$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa File: 18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa (raw, json) Hash identifier: b13kPwekwqLmx+Z8EQyKkTHxBLhixyk9ptVAXqiHOWA= Subject key identifier: 2D:54:A3:85:0C:D1:5B:84:E4:94:37:C4:55:2E:29:06:19:A3:BE:CF Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847A471309B9D3FBB67569FB380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa Signing time: Thu 24 Oct 2024 01:00:32 +0000 ROA not before: Thu 24 Oct 2024 01:00:32 +0000 ROA not after: Wed 22 Jan 2025 02:00:32 +0000 asID: 203 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a4:71:30:9b:9d:3f:bb:67:56:9f:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 24 01:00:32 2024 GMT Not After : Jan 22 02:00:32 2025 GMT Subject: CN=1c3f4923-7508-4fd9-8143-4a73b7807669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:09:a1:4b:ec:2d:8d:2f:91:23:af:c5:2a: ae:00:66:72:1a:f5:57:20:bb:82:2a:92:25:c2:80: c9:0a:2b:18:61:bb:a0:0a:e5:0f:f9:10:02:b9:b8: 5d:83:07:1f:34:58:ee:ef:70:42:3d:80:d0:29:dc: fa:86:b9:9a:55:84:7c:cf:95:f4:84:81:26:11:42: cb:e1:e1:e8:43:25:8d:27:42:74:f7:a7:df:15:78: a7:d9:11:fd:11:16:6b:ed:67:77:04:f6:bf:d3:ba: 5e:a3:42:99:e3:02:04:95:e7:65:c1:b5:5f:40:c1: d0:38:04:07:52:1a:c2:9b:68:a8:7c:83:67:e5:47: 9f:05:f5:8b:9c:76:7b:df:c6:e9:06:77:c9:94:56: 29:be:53:42:59:90:2d:2b:7a:87:ef:dc:3b:ee:ce: 65:aa:3f:55:db:68:ae:36:f7:ee:fb:9a:19:8f:87: 75:8e:80:e4:b0:54:e6:27:bc:4c:d3:fc:da:ae:f7: 53:0c:8c:d7:31:f2:79:bf:57:db:48:5f:35:85:43: 41:03:ce:b9:dd:f8:29:16:f3:1e:cf:b6:87:a9:e4: 24:6f:b5:21:8b:96:07:fd:b1:37:de:00:ba:d5:43: d3:e7:80:57:10:70:43:62:58:d0:a1:4d:14:b9:bf: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:54:A3:85:0C:D1:5B:84:E4:94:37:C4:55:2E:29:06:19:A3:BE:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:0c:40:f2:15:e0:0e:5c:74:f3:33:25:19:51:b4:05:ec:d2: dd:5e:0d:77:c4:43:99:b0:17:22:b3:a2:41:2b:19:3a:f1:d2: f2:de:5e:e1:ba:46:cd:a4:2c:8b:2b:e0:07:ed:78:7b:5e:bc: 91:ff:cc:39:1a:9e:ef:d9:b6:0f:46:89:25:61:cc:9d:72:df: 25:9b:37:66:9c:d4:e9:53:10:16:e1:df:c3:2b:b8:25:db:0e: 82:58:1b:20:ed:b8:7b:66:12:89:43:06:7a:7c:02:67:6c:9d: e1:64:90:fd:b2:57:79:67:89:42:e3:48:4d:3d:91:0f:00:a6: 9d:6a:b6:f1:41:69:e3:18:9d:f9:f9:53:16:c5:54:ea:bf:77: 72:f5:49:ab:62:bb:3b:c1:ab:6c:41:9a:94:db:00:45:0d:4e: 1c:4d:82:0e:e9:05:29:16:04:e6:44:c3:9b:41:83:7a:66:fb: 6f:f3:ae:8d:df:d0:42:f6:2f:70:0e:e8:89:d0:f0:95:19:bc: 6e:03:b2:2a:74:11:07:02:97:c0:8d:2b:70:90:77:1c:d9:8c: bb:28:b1:e5:39:1a:34:0e:b4:94:eb:7f:a3:b0:b5:64:98:05: df:b2:7f:a4:e3:a3:b7:56:0d:f4:e8:16:9e:d5:00:ee:fa:6e: 31:d8:3c:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEekcTCbnT+7Z1afs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAyNDAxMDAzMloXDTI1MDEyMjAyMDAzMlowLzEtMCsGA1UEAxMk MWMzZjQ5MjMtNzUwOC00ZmQ5LTgxNDMtNGE3M2I3ODA3NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhYJoUvsLY0vkSOvxSquAGZyGvVXILuCKpIl woDJCisYYbugCuUP+RACubhdgwcfNFju73BCPYDQKdz6hrmaVYR8z5X0hIEmEULL 4eHoQyWNJ0J096ffFXin2RH9ERZr7Wd3BPa/07peo0KZ4wIEledlwbVfQMHQOAQH UhrCm2iofINn5UefBfWLnHZ738bpBnfJlFYpvlNCWZAtK3qH79w77s5lqj9V22iu Nvfu+5oZj4d1joDksFTmJ7xM0/zarvdTDIzXMfJ5v1fbSF81hUNBA8653fgpFvMe z7aHqeQkb7Uhi5YH/bE33gC61UPT54BXEHBDYljQoU0Uub/FpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1Uo4UM0VuE5JQ3xFUuKQYZo77PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTgwNDhiM2QtOTg5MS0z N2ZkLTliM2UtYTk3Y2ZmYzg2YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAMQPIV4A5cdPMzJRlRtAXs0t1eDXfEQ5mwFyKzokErGTrx0vLeXuG6 Rs2kLIsr4AfteHtevJH/zDkanu/Ztg9GiSVhzJ1y3yWbN2ac1OlTEBbh38MruCXb DoJYGyDtuHtmEolDBnp8AmdsneFkkP2yV3lniULjSE09kQ8App1qtvFBaeMYnfn5 UxbFVOq/d3L1SatiuzvBq2xBmpTbAEUNThxNgg7pBSkWBOZEw5tBg3pm+2/zro3f 0EL2L3AO6InQ8JUZvG4Dsip0EQcCl8CNK3CQdxzZjLsoseU5GjQOtJTrf6OwtWSY Bd+yf6Tjo7dWDfToFp7VAO76bjHYPBA= -----END CERTIFICATE-----Generated at Sun Nov 24 22:12:07 2024 by rpki-client on console-fra.rpki-client.org