$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa File: 0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa (raw, json) Hash identifier: rSzp+rp63XUoX3QS6sXaIbR40Sau4X7B+3qgYFZ41mM= Subject key identifier: 02:E1:C2:96:8C:FB:56:B2:2A:2B:2D:A9:45:73:01:1D:1D:CF:14:65 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584734C79C074CA2EFB263C7CD80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa Signing time: Sat 14 Sep 2024 01:00:32 +0000 ROA not before: Sat 14 Sep 2024 01:00:32 +0000 ROA not after: Fri 13 Dec 2024 02:00:32 +0000 asID: 3356 IP address blocks: 20.134.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:c7:9c:07:4c:a2:ef:b2:63:c7:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 14 01:00:32 2024 GMT Not After : Dec 13 02:00:32 2024 GMT Subject: CN=cf92379b-7aae-4c1e-aae9-a5bef457b97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b6:09:8b:7c:2e:e4:bb:b1:f9:dc:80:d3:0d: 15:43:4a:35:08:28:b7:f8:a2:66:91:cb:d8:47:1b: 64:df:06:33:65:bd:4c:8f:11:6c:b0:ae:95:3f:3b: 1c:cb:f5:ca:4b:53:5f:6f:47:39:f1:2a:57:1b:bd: 6a:12:4e:0b:c1:ac:d4:d4:a1:06:00:25:02:95:d1: 37:e7:8e:49:d3:ef:45:ed:df:ee:de:75:32:30:14: 08:37:a7:d9:dc:b0:9f:84:05:02:00:db:0a:0b:c8: 85:b5:9e:af:f8:ab:96:1c:5e:c5:78:01:88:1e:06: 6a:ca:70:99:c8:73:55:95:aa:8d:72:e8:02:4f:57: c6:9a:8c:dd:13:5d:55:8c:be:d2:f2:61:1e:62:cb: 20:1d:68:06:81:f3:ab:14:c3:5f:17:18:46:a5:d7: 62:48:24:71:5e:4c:5d:c9:a4:b4:29:38:92:8b:5c: 53:b6:3f:2f:ac:c5:d8:b0:69:46:3e:e0:c2:a6:34: 7c:0b:08:bf:d9:2d:5b:08:dc:fc:b3:03:37:ef:4b: 61:4d:87:17:0a:da:e1:f6:7a:1c:bb:26:de:fa:a8: 80:53:e2:f4:17:b8:78:97:8c:43:d4:63:00:ba:c4: a8:7a:5e:85:56:7a:37:62:31:e2:92:5f:f6:83:5d: d2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E1:C2:96:8C:FB:56:B2:2A:2B:2D:A9:45:73:01:1D:1D:CF:14:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a3:81:07:ad:7e:de:77:32:de:47:dd:c7:4c:ed:22:a4:a9: bb:fb:19:7c:98:1b:b5:db:79:8f:67:ca:fb:69:da:f6:a5:a3: 47:4d:d2:a5:c0:bc:2d:cf:22:b6:4a:9f:59:a6:00:85:25:35: 57:cf:74:8a:25:be:a1:a4:45:2e:1d:c5:bd:54:44:40:51:09: 43:ab:b9:a9:a6:ec:b6:bf:59:92:7a:7e:43:d1:b9:59:41:f4: 41:29:2a:c8:2a:75:62:c9:89:af:27:d3:25:13:60:15:44:09: 15:e7:96:f8:75:c6:e5:a6:0c:af:28:4b:60:cb:98:a0:87:f4: 4c:0b:b4:f7:0a:1b:7d:02:e8:da:db:fb:de:fa:72:6d:1b:97: a8:6d:d2:15:21:ab:0f:ef:a5:ba:92:75:81:2b:62:fd:a9:08: a8:3c:4d:e7:d6:a3:0b:86:a8:6e:93:e0:c4:49:d8:af:13:e4: 8b:87:79:6f:6c:f7:90:10:f9:8a:51:1b:5b:b3:14:6e:06:f4: b2:9a:da:1b:53:e2:16:59:ca:99:31:e5:59:4e:f7:19:28:33: 33:cc:93:cd:f8:23:6a:43:39:13:dd:b4:e8:b3:9a:5d:f9:63: d0:a3:12:6c:da:e3:4a:05:8b:ac:de:fe:26:cc:0b:06:b2:0d: ec:87:1b:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x5wHTKLvsmPHzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk Y2Y5MjM3OWItN2FhZS00YzFlLWFhZTktYTViZWY0NTdiOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bYJi3wu5Lux+dyA0w0VQ0o1CCi3+KJmkcvY Rxtk3wYzZb1MjxFssK6VPzscy/XKS1Nfb0c58SpXG71qEk4LwazU1KEGACUCldE3 545J0+9F7d/u3nUyMBQIN6fZ3LCfhAUCANsKC8iFtZ6v+KuWHF7FeAGIHgZqynCZ yHNVlaqNcugCT1fGmozdE11VjL7S8mEeYssgHWgGgfOrFMNfFxhGpddiSCRxXkxd yaS0KTiSi1xTtj8vrMXYsGlGPuDCpjR8Cwi/2S1bCNz8swM370thTYcXCtrh9noc uybe+qiAU+L0F7h4l4xD1GMAusSoel6FVno3YjHikl/2g13SfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALhwpaM+1ayKistqUVzAR0dzxRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGVjZTQxODEtZWExMi0z OWM0LThiNDctNTNkMmY0ZjI4MDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+jgQetft53Mt5H3cdM7SKkqbv7GXyYG7XbeY9nyvtp2valo0dN0qXA vC3PIrZKn1mmAIUlNVfPdIolvqGkRS4dxb1UREBRCUOruamm7La/WZJ6fkPRuVlB 9EEpKsgqdWLJia8n0yUTYBVECRXnlvh1xuWmDK8oS2DLmKCH9EwLtPcKG30C6Nrb +976cm0bl6ht0hUhqw/vpbqSdYErYv2pCKg8TefWowuGqG6T4MRJ2K8T5IuHeW9s 95AQ+YpRG1uzFG4G9LKa2htT4hZZypkx5VlO9xkoMzPMk834I2pDORPdtOizml35 Y9CjEmza40oFi6ze/ibMCwayDeyHGyc= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:32 2024 by rpki-client on console-fra.rpki-client.org