$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36004745-694e-3446-88c5-0d0217e06d6f.roa File: 36004745-694e-3446-88c5-0d0217e06d6f.roa (raw, json) Hash identifier: cF9f4MowJXZ65tFa9hSYGzVqVyblm7jrNG5BgjKpMMA= Subject key identifier: 23:D3:A9:89:7A:FB:5E:5D:E5:BD:09:3A:0E:BB:92:02:F0:9F:8F:1F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858476B686117B17220F386950E80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36004745-694e-3446-88c5-0d0217e06d6f.roa Signing time: Thu 03 Oct 2024 14:41:45 +0000 ROA not before: Thu 03 Oct 2024 14:41:45 +0000 ROA not after: Wed 01 Jan 2025 15:41:45 +0000 asID: 3356 IP address blocks: 20.148.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:68:61:17:b1:72:20:f3:86:95:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 3 14:41:45 2024 GMT Not After : Jan 1 15:41:45 2025 GMT Subject: CN=a4422633-5bfb-4681-87d1-8af98cefd3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:28:80:ab:1f:1e:0a:73:89:20:49:08:66: 49:a5:3b:7c:38:eb:4f:84:ce:fc:3c:7d:7b:72:95: e3:e3:57:0a:96:82:ac:1a:09:93:28:5d:94:8d:56: be:e8:c0:d2:a5:27:6f:61:7f:18:a1:95:b5:1d:04: e6:7b:f7:2d:c3:21:ed:63:86:1f:97:eb:5c:2c:8a: 36:8d:b7:8f:1a:c6:27:fd:a3:21:ef:78:8f:dc:6d: 8a:eb:4b:1d:10:8c:e7:a8:ac:69:c9:fb:57:c4:96: f8:7d:35:7c:16:63:e6:e1:c0:1b:8a:d8:a8:05:70: 41:0d:87:b3:84:70:8f:9e:60:65:e1:7a:da:50:a7: d7:52:ed:78:26:08:88:9b:33:1c:9b:93:1f:0c:85: df:cf:e2:2b:d4:78:96:e9:13:29:0e:46:2d:99:9f: 79:83:f1:a7:b4:e3:61:d9:15:c9:54:44:e3:42:60: 8a:6c:42:5c:c7:0d:e6:19:5f:01:24:04:8b:9e:6d: ad:c2:b5:f0:f8:e1:34:d9:19:0d:ff:2e:e7:d6:fb: 78:39:4c:93:bf:38:4a:ae:ce:2a:5e:6c:32:6b:10: 69:90:c5:83:11:e4:81:48:82:df:93:9d:1c:43:33: c8:42:8b:1f:31:4f:8d:9f:c5:d7:e9:a3:46:8f:5a: 37:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D3:A9:89:7A:FB:5E:5D:E5:BD:09:3A:0E:BB:92:02:F0:9F:8F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36004745-694e-3446-88c5-0d0217e06d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:66:b3:83:8c:53:0d:e8:9a:c5:93:f7:4a:d1:37:87:8a:bb: d0:44:48:e9:08:8e:6c:8a:5c:8b:9c:82:7c:a9:b6:d1:25:ae: f6:24:7d:fe:3a:2b:ab:cd:45:7e:11:d3:f3:87:41:2b:47:47: 02:9c:bd:38:1e:fc:a4:2b:73:cf:25:11:4c:6a:f5:bd:6c:58: ef:a9:5b:a7:69:ae:31:fd:02:4f:70:47:c1:6c:84:2d:6e:3b: 5d:09:d7:88:cb:bd:ae:99:6c:35:32:83:eb:96:63:0b:ea:f9: cb:e1:0c:f0:5a:c0:86:60:74:57:0d:c9:e4:c0:e8:0f:51:5c: 79:ee:ce:3b:07:62:65:91:91:9d:5c:5b:7d:04:67:05:6b:96: c4:27:e3:67:a9:82:de:eb:5a:52:8e:5d:df:8f:ed:90:c1:6d: c2:2f:a0:55:6f:b1:09:94:55:77:92:f5:ad:7d:a6:dc:29:03: 62:a3:80:a9:ee:61:27:0c:9a:2a:2b:da:ac:d1:0f:a1:76:37: ce:73:bd:d6:d7:65:6f:55:36:59:a1:f8:0c:62:a9:26:f9:d5: 80:f1:48:5c:c9:eb:29:3c:14:fe:e1:4b:1e:fb:05:af:22:32: 54:0c:76:ed:86:b8:04:3c:c3:58:fa:be:f0:b5:16:79:00:a4: 8a:1d:28:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdraGEXsXIg84aVDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAwMzE0NDE0NVoXDTI1MDEwMTE1NDE0NVowLzEtMCsGA1UEAxMk YTQ0MjI2MzMtNWJmYi00NjgxLTg3ZDEtOGFmOThjZWZkM2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQMogKsfHgpziSBJCGZJpTt8OOtPhM78PH17 cpXj41cKloKsGgmTKF2UjVa+6MDSpSdvYX8YoZW1HQTme/ctwyHtY4Yfl+tcLIo2 jbePGsYn/aMh73iP3G2K60sdEIznqKxpyftXxJb4fTV8FmPm4cAbitioBXBBDYez hHCPnmBl4XraUKfXUu14JgiImzMcm5MfDIXfz+Ir1HiW6RMpDkYtmZ95g/GntONh 2RXJVETjQmCKbEJcxw3mGV8BJASLnm2twrXw+OE02RkN/y7n1vt4OUyTvzhKrs4q XmwyaxBpkMWDEeSBSILfk50cQzPIQosfMU+Nn8XX6aNGj1o3AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPTqYl6+15d5b0JOg67kgLwn48fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzYwMDQ3NDUtNjk0ZS0z NDQ2LTg4YzUtMGQwMjE3ZTA2ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1ms4OMUw3omsWT90rRN4eKu9BESOkIjmyKXIucgnypttElrvYkff46 K6vNRX4R0/OHQStHRwKcvTge/KQrc88lEUxq9b1sWO+pW6dprjH9Ak9wR8FshC1u O10J14jLva6ZbDUyg+uWYwvq+cvhDPBawIZgdFcNyeTA6A9RXHnuzjsHYmWRkZ1c W30EZwVrlsQn42epgt7rWlKOXd+P7ZDBbcIvoFVvsQmUVXeS9a19ptwpA2KjgKnu YScMmior2qzRD6F2N85zvdbXZW9VNlmh+AxiqSb51YDxSFzJ6yk8FP7hSx77Ba8i MlQMdu2GuAQ8w1j6vvC1FnkApIodKIE= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:22 2024 by rpki-client on console-ams.rpki-client.org