$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa File: 24f0832c-135e-30d8-934a-392b9947dce4.roa (raw, json) Hash identifier: p77vcTSwtecEwsbJFzVlm+abT0eTIme/ovde5g7bU+o= Subject key identifier: 8C:F3:1F:96:6B:9D:62:8F:EC:1D:82:11:3E:F6:D0:73:86:2D:4C:41 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847D4049B78593B3B143123EE00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 3360 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:9b:78:59:3b:3b:14:31:23:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=ff339666-f394-4af9-a0b0-96afa98e4ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c4:0b:f6:2e:b9:8e:d2:4d:67:a6:c9:1c:c6: 2d:f6:e7:3c:92:15:20:6b:fe:fc:df:75:88:d9:d7: 65:29:e5:fd:31:36:f7:80:d3:aa:84:61:93:91:12: a0:b7:a4:4a:e0:da:53:22:29:eb:c0:38:f7:9e:d1: 26:06:85:64:26:97:2e:5c:44:a0:2e:4c:64:8f:4b: 95:87:bd:7b:6b:d2:4b:c6:f5:5e:92:2a:a6:6d:01: 35:3a:59:00:25:cd:b1:91:46:07:ba:e0:f9:6a:db: 9c:7c:cb:1b:8a:ae:0e:69:28:2d:fe:35:23:35:97: 8e:08:38:a8:f9:e0:cb:08:99:9e:43:94:8a:0b:6b: 46:93:54:a6:f8:07:cd:e3:a5:4f:06:bd:bf:40:fe: 9f:2b:c6:55:13:dd:a0:0b:29:9c:8c:16:53:ff:02: d9:7f:48:a9:21:16:09:91:0f:0f:79:03:b4:c7:51: 67:eb:28:81:5e:65:d4:6c:f4:40:61:b2:25:c5:e7: c5:c0:93:aa:10:20:8a:f7:b8:ae:4f:d4:f0:be:50: f3:d8:98:95:cb:21:ad:95:e9:85:7e:04:97:3b:e9: 90:cc:c6:94:42:98:53:05:84:14:be:5f:5f:4a:38: 3e:06:fa:b7:df:e3:0e:87:ef:df:88:f3:21:0d:d6: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F3:1F:96:6B:9D:62:8F:EC:1D:82:11:3E:F6:D0:73:86:2D:4C:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:3d:5a:6b:cb:3e:0a:52:3c:d5:a0:b1:1b:f1:64:22:4a:a9: 94:2a:0b:c5:b8:42:02:f3:fb:eb:da:57:74:ce:f8:d5:47:65: 35:87:bd:2d:b2:08:3d:45:6b:95:23:99:37:d3:9e:50:6f:19: 21:83:28:4e:34:c0:d6:71:28:80:bb:93:18:96:92:e6:2d:74: 75:fd:47:be:cf:32:d4:72:0e:6a:42:c3:8c:09:a3:fe:7f:93: 38:91:d1:31:13:47:0f:0e:c8:72:04:c8:9f:97:fd:3a:a1:7d: b5:5a:35:20:ce:32:58:22:93:81:02:30:f2:0d:cc:6c:66:12: 38:6f:61:5d:ed:60:ad:61:76:0c:65:e6:41:93:56:1b:9d:d5: 12:27:fd:52:af:fa:64:8a:49:e6:13:be:8a:4d:8f:e7:7b:2a: b9:f2:d5:d2:90:dc:c5:36:65:b5:ba:62:1d:42:6d:ea:04:ef: 16:6c:a1:51:30:b7:b0:8e:29:10:1d:70:d1:69:0d:11:5a:d4: 11:57:75:44:a1:5c:57:4f:b6:e6:60:95:86:8e:e5:4e:06:af: b0:56:a7:b0:28:7e:3f:05:7d:3e:10:3b:ab:5c:8c:f6:c5:09: b3:c0:99:08:21:21:a1:23:f4:89:4e:d0:06:9b:44:a7:d8:26: ee:14:b9:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJt4WTs7FDEj7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk ZmYzMzk2NjYtZjM5NC00YWY5LWEwYjAtOTZhZmE5OGU0ZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48QL9i65jtJNZ6bJHMYt9uc8khUga/7833WI 2ddlKeX9MTb3gNOqhGGTkRKgt6RK4NpTIinrwDj3ntEmBoVkJpcuXESgLkxkj0uV h717a9JLxvVekiqmbQE1OlkAJc2xkUYHuuD5atucfMsbiq4OaSgt/jUjNZeOCDio +eDLCJmeQ5SKC2tGk1Sm+AfN46VPBr2/QP6fK8ZVE92gCymcjBZT/wLZf0ipIRYJ kQ8PeQO0x1Fn6yiBXmXUbPRAYbIlxefFwJOqECCK97iuT9TwvlDz2JiVyyGtlemF fgSXO+mQzMaUQphTBYQUvl9fSjg+Bvq33+MOh+/fiPMhDdYfrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzzH5ZrnWKP7B2CET720HOGLUxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjRmMDgzMmMtMTM1ZS0z MGQ4LTkzNGEtMzkyYjk5NDdkY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI09WmvLPgpSPNWgsRvxZCJKqZQqC8W4QgLz++vaV3TO+NVHZTWHvS2y CD1Fa5UjmTfTnlBvGSGDKE40wNZxKIC7kxiWkuYtdHX9R77PMtRyDmpCw4wJo/5/ kziR0TETRw8OyHIEyJ+X/TqhfbVaNSDOMlgik4ECMPINzGxmEjhvYV3tYK1hdgxl 5kGTVhud1RIn/VKv+mSKSeYTvopNj+d7Krny1dKQ3MU2ZbW6Yh1CbeoE7xZsoVEw t7COKRAdcNFpDRFa1BFXdUShXFdPtuZglYaO5U4Gr7BWp7Aofj8FfT4QO6tcjPbF CbPAmQghIaEj9IlO0AabRKfYJu4Uuec= -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:38 2024 by rpki-client on console-fra.rpki-client.org