$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3989cb7f-3f62-37f5-8845-e04d58c55e13.roa File: 3989cb7f-3f62-37f5-8845-e04d58c55e13.roa (raw, json) Hash identifier: P7uzevdhZ/CvgPuWqrmSWPJM5Md3dPhLJ0DKk+RjT+E= Subject key identifier: 04:A5:EA:E4:E0:F7:47:C4:6F:00:7A:EC:E0:28:E2:86:95:BA:9E:F9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285845E4921C8519EC6918B83D09F0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3989cb7f-3f62-37f5-8845-e04d58c55e13.roa Signing time: Thu 16 May 2024 14:44:46 +0000 ROA not before: Thu 16 May 2024 14:44:46 +0000 ROA not after: Wed 14 Aug 2024 14:44:46 +0000 asID: 3356 IP address blocks: 20.148.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e4:92:1c:85:19:ec:69:18:b8:3d:09:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 16 14:44:46 2024 GMT Not After : Aug 14 14:44:46 2024 GMT Subject: CN=382fe568-320b-49f1-8e24-b4172cfa1d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:f9:5e:1c:5f:78:4b:37:ed:2e:00:18:1b: ed:0c:73:8a:87:2b:ab:1a:2a:39:02:bb:e5:46:db: 5c:bb:c2:0a:06:52:c5:73:d6:ca:95:83:4b:c4:f4: 71:e4:97:82:38:2f:c0:d6:58:3a:5c:17:ce:36:ce: 7f:ea:22:4d:c8:7c:50:e9:78:17:b3:fd:7f:b0:2c: 8f:2a:fa:f2:14:eb:25:43:a3:0e:5c:44:81:48:2f: 19:74:ef:4d:1c:35:06:9c:22:88:42:56:3c:a9:66: f7:30:55:94:55:6c:56:e4:51:9e:e0:65:b6:a4:0f: 05:a1:9a:77:db:0a:44:47:64:89:a7:d9:59:49:89: 37:60:2b:5a:b7:49:2f:18:1c:22:f4:b5:cd:6b:ad: 44:e4:0e:27:91:2f:2e:80:4a:e5:d6:f3:36:17:48: dd:24:8d:f6:b5:36:57:8b:35:4c:7c:72:ff:c4:bc: 47:24:55:82:9e:08:1e:e1:e9:8c:da:9a:4c:50:33: a8:b3:4e:5a:b2:56:1a:b4:81:b4:d4:10:2e:c7:e3: 88:d9:b7:9e:06:ce:b4:c0:7a:a2:cb:85:3c:9f:9e: d0:11:94:ae:5d:a5:b8:a9:73:14:47:7d:01:41:98: e1:4a:5c:66:57:4d:94:93:b4:cb:15:7f:ee:93:20: e5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A5:EA:E4:E0:F7:47:C4:6F:00:7A:EC:E0:28:E2:86:95:BA:9E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3989cb7f-3f62-37f5-8845-e04d58c55e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:59:3d:b6:dc:2f:e8:46:31:46:2e:64:89:4d:39:ea:78:1a: 14:37:a2:fd:c7:4e:86:8e:61:ba:b8:4e:52:bc:06:8c:ce:cf: a4:3f:59:68:b7:b5:bc:d1:58:26:b0:77:41:24:e4:00:d1:6b: ac:92:0d:a0:2c:42:ff:e2:60:2e:0d:2a:08:af:86:8a:06:d7: 9d:b7:79:e0:7d:b1:2c:b4:ed:98:27:0b:97:85:8e:b2:ec:3c: c9:d6:c9:1c:6b:16:64:42:9e:22:23:0d:7e:58:7f:58:e5:d8: 2b:2e:d8:85:fe:12:5d:b7:c9:43:db:bc:bc:01:c5:c2:6d:b7: 2c:bf:ac:21:df:05:1f:79:54:6e:d9:d5:c2:58:c3:a1:c9:8a: 32:7c:48:6b:4e:f0:7c:d8:8a:f6:a5:e7:a6:47:b1:52:85:d7: 6b:eb:27:d6:30:27:05:a0:8a:7e:b3:c5:fa:28:cd:a5:09:de: 8e:64:39:98:be:81:9e:91:3a:6a:81:38:4c:42:00:7c:cf:30: 40:40:a9:60:34:a0:7c:b9:a6:db:b7:75:cc:56:b4:93:b9:aa: 9f:d0:78:d6:70:70:94:07:b9:6f:45:b4:7f:9e:44:b8:83:c7: 4b:ce:19:89:e6:be:79:ed:11:b4:fb:f0:f0:28:62:d9:0c:e6: 31:e0:dd:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXkkhyFGexpGLg9CfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDUxNjE0NDQ0NloXDTI0MDgxNDE0NDQ0NlowLzEtMCsGA1UEAxMk MzgyZmU1NjgtMzIwYi00OWYxLThlMjQtYjQxNzJjZmExZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ35XhxfeEs37S4AGBvtDHOKhyurGio5Arvl Rttcu8IKBlLFc9bKlYNLxPRx5JeCOC/A1lg6XBfONs5/6iJNyHxQ6XgXs/1/sCyP KvryFOslQ6MOXESBSC8ZdO9NHDUGnCKIQlY8qWb3MFWUVWxW5FGe4GW2pA8FoZp3 2wpER2SJp9lZSYk3YCtat0kvGBwi9LXNa61E5A4nkS8ugErl1vM2F0jdJI32tTZX izVMfHL/xLxHJFWCngge4emM2ppMUDOos05aslYatIG01BAux+OI2beeBs60wHqi y4U8n57QEZSuXaW4qXMUR30BQZjhSlxmV02Uk7TLFX/ukyDlGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASl6uTg90fEbwB67OAo4oaVup75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzk4OWNiN2YtM2Y2Mi0z N2Y1LTg4NDUtZTA0ZDU4YzU1ZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlZPbbcL+hGMUYuZIlNOep4GhQ3ov3HToaOYbq4TlK8BozOz6Q/WWi3 tbzRWCawd0Ek5ADRa6ySDaAsQv/iYC4NKgivhooG1523eeB9sSy07ZgnC5eFjrLs PMnWyRxrFmRCniIjDX5Yf1jl2Csu2IX+El23yUPbvLwBxcJttyy/rCHfBR95VG7Z 1cJYw6HJijJ8SGtO8HzYival56ZHsVKF12vrJ9YwJwWgin6zxfoozaUJ3o5kOZi+ gZ6ROmqBOExCAHzPMEBAqWA0oHy5ptu3dcxWtJO5qp/QeNZwcJQHuW9FtH+eRLiD x0vOGYnmvnntEbT78PAoYtkM5jHg3ZM= -----END CERTIFICATE-----Generated at Sat Jun 1 11:49:09 2024 by rpki-client on console-ams.rpki-client.org