$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3f2833ac-157e-37b1-becc-804d27b61dee.roa File: 3f2833ac-157e-37b1-becc-804d27b61dee.roa (raw, json) Hash identifier: tMdsNOkA1ILRrmgiU26ffLXV47zwqqQiI6O7sJexCZY= Subject key identifier: EA:21:02:E3:CF:05:4C:45:56:3A:75:45:8B:CD:97:8D:35:AA:EB:75 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285845174ADB82FC9A8376A424AA00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3f2833ac-157e-37b1-becc-804d27b61dee.roa Signing time: Mon 04 Mar 2024 02:00:26 +0000 ROA not before: Mon 04 Mar 2024 02:00:26 +0000 ROA not after: Sun 02 Jun 2024 01:00:26 +0000 asID: 5624 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:17:4a:db:82:fc:9a:83:76:a4:24:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 4 02:00:26 2024 GMT Not After : Jun 2 01:00:26 2024 GMT Subject: CN=22c0d35f-6c06-4f61-82ba-b78f1b38c46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:14:0f:37:35:88:c6:49:36:54:f1:e0:78:83: e4:3a:f1:53:da:1e:d9:5d:de:72:f3:b0:d5:3a:58: ff:d6:30:c9:bd:d4:08:d2:0b:dd:1d:3a:a3:5b:0a: b1:e2:e2:87:c6:5e:36:c7:b2:8b:bd:5a:74:30:9a: 49:ae:4f:a1:df:87:9d:19:91:da:39:33:b9:f4:d8: fc:8c:ba:40:82:53:de:68:e9:be:45:8f:e3:01:bd: 87:5c:a0:24:4e:1f:7f:62:e3:d8:eb:02:9f:77:e3: c2:4d:c9:98:9b:b4:f7:b3:c8:54:2b:66:c1:fc:ae: 12:1b:e5:74:f5:c2:1e:f8:9e:fd:5a:1c:5e:ef:97: 5d:19:1b:33:dc:2f:34:af:44:4f:86:0c:79:b9:94: 3a:11:c4:55:68:bd:a4:c1:57:93:8c:2c:44:39:0b: bd:bd:1f:8a:eb:b2:98:ea:6d:79:92:c1:41:1d:ca: 06:96:91:a2:77:44:1f:5c:5b:01:ea:f2:89:92:83: b0:6b:89:68:2e:3b:6c:fa:37:03:03:5e:75:58:be: f4:aa:84:75:23:8d:67:ce:be:07:32:2d:2c:76:5b: 60:f3:aa:6d:d1:6e:63:ab:f3:5b:c6:35:a2:ef:97: 4c:3c:0b:c6:16:5e:0f:1a:12:bc:e8:c2:04:85:47: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:21:02:E3:CF:05:4C:45:56:3A:75:45:8B:CD:97:8D:35:AA:EB:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3f2833ac-157e-37b1-becc-804d27b61dee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:39:c0:4e:90:b6:30:2a:76:c3:c6:1f:a2:37:47:3d:79:a2: 9d:51:a2:9e:89:9b:65:19:f3:0f:37:8d:19:02:75:ae:4d:9a: 26:e0:ed:29:09:aa:28:9d:32:77:d8:e6:b5:c8:6f:11:96:ad: 2c:93:3d:ef:0b:91:a1:56:9f:f7:59:d4:48:d4:b6:16:2e:46: ea:7a:53:29:89:07:3a:87:7c:86:b3:71:5d:d9:4f:84:18:9a: 12:8b:e8:b2:a4:22:3c:d7:64:50:2a:54:f7:00:4b:60:3d:8f: 3f:d4:d3:6a:4e:80:02:d6:e1:5e:36:b5:9c:a2:b6:82:54:c5: 14:70:67:3e:5f:a1:85:d8:ea:03:33:a0:12:7f:0b:70:51:7b: a1:f4:fd:9a:e2:e5:48:6d:7c:5d:85:7d:35:95:94:4d:97:8c: 1b:34:61:1d:b7:27:3b:83:f7:69:c8:e5:fa:f3:50:d5:d6:2f: c1:5f:c6:6e:9c:d9:b2:0d:7c:01:87:46:e4:cb:fe:59:70:7a: 55:c9:2c:58:b6:53:8b:51:6b:0a:9f:9d:ab:f7:35:8f:e3:0a: e2:c5:a5:65:53:10:50:b9:5e:ff:b9:70:b7:8a:47:11:3a:6b: 1f:0c:37:5b:eb:a2:6b:7b:79:64:56:71:9e:2d:22:cb:5c:79: 11:de:0d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUXStuC/JqDdqQkqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDMwNDAyMDAyNloXDTI0MDYwMjAxMDAyNlowLzEtMCsGA1UEAxMk MjJjMGQzNWYtNmMwNi00ZjYxLTgyYmEtYjc4ZjFiMzhjNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRQPNzWIxkk2VPHgeIPkOvFT2h7ZXd5y87DV Olj/1jDJvdQI0gvdHTqjWwqx4uKHxl42x7KLvVp0MJpJrk+h34edGZHaOTO59Nj8 jLpAglPeaOm+RY/jAb2HXKAkTh9/YuPY6wKfd+PCTcmYm7T3s8hUK2bB/K4SG+V0 9cIe+J79Whxe75ddGRsz3C80r0RPhgx5uZQ6EcRVaL2kwVeTjCxEOQu9vR+K67KY 6m15ksFBHcoGlpGid0QfXFsB6vKJkoOwa4loLjts+jcDA151WL70qoR1I41nzr4H Mi0sdltg86pt0W5jq/NbxjWi75dMPAvGFl4PGhK86MIEhUetiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOohAuPPBUxFVjp1RYvNl401qut1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2YyODMzYWMtMTU3ZS0z N2IxLWJlY2MtODA0ZDI3YjYxZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE5wE6QtjAqdsPGH6I3Rz15op1Rop6Jm2UZ8w83jRkCda5Nmibg7SkJ qiidMnfY5rXIbxGWrSyTPe8LkaFWn/dZ1EjUthYuRup6UymJBzqHfIazcV3ZT4QY mhKL6LKkIjzXZFAqVPcAS2A9jz/U02pOgALW4V42tZyitoJUxRRwZz5foYXY6gMz oBJ/C3BRe6H0/Zri5UhtfF2FfTWVlE2XjBs0YR23JzuD92nI5frzUNXWL8Ffxm6c 2bINfAGHRuTL/llwelXJLFi2U4tRawqfnav3NY/jCuLFpWVTEFC5Xv+5cLeKRxE6 ax8MN1vromt7eWRWcZ4tIstceRHeDYY= -----END CERTIFICATE-----Generated at Sun May 19 01:47:25 2024 by rpki-client on console-ams.rpki-client.org