$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa File: 1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa (raw, json) Hash identifier: dwzWhqvQkPqcK/w2ypeqiVzl3EP9DhMjAztt49QM9Dc= Subject key identifier: 88:55:21:B3:B8:72:2D:6D:95:A1:26:CE:F3:B1:05:76:70:D4:21:34 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847A47130C5DDE65E6EE514BD38 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa Signing time: Thu 24 Oct 2024 01:00:32 +0000 ROA not before: Thu 24 Oct 2024 01:00:32 +0000 ROA not after: Wed 22 Jan 2025 02:00:32 +0000 asID: 3356 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a4:71:30:c5:dd:e6:5e:6e:e5:14:bd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 24 01:00:32 2024 GMT Not After : Jan 22 02:00:32 2025 GMT Subject: CN=d56f1abb-e691-457a-b634-54e84687027e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:cf:30:1c:5c:e5:bc:c2:21:25:c1:3a:06: 05:67:5b:26:6e:46:b7:9e:0a:2a:5d:42:23:0e:c5: 31:3b:93:14:7c:93:13:35:7e:3b:0d:25:34:db:19: c2:ec:c3:60:9b:a4:0e:d5:ee:28:73:39:7b:a0:25: fa:44:38:c4:00:01:6c:ef:99:eb:f6:f9:11:3a:8a: 68:dc:d2:3e:06:2c:a3:e8:ec:4b:ef:97:97:72:14: ab:78:9c:c5:77:6c:bf:56:87:3e:51:12:06:94:13: 0b:05:6e:4c:ec:58:56:b5:7b:10:81:0d:b9:9b:5d: b1:80:6b:58:b2:13:1b:ca:a2:bb:92:9c:9b:f3:91: 22:01:d5:dc:d8:ee:8d:3b:4c:98:3f:0a:b3:74:a4: e5:4e:61:93:b2:a8:97:e1:b8:ee:ea:63:2c:78:0a: 60:65:a8:73:45:64:1c:09:a0:8f:28:70:46:5d:f4: f6:1a:28:c9:5c:8e:a0:ca:fe:8e:5b:ef:87:29:b9: 5e:94:9d:ba:b4:c9:5d:6f:91:5d:9f:cb:d5:23:c7: a6:e5:1c:77:6f:fe:32:ea:77:22:92:0b:34:10:d0: 73:16:8e:83:e0:8a:48:3b:fe:1d:80:1d:66:56:e9: 04:3a:58:db:57:56:b3:d3:09:f2:64:1d:97:cc:81: 96:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:55:21:B3:B8:72:2D:6D:95:A1:26:CE:F3:B1:05:76:70:D4:21:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1a544a21-f9cd-3247-ab1d-028d133c3ed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:b0:65:5d:0c:89:e5:0c:10:eb:0f:83:33:bb:28:24:f1:6b: 78:a9:13:c7:90:0e:f5:86:11:a4:04:20:b9:03:fb:69:73:aa: c9:68:c6:9c:f2:82:38:ee:87:e0:ad:50:91:bb:d2:c3:cd:1f: e6:93:cb:18:9a:ee:27:0b:6b:94:29:94:9b:b1:bb:9d:92:67: 27:f3:63:04:8e:03:a9:52:4c:b8:86:84:75:ef:b3:9f:cd:d0: 2f:f9:ce:30:41:14:9d:08:e1:5b:12:fa:9b:59:41:0f:c2:16: 86:89:c9:e7:52:e1:63:2e:ff:b5:56:04:28:ca:6f:b0:03:fa: d0:68:ae:71:43:8c:62:20:98:31:b8:80:70:2d:c1:91:4a:d2: 15:a2:f2:6f:b6:58:f4:d7:c7:7d:a6:31:4e:57:4e:4d:df:9f: ff:2f:ee:71:c8:79:95:c9:5d:a9:11:bf:fb:97:1d:a2:44:02: 14:9c:19:df:b3:9d:3f:99:e4:5e:59:aa:dc:3d:1a:5b:b8:f6: 27:d9:61:9c:d7:59:f2:2f:29:a6:68:f8:71:95:f6:75:47:5e: e9:c5:60:10:2c:b6:54:99:58:1e:1b:f4:72:ca:7b:33:d6:b8: cc:7e:78:73:ce:79:61:2d:c2:6d:45:9f:c1:ca:5f:3a:dd:f0: 78:bf:5e:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEekcTDF3eZebuUUvTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAyNDAxMDAzMloXDTI1MDEyMjAyMDAzMlowLzEtMCsGA1UEAxMk ZDU2ZjFhYmItZTY5MS00NTdhLWI2MzQtNTRlODQ2ODcwMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub7PMBxc5bzCISXBOgYFZ1smbka3ngoqXUIj DsUxO5MUfJMTNX47DSU02xnC7MNgm6QO1e4oczl7oCX6RDjEAAFs75nr9vkROopo 3NI+Biyj6OxL75eXchSreJzFd2y/Voc+URIGlBMLBW5M7FhWtXsQgQ25m12xgGtY shMbyqK7kpyb85EiAdXc2O6NO0yYPwqzdKTlTmGTsqiX4bju6mMseApgZahzRWQc CaCPKHBGXfT2GijJXI6gyv6OW++HKblelJ26tMldb5Fdn8vVI8em5Rx3b/4y6nci kgs0ENBzFo6D4IpIO/4dgB1mVukEOljbV1az0wnyZB2XzIGWUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhVIbO4ci1tlaEmzvOxBXZw1CE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMWE1NDRhMjEtZjljZC0z MjQ3LWFiMWQtMDI4ZDEzM2MzZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqwZV0MieUMEOsPgzO7KCTxa3ipE8eQDvWGEaQEILkD+2lzqsloxpzy gjjuh+CtUJG70sPNH+aTyxia7icLa5QplJuxu52SZyfzYwSOA6lSTLiGhHXvs5/N 0C/5zjBBFJ0I4VsS+ptZQQ/CFoaJyedS4WMu/7VWBCjKb7AD+tBornFDjGIgmDG4 gHAtwZFK0hWi8m+2WPTXx32mMU5XTk3fn/8v7nHIeZXJXakRv/uXHaJEAhScGd+z nT+Z5F5Zqtw9Glu49ifZYZzXWfIvKaZo+HGV9nVHXunFYBAstlSZWB4b9HLKezPW uMx+eHPOeWEtwm1Fn8HKXzrd8Hi/Xoo= -----END CERTIFICATE-----Generated at Thu Dec 12 10:10:03 2024 by rpki-client on console-fra.rpki-client.org