$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa File: 20b86aff-f738-359b-bf7f-a923168ca468.roa (raw, json) Hash identifier: 6sl8SuTOrcmBy8WznFnsTZcIlZkpJdCn4aML7hy1Ilk= Subject key identifier: 29:17:41:E9:53:CA:FD:A8:A8:8D:D8:AC:FC:C4:5C:EC:94:2E:A8:99 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847B645EC87CD624C59F7D28580 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa Signing time: Wed 30 Oct 2024 10:17:57 +0000 ROA not before: Wed 30 Oct 2024 10:17:57 +0000 ROA not after: Tue 28 Jan 2025 11:17:57 +0000 asID: 3356 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:45:ec:87:cd:62:4c:59:f7:d2:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 30 10:17:57 2024 GMT Not After : Jan 28 11:17:57 2025 GMT Subject: CN=38ec7d48-0132-4ca3-a5c5-4cb967b91ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b4:a8:90:f8:6c:39:08:dc:a2:f9:3d:c4:e7: 0d:27:59:0b:a7:ff:ea:2a:12:c9:bb:00:e9:39:8b: 17:28:85:e2:f7:43:0d:2a:e5:58:6f:2e:69:79:90: 71:b6:89:e4:59:83:2e:9a:55:b2:0c:d9:f5:ec:ff: 2d:5b:02:25:26:76:0b:ea:cc:17:a5:c9:78:e0:41: 3f:96:b8:12:3f:8c:f5:1c:7c:df:c6:c0:ad:b1:f7: ab:e6:d9:fd:9b:8a:29:fe:21:8a:d5:21:af:f8:4c: d7:23:9a:ab:b7:b2:6c:e5:5a:b0:29:22:b7:eb:b5: 66:80:16:1c:72:0d:6f:18:1d:e5:fe:e2:ff:7a:2f: 8a:20:42:9e:be:6e:4b:0d:91:82:02:13:b5:4b:9e: 1b:f0:77:5a:f2:af:17:34:05:18:66:61:1f:b5:58: 89:1a:dd:25:d4:da:74:ca:a5:8b:64:fa:fb:9d:df: 67:27:f3:a1:bf:5b:fb:98:4d:cb:24:65:3a:ab:37: 8d:ba:50:ca:19:75:55:19:79:80:eb:ee:18:78:54: 62:b0:5a:8c:26:b2:df:3f:5b:18:06:5a:8a:3f:fb: bb:85:4a:8d:ef:eb:10:82:cf:94:3c:f3:1e:02:e9: b6:ec:a8:cc:9d:88:60:75:91:d2:bb:61:6f:6e:2d: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:17:41:E9:53:CA:FD:A8:A8:8D:D8:AC:FC:C4:5C:EC:94:2E:A8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:71:c6:fb:a8:0c:55:98:ac:68:74:48:ab:64:da:63:77:09: 04:87:9c:35:01:cd:3e:55:11:67:a2:3a:91:86:5a:07:0c:25: c6:3b:29:7e:cc:2c:c4:15:0a:73:70:c6:0b:17:0e:9f:ac:31: ef:2f:a1:6d:3d:aa:00:7d:b2:86:45:b8:4d:62:ff:2a:5a:6f: cb:13:92:55:26:26:4f:3d:78:f8:8e:f4:92:78:91:44:58:d9: f0:1d:12:9b:3f:39:cf:6b:18:75:e1:62:99:a0:84:ce:25:f2: 1b:d1:af:82:38:85:79:3b:36:77:20:1a:e5:3f:7c:63:01:b9: df:a1:64:1a:72:9f:2a:ba:7f:15:d8:f3:09:09:e7:8e:9a:b2: 8f:79:85:29:ab:b9:9a:f2:dd:73:96:5d:cd:87:dd:0c:30:a9: f7:53:fc:9c:c7:1e:47:8a:d6:ca:94:49:29:60:65:2b:10:ef: 69:db:e3:54:53:9f:60:f9:bd:3d:ab:4b:8f:67:57:28:a4:dd: 0d:12:5a:bb:56:64:5e:22:c9:f8:4b:6d:72:09:03:ba:04:84: c0:1f:41:33:d1:5d:74:e1:a8:ca:80:59:eb:48:e8:3d:30:cb: 7f:ec:2f:56:7a:a5:4d:6e:c8:2e:7f:5e:5e:5e:7d:90:fb:ea: 54:7d:54:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2ReyHzWJMWffShYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAzMDEwMTc1N1oXDTI1MDEyODExMTc1N1owLzEtMCsGA1UEAxMk MzhlYzdkNDgtMDEzMi00Y2EzLWE1YzUtNGNiOTY3YjkxZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLSokPhsOQjcovk9xOcNJ1kLp//qKhLJuwDp OYsXKIXi90MNKuVYby5peZBxtonkWYMumlWyDNn17P8tWwIlJnYL6swXpcl44EE/ lrgSP4z1HHzfxsCtsfer5tn9m4op/iGK1SGv+EzXI5qrt7Js5VqwKSK367VmgBYc cg1vGB3l/uL/ei+KIEKevm5LDZGCAhO1S54b8Hda8q8XNAUYZmEftViJGt0l1Np0 yqWLZPr7nd9nJ/Ohv1v7mE3LJGU6qzeNulDKGXVVGXmA6+4YeFRisFqMJrLfP1sY BlqKP/u7hUqN7+sQgs+UPPMeAum27KjMnYhgdZHSu2Fvbi3LhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkXQelTyv2oqI3YrPzEXOyULqiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjBiODZhZmYtZjczOC0z NTliLWJmN2YtYTkyMzE2OGNhNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFxxvuoDFWYrGh0SKtk2mN3CQSHnDUBzT5VEWeiOpGGWgcMJcY7KX7M LMQVCnNwxgsXDp+sMe8voW09qgB9soZFuE1i/ypab8sTklUmJk89ePiO9JJ4kURY 2fAdEps/Oc9rGHXhYpmghM4l8hvRr4I4hXk7NncgGuU/fGMBud+hZBpynyq6fxXY 8wkJ546aso95hSmruZry3XOWXc2H3QwwqfdT/JzHHkeK1sqUSSlgZSsQ72nb41RT n2D5vT2rS49nVyik3Q0SWrtWZF4iyfhLbXIJA7oEhMAfQTPRXXThqMqAWetI6D0w y3/sL1Z6pU1uyC5/Xl5efZD76lR9VIM= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:22 2024 by rpki-client on console-ams.rpki-client.org