f1:15: 7c:ec:ff:2d:f9:ac:e4:1a:8f:3e:74:2e:ee:dd:87: c0:07:d8:cc:01:68:8e:1a:42:03:92:16:de:d8:cf: a2:85:25:71:32:c9:ed:2e:2e:f6:d3:6a:02:72:b7: dc:f1:64:ef:53:c0:cf:88:50:8e:22:5e:ff:9c:87: e7:ad:4a:10:13:69:56:61:02:86:b1:79:57:bf:98: 33:78:61:83:fd:60:22:de:1d:c3:c4:5e:11:38:93: a7:bc:5b:c2:9b:d2:a0:3d:f5:02:e0:a8:40:b9:7f: e9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E3:13:44:08:0B:2F:48:FF:B8:06:35:56:BC:21:74:F6:1A:6B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:84:0c:6f:84:91:84:fa:cb:c7:e3:67:6c:d3:e7:bc:b2:13: df:ea:ba:84:db:97:fe:41:7a:ec:ca:15:d8:52:c9:44:50:e4: 47:5d:81:f3:97:83:e1:70:71:5b:f7:93:8c:53:b2:c7:15:61: db:12:48:d3:86:9e:05:2f:98:12:15:6b:97:84:44:09:5d:1b: 6a:3c:6d:1b:b3:81:fd:c4:31:2c:8e:37:99:27:5e:6b:96:0d: 5f:ce:2c:67:71:4f:78:ad:c8:85:31:b4:78:7e:d8:50:5b:5a: 35:7e:d9:e6:b3:06:9b:10:47:9d:7f:ab:ea:c4:3f:ea:6d:b5: 32:53:31:a1:dd:ef:67:03:bf:58:a8:f9:fb:dd:bf:36:c7:54: fc:db:ab:87:7d:03:f7:92:34:bf:35:60:b7:fd:7b:8b:54:ae: cc:79:c8:cd:59:61:1a:fd:aa:2f:4d:3e:65:72:d1:41:3b:19: 27:64:52:94:6c:34:5b:c4:ab:dc:7f:f7:1c:7c:77:6a:f0:c2: 18:20:82:74:60:0e:62:48:03:80:df:4c:09:f4:1c:dc:ab:dd: 1f:29:3f:a3:e0:36:f4:e3:9f:07:e1:7f:a4:58:f4:9d:db:19: da:17:93:b6:c6:67:c4:3d:cd:5e:da:44:6a:42:5d:ef:bf:34: a1:48:cd:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrZ3Ic1B0pV2cyMaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAwMzE0Mzk1MloXDTI1MDEwMTE1Mzk1MlowLzEtMCsGA1UEAxMk NDdkYzk2NzMtYWQ1YS00YmU0LWI1YjItMDgxNTkxNjg4YmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8MOrbLe5k3iAigRPRTxj1wMyJgffl5nS9nr pWCmJfS49sU9xZDMtDIrnR7NxsyVXcuA/C+m4paXOeCEFZENEd5ribiH30cxzZZW Eybgjtcwbu1zgTcW3RchVcZV9+J2QLlPgIzlybC2HNoRtSInn/V63abqLMzN11QG 2dlyhOHSzjXKOMUjEJ5C6q7YZwolcF2E8RV87P8t+azkGo8+dC7u3YfAB9jMAWiO GkIDkhbe2M+ihSVxMsntLi7202oCcrfc8WTvU8DPiFCOIl7/nIfnrUoQE2lWYQKG sXlXv5gzeGGD/WAi3h3DxF4ROJOnvFvCm9KgPfUC4KhAuX/peQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrjE0QICy9I/7gGNVa8IXT2GmsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGVjYjIyNzctZDRlMy0z M2U5LWEzMzgtNTQ3MDhlM2YwYzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2EDG+EkYT6y8fjZ2zT57yyE9/quoTbl/5BeuzKFdhSyURQ5EddgfOX g+FwcVv3k4xTsscVYdsSSNOGngUvmBIVa5eERAldG2o8bRuzgf3EMSyON5knXmuW DV/OLGdxT3ityIUxtHh+2FBbWjV+2eazBpsQR51/q+rEP+pttTJTMaHd72cDv1io +fvdvzbHVPzbq4d9A/eSNL81YLf9e4tUrsx5yM1ZYRr9qi9NPmVy0UE7GSdkUpRs NFvEq9x/9xx8d2rwwhgggnRgDmJIA4DfTAn0HNyr3R8pP6PgNvTjnwfhf6RY9J3b GdoXk7bGZ8Q9zV7aRGpCXe+/NKFIzQA= -----END CERTIFICATE-----Generated at Sun Nov 24 22:12:07 2024 by rpki-client on console-fra.rpki-client.org