$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2a223d8a-8020-37ab-ada4-266cfb37ac8a.roa File: 2a223d8a-8020-37ab-ada4-266cfb37ac8a.roa (raw, json) Hash identifier: 6RjkO//Mof9I1XWGUXuErRvNRQPH/CoyLqoIpYGK88o= Subject key identifier: 20:4E:2E:F0:B6:66:48:AE:FF:F5:C7:48:CB:E9:7F:79:50:5F:54:9A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847643B7281654C70A0E29F7BC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2a223d8a-8020-37ab-ada4-266cfb37ac8a.roa Signing time: Tue 01 Oct 2024 01:00:31 +0000 ROA not before: Tue 01 Oct 2024 01:00:31 +0000 ROA not after: Mon 30 Dec 2024 02:00:31 +0000 asID: 4237 IP address blocks: 20.148.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:64:3b:72:81:65:4c:70:a0:e2:9f:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 1 01:00:31 2024 GMT Not After : Dec 30 02:00:31 2024 GMT Subject: CN=50147f89-3193-4c8b-8324-de937d8f46fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bd:fe:d4:ad:13:f3:7a:c7:18:6a:df:db:e0: 73:a6:2a:f7:5f:b8:c0:dc:d4:04:2b:99:f3:88:ed: 69:84:ea:4d:7d:9f:a8:67:20:d7:3d:68:d4:9f:63: 4d:2c:21:90:20:7f:84:0b:25:41:b6:c7:ce:26:90: da:9c:64:b0:09:8c:89:ef:b3:82:9f:bb:14:a6:d9: 4b:73:72:b8:dc:7c:2b:d4:ca:43:52:dd:c4:0a:dc: e1:33:70:6c:69:fe:5c:c6:b2:d3:f0:f8:5a:06:2e: 59:50:db:cf:88:89:9e:e3:5f:0a:46:23:5f:c8:d6: f2:95:d4:2f:48:e7:0a:8a:ff:da:3d:06:ed:e4:04: fa:f3:01:6f:aa:6a:77:fe:9d:41:bf:01:da:20:28: d6:d5:c3:48:93:c3:03:ab:89:3f:42:d6:4c:23:8a: 47:40:3f:41:66:bb:2a:9a:29:df:25:ee:94:2f:bf: 9f:b0:06:aa:45:5e:61:86:95:60:54:62:14:4a:ec: 03:e8:e4:42:30:bf:1b:93:c6:19:4f:94:40:b4:93: 76:b8:d9:94:45:76:df:b0:83:c8:dc:fc:1f:16:4c: 98:67:37:24:04:ca:0b:10:97:d1:98:5a:27:b0:d3: 5d:fe:b6:30:2b:05:26:ea:1e:2c:ff:c9:e5:a2:ef: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4E:2E:F0:B6:66:48:AE:FF:F5:C7:48:CB:E9:7F:79:50:5F:54:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2a223d8a-8020-37ab-ada4-266cfb37ac8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:24:3e:62:e5:62:c6:a3:fb:a6:e0:12:26:e1:37:a3:80:f8: 79:bb:b8:6f:61:d6:a6:51:1e:64:14:4d:00:3c:f5:72:ef:b7: e3:b1:cd:f1:84:24:ba:c8:b2:e4:0c:60:e6:6e:ad:85:2e:68: db:28:da:70:b7:d2:69:48:6e:e6:b0:56:45:25:a5:d7:13:2e: 25:c1:b3:72:db:18:7f:84:95:e0:ad:9d:13:77:3d:65:0e:f9: 16:60:f8:65:c7:b3:79:cb:3e:a7:4d:58:af:5c:fb:bc:88:9f: 83:94:ef:73:1b:15:ff:31:4d:bb:33:b5:a0:0f:13:8c:5b:87: 15:1f:5f:f5:7f:d1:49:88:d5:7b:63:d1:fc:b1:f3:97:95:aa: d0:53:29:7c:46:0f:b6:0b:7c:fe:92:84:d6:19:50:63:64:df: de:38:21:9a:7c:9f:32:9e:f1:f3:1d:86:ac:06:9c:1a:98:26: 1a:4d:ea:97:b4:72:41:41:53:a2:c5:9b:5d:90:7a:d4:f0:b7: 1d:27:00:2c:16:a2:0e:74:d2:e9:91:e1:9d:a4:34:a9:90:14: 88:a5:1b:6e:af:86:5f:7a:fd:4b:28:e0:97:20:e4:41:1d:6c: 28:54:96:a2:a0:7b:63:e5:76:d6:1d:37:c5:a5:55:10:25:36: de:38:43:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdkO3KBZUxwoOKfe8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAwMTAxMDAzMVoXDTI0MTIzMDAyMDAzMVowLzEtMCsGA1UEAxMk NTAxNDdmODktMzE5My00YzhiLTgzMjQtZGU5MzdkOGY0NmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb3+1K0T83rHGGrf2+Bzpir3X7jA3NQEK5nz iO1phOpNfZ+oZyDXPWjUn2NNLCGQIH+ECyVBtsfOJpDanGSwCYyJ77OCn7sUptlL c3K43Hwr1MpDUt3ECtzhM3Bsaf5cxrLT8PhaBi5ZUNvPiIme418KRiNfyNbyldQv SOcKiv/aPQbt5AT68wFvqmp3/p1BvwHaICjW1cNIk8MDq4k/QtZMI4pHQD9BZrsq minfJe6UL7+fsAaqRV5hhpVgVGIUSuwD6ORCML8bk8YZT5RAtJN2uNmURXbfsIPI 3PwfFkyYZzckBMoLEJfRmFonsNNd/rYwKwUm6h4s/8nlou9XiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBOLvC2Zkiu//XHSMvpf3lQX1SaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMmEyMjNkOGEtODAyMC0z N2FiLWFkYTQtMjY2Y2ZiMzdhYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYkPmLlYsaj+6bgEibhN6OA+Hm7uG9h1qZRHmQUTQA89XLvt+OxzfGE JLrIsuQMYOZurYUuaNso2nC30mlIbuawVkUlpdcTLiXBs3LbGH+EleCtnRN3PWUO +RZg+GXHs3nLPqdNWK9c+7yIn4OU73MbFf8xTbsztaAPE4xbhxUfX/V/0UmI1Xtj 0fyx85eVqtBTKXxGD7YLfP6ShNYZUGNk3944IZp8nzKe8fMdhqwGnBqYJhpN6pe0 ckFBU6LFm12QetTwtx0nACwWog500umR4Z2kNKmQFIilG26vhl96/Uso4Jcg5EEd bChUlqKge2PldtYdN8WlVRAlNt44Q+4= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:32 2024 by rpki-client on console-fra.rpki-client.org