$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa File: 21be8a54-9d15-3bcf-b328-06e1c263d460.roa (raw, json) Hash identifier: Lzw/XqD0WL+XQmxsdMo9bSltZ4r3X4ZjCQlecckxQx4= Subject key identifier: BA:F6:86:40:03:23:AD:7F:1E:DB:E5:AB:AA:8F:73:C3:4B:B5:E4:6F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847D4049AE70DC471971C368380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 3356 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:9a:e7:0d:c4:71:97:1c:36:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=4c838b41-afd9-4ea6-bfe0-2eb2902a1622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:50:cf:90:2e:05:ee:5d:81:8e:9a:47:c6: 2a:79:bc:f7:68:48:6f:74:6d:7d:9d:0f:ce:14:6c: 86:44:18:ba:86:fe:99:bc:40:d2:eb:96:92:ee:3f: c3:0f:ca:59:ae:e4:89:86:62:a6:74:16:14:8f:48: 60:64:c2:2f:b4:6c:fc:a7:e6:8f:ae:58:9a:af:49: d7:5e:03:01:ac:9e:3a:30:f7:ac:b3:17:f2:be:37: 5e:43:92:fd:c3:f1:0a:5e:84:aa:73:28:49:59:e5: c0:87:46:c9:cd:5a:50:b9:51:b9:12:58:de:83:72: 91:d6:ec:52:b6:06:fa:76:c6:f9:88:7b:8e:1d:65: 70:7d:5f:14:42:7a:f2:9b:46:57:8c:91:1b:cc:63: 6c:57:9a:13:6b:6f:12:1c:b7:da:d6:16:4f:04:fe: a3:aa:81:77:68:01:44:37:a5:57:d0:12:a6:77:db: 70:68:42:88:f6:db:0b:e1:40:87:f0:af:47:dc:a1: 4f:37:7b:ff:44:6f:aa:55:c3:ec:a1:e5:3c:2d:7d: 92:b4:ce:5d:32:b2:13:bf:55:76:76:52:42:5c:14: 58:c2:ff:1a:44:47:39:4a:2f:31:77:4d:a7:ed:ab: 26:f4:b8:83:d8:ba:25:eb:19:08:a4:8a:db:f0:fc: 81:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F6:86:40:03:23:AD:7F:1E:DB:E5:AB:AA:8F:73:C3:4B:B5:E4:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:d1:f3:e5:10:df:16:da:42:0b:8b:d0:28:fb:59:42:18:24: a4:c7:6f:c2:d1:71:59:7d:73:a3:63:f7:5d:5f:72:0a:ce:97: 85:72:0c:f9:d1:2e:bd:ed:d6:b3:b2:60:d8:1d:e3:67:ee:75: 37:f4:43:e8:88:7b:95:47:ca:75:91:dc:8f:30:bb:5f:ac:40: 04:25:d3:34:6e:e7:7c:1f:56:6c:eb:d6:fc:28:a2:a0:b4:7d: b4:31:fa:c3:b1:b5:22:92:7c:93:d0:f1:29:56:ca:dd:ab:be: 02:f2:06:da:24:16:3f:5e:26:31:85:06:0c:13:a5:ce:e0:ec: 65:d3:30:db:8c:6b:6b:c1:f4:8b:eb:e0:f7:9f:cb:a2:ab:e2: 04:0f:c9:03:3f:15:3e:f5:36:98:c4:57:88:cd:c0:eb:6a:a5: fe:f5:8f:12:83:ac:ee:86:88:b5:7e:10:bd:4f:b3:6a:7d:f0: 60:ca:2f:02:e5:cb:46:4c:a8:f0:e0:19:1c:95:06:cc:ec:2f: f9:d8:43:e9:09:c9:b3:4b:0b:d0:ab:05:51:f8:23:ac:6f:c8: 60:a0:20:b1:6d:8a:93:79:bd:d5:92:31:4c:44:a7:67:c9:91: 12:fb:f1:38:99:9f:2e:5e:7b:10:1c:dd:09:76:d6:79:28:ed: 7d:94:27:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJrnDcRxlxw2g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk NGM4MzhiNDEtYWZkOS00ZWE2LWJmZTAtMmViMjkwMmExNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmhQz5AuBe5dgY6aR8Yqebz3aEhvdG19nQ/O FGyGRBi6hv6ZvEDS65aS7j/DD8pZruSJhmKmdBYUj0hgZMIvtGz8p+aPrliar0nX XgMBrJ46MPessxfyvjdeQ5L9w/EKXoSqcyhJWeXAh0bJzVpQuVG5Eljeg3KR1uxS tgb6dsb5iHuOHWVwfV8UQnrym0ZXjJEbzGNsV5oTa28SHLfa1hZPBP6jqoF3aAFE N6VX0BKmd9twaEKI9tsL4UCH8K9H3KFPN3v/RG+qVcPsoeU8LX2StM5dMrITv1V2 dlJCXBRYwv8aREc5Si8xd02n7asm9LiD2Lol6xkIpIrb8PyBCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr2hkADI61/Htvlq6qPc8NLteRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjFiZThhNTQtOWQxNS0z YmNmLWIzMjgtMDZlMWMyNjNkNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrR8+UQ3xbaQguL0Cj7WUIYJKTHb8LRcVl9c6Nj911fcgrOl4VyDPnR Lr3t1rOyYNgd42fudTf0Q+iIe5VHynWR3I8wu1+sQAQl0zRu53wfVmzr1vwooqC0 fbQx+sOxtSKSfJPQ8SlWyt2rvgLyBtokFj9eJjGFBgwTpc7g7GXTMNuMa2vB9Ivr 4Pefy6Kr4gQPyQM/FT71NpjEV4jNwOtqpf71jxKDrO6GiLV+EL1Ps2p98GDKLwLl y0ZMqPDgGRyVBszsL/nYQ+kJybNLC9CrBVH4I6xvyGCgILFtipN5vdWSMUxEp2fJ kRL78TiZny5eexAc3Ql21nko7X2UJ28= -----END CERTIFICATE-----Generated at Mon Nov 25 02:49:13 2024 by rpki-client on console-ams.rpki-client.org