$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa File: 219ed1da-c95c-3af6-9248-3707f5300999.roa (raw, json) Hash identifier: Cjc2NrzDJyUeAnj/AcP7kEjf3kRxMOO0KAmmXhCl4tk= Subject key identifier: 6A:E1:7C:B7:70:56:5A:D4:6C:79:44:F9:F6:E5:D7:98:4D:8A:F0:02 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847B64395F0D42D5EF1223F8900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa Signing time: Wed 30 Oct 2024 10:13:15 +0000 ROA not before: Wed 30 Oct 2024 10:13:15 +0000 ROA not after: Tue 28 Jan 2025 11:13:15 +0000 asID: 203 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:43:95:f0:d4:2d:5e:f1:22:3f:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 30 10:13:15 2024 GMT Not After : Jan 28 11:13:15 2025 GMT Subject: CN=eaee9b85-5770-456e-9501-e40b8e3d0114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:ed:eb:46:57:dc:b1:fd:7b:27:79:c3:f3: 3d:80:74:7c:19:d1:20:7d:6e:72:64:41:f6:0d:d2: db:36:4f:37:37:a0:53:6b:0e:05:ca:51:26:5a:f4: 9c:7a:bf:bf:1e:2e:66:20:e0:98:fe:08:3e:70:f3: 4b:14:8c:6d:18:a7:c1:10:73:04:87:a3:78:db:31: 41:46:1c:a2:ce:75:ed:8b:d3:87:bb:31:01:80:23: 43:5e:7d:cc:8e:2f:31:9f:51:c1:ef:2e:09:ec:84: ab:c1:cc:9f:c7:6f:20:db:92:66:a5:bc:30:26:ce: d5:ea:47:54:40:e8:bd:05:1a:61:b7:65:ef:a8:30: ca:8e:b8:35:84:83:92:82:69:10:87:44:1a:8f:b9: 52:7c:d2:00:66:9d:97:c0:11:a0:8d:fd:1b:4e:af: b3:98:f5:6c:56:aa:6a:be:71:1f:bd:e9:dd:12:24: c7:0f:c3:d8:57:47:90:cf:1e:34:7d:97:b5:10:7b: 33:d4:98:6c:4e:3e:48:c3:79:d3:e1:17:4c:e0:d8: 90:38:66:3e:17:73:2f:62:e7:cd:65:f8:07:9f:86: a6:f6:d1:20:8b:a0:6e:8e:60:4e:9b:fd:b8:51:b9: a6:2a:05:a0:c1:53:08:e7:e1:47:e1:91:38:6e:e2: 88:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E1:7C:B7:70:56:5A:D4:6C:79:44:F9:F6:E5:D7:98:4D:8A:F0:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a9:5d:b9:65:b5:ab:be:89:1f:c3:8d:9c:b5:51:7d:16:c0: 4b:10:1b:2e:56:2b:8b:51:76:f3:2f:ab:cc:72:43:56:c1:30: b6:2a:2b:50:08:24:b1:f3:16:33:35:b0:e8:22:82:09:f6:99: ed:aa:9b:a9:64:a1:83:f0:2e:ad:1f:3b:ce:c5:9c:2f:a4:7c: 7a:39:a3:08:b6:23:bf:b2:ef:86:02:c8:74:5b:21:b6:db:9f: 2a:05:73:a9:41:37:88:f3:bd:32:66:a7:b2:ce:8f:14:52:5c: a7:67:2e:29:0e:60:9c:69:dc:7d:e5:24:a4:e9:61:fe:79:99: 2e:b8:2e:38:f3:d4:47:dd:48:1b:a2:81:f5:1a:f4:c9:99:dd: 26:7e:1a:85:77:e6:44:83:69:f3:5b:86:0c:d3:8e:cb:49:03: 58:e7:b8:8b:01:65:50:a2:4c:49:c0:e4:99:e9:d6:1b:67:a5: ed:4b:f7:7c:ad:18:80:a7:15:77:ce:b8:a7:0e:f5:bb:6b:f4: 1f:b2:90:7f:28:05:93:2c:ef:b9:ca:41:8f:80:2e:07:cc:cd: 49:21:04:7b:d9:52:d7:55:41:b1:83:2e:56:3b:4f:9c:df:23: 91:bf:45:6c:34:c4:e2:34:f4:ba:76:4e:30:9b:4d:e4:5c:8b: f8:f2:29:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2Q5Xw1C1e8SI/iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAzMDEwMTMxNVoXDTI1MDEyODExMTMxNVowLzEtMCsGA1UEAxMk ZWFlZTliODUtNTc3MC00NTZlLTk1MDEtZTQwYjhlM2QwMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA/t60ZX3LH9eyd5w/M9gHR8GdEgfW5yZEH2 DdLbNk83N6BTaw4FylEmWvScer+/Hi5mIOCY/gg+cPNLFIxtGKfBEHMEh6N42zFB RhyiznXti9OHuzEBgCNDXn3Mji8xn1HB7y4J7ISrwcyfx28g25JmpbwwJs7V6kdU QOi9BRpht2XvqDDKjrg1hIOSgmkQh0Qaj7lSfNIAZp2XwBGgjf0bTq+zmPVsVqpq vnEfvendEiTHD8PYV0eQzx40fZe1EHsz1JhsTj5Iw3nT4RdM4NiQOGY+F3MvYufN ZfgHn4am9tEgi6BujmBOm/24UbmmKgWgwVMI5+FH4ZE4buKIkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrhfLdwVlrUbHlE+fbl15hNivACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjE5ZWQxZGEtYzk1Yy0z YWY2LTkyNDgtMzcwN2Y1MzAwOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOpXblltau+iR/DjZy1UX0WwEsQGy5WK4tRdvMvq8xyQ1bBMLYqK1AI JLHzFjM1sOgiggn2me2qm6lkoYPwLq0fO87FnC+kfHo5owi2I7+y74YCyHRbIbbb nyoFc6lBN4jzvTJmp7LOjxRSXKdnLikOYJxp3H3lJKTpYf55mS64Ljjz1EfdSBui gfUa9MmZ3SZ+GoV35kSDafNbhgzTjstJA1jnuIsBZVCiTEnA5Jnp1htnpe1L93yt GICnFXfOuKcO9btr9B+ykH8oBZMs77nKQY+ALgfMzUkhBHvZUtdVQbGDLlY7T5zf I5G/RWw0xOI09Lp2TjCbTeRci/jyKVY= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:05 2024 by rpki-client on console-fra.rpki-client.org