$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa File: 480a876e-f9de-3a86-b420-40e0c9062435.roa (raw, json) Hash identifier: cnBunLDp/NVnH7L8yWanQi0NdVwPoqoMpSIxxlE8m9c= Subject key identifier: C8:FD:4F:CF:8C:D5:C0:3B:60:8F:C5:1E:01:BF:6E:7D:C0:B1:08:6F Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584737907C374F1189D5144D8C00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa Signing time: Sun 15 Sep 2024 01:00:30 +0000 ROA not before: Sun 15 Sep 2024 01:00:30 +0000 ROA not after: Sat 14 Dec 2024 02:00:30 +0000 asID: 203 IP address blocks: 20.134.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:37:90:7c:37:4f:11:89:d5:14:4d:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 15 01:00:30 2024 GMT Not After : Dec 14 02:00:30 2024 GMT Subject: CN=ffd00ee2-7f29-4e1e-900a-e305f37794e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:80:81:51:84:bb:a5:20:fb:50:40:2c:41:f0: b5:2e:39:08:49:7c:2d:be:18:51:25:f9:0f:ee:19: 51:b4:c8:fd:c4:64:9b:b7:bf:f5:2e:5e:76:5c:bc: cd:95:e5:9a:17:78:37:3f:99:41:9b:b6:d4:2f:b9: b8:c6:00:0d:a5:02:fb:ea:89:ba:bd:9b:43:a3:ef: d3:48:a3:80:e7:cc:69:c5:3c:4b:71:96:dc:95:c1: 3f:73:08:ca:7c:c3:19:9c:6b:50:22:43:12:47:8e: 20:53:d9:bc:2b:5a:9b:ab:e4:a2:b1:d5:3a:0b:fa: 33:f5:f3:27:70:35:35:f9:ba:d5:1e:75:3c:a3:65: a9:2b:ad:76:4b:41:d2:74:e7:5c:35:2e:5e:a6:c0: 91:fd:73:49:e9:10:b4:c0:20:89:b2:a0:0c:95:72: ad:0e:94:66:f5:a1:2a:9b:83:fc:dd:41:2b:c7:29: 8f:a1:56:dc:1a:7c:6a:3f:2c:9f:4a:20:8c:0a:09: ea:a9:31:ca:1f:ff:e7:eb:07:9c:a0:cb:ba:fe:62: cb:7a:53:3d:4c:ba:44:0b:1d:29:85:a7:44:3c:91: 28:28:97:14:1b:58:54:00:ed:5b:21:f7:16:53:72: ae:d9:41:26:67:10:08:7a:9c:c5:38:02:9c:56:95: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FD:4F:CF:8C:D5:C0:3B:60:8F:C5:1E:01:BF:6E:7D:C0:B1:08:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5b:fb:b6:04:69:a3:69:48:13:f3:59:ef:da:a9:fd:31:6d: 5e:f0:94:60:8c:dd:75:c4:10:b6:d7:e1:cc:a7:88:f7:24:70: b0:e6:09:e6:f6:ae:9f:0b:6f:4e:5e:fe:f0:b3:48:97:d8:05: b4:d3:8d:26:b2:79:d6:a0:99:e5:c5:a5:dc:37:e2:1b:22:d5: c8:77:59:f6:f4:1d:3a:10:9d:3a:86:64:51:4c:0d:dd:e5:5e: c2:5e:fc:52:53:d4:9a:f0:0f:19:ad:2b:bd:d6:a3:53:52:89: 00:15:6c:6a:8f:df:7c:c6:10:cb:3b:3d:d3:86:93:d1:85:42: 17:f6:7b:20:b1:23:e4:bc:3e:22:bd:02:3e:55:44:fa:12:48: 16:31:54:f1:15:76:bf:61:a4:b8:8c:a6:14:df:c5:cd:99:0c: ff:bc:53:c7:66:88:1f:82:d9:ff:c3:6b:67:23:80:51:3f:2d: b7:0a:c3:ed:31:9a:79:33:87:88:a5:ba:90:a1:fb:ca:d3:47: 1e:5a:51:ef:60:63:37:d4:18:cc:a6:4d:45:1f:ee:2e:8a:32: 68:2b:46:98:b7:97:3e:c4:d7:9a:25:54:5a:ea:65:4e:6c:d6: c6:eb:2d:3e:04:03:1c:7c:c6:eb:75:fc:2c:e9:3f:d2:c1:cb: 58:d5:b8:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc3kHw3TxGJ1RRNjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDkxNTAxMDAzMFoXDTI0MTIxNDAyMDAzMFowLzEtMCsGA1UEAxMk ZmZkMDBlZTItN2YyOS00ZTFlLTkwMGEtZTMwNWYzNzc5NGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYCBUYS7pSD7UEAsQfC1LjkISXwtvhhRJfkP 7hlRtMj9xGSbt7/1Ll52XLzNleWaF3g3P5lBm7bUL7m4xgANpQL76om6vZtDo+/T SKOA58xpxTxLcZbclcE/cwjKfMMZnGtQIkMSR44gU9m8K1qbq+SisdU6C/oz9fMn cDU1+brVHnU8o2WpK612S0HSdOdcNS5epsCR/XNJ6RC0wCCJsqAMlXKtDpRm9aEq m4P83UErxymPoVbcGnxqPyyfSiCMCgnqqTHKH//n6wecoMu6/mLLelM9TLpECx0p hadEPJEoKJcUG1hUAO1bIfcWU3Ku2UEmZxAIepzFOAKcVpUJ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj9T8+M1cA7YI/FHgG/bn3AsQhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDgwYTg3NmUtZjlkZS0z YTg2LWI0MjAtNDBlMGM5MDYyNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFb+7YEaaNpSBPzWe/aqf0xbV7wlGCM3XXEELbX4cyniPckcLDmCeb2 rp8Lb05e/vCzSJfYBbTTjSayedagmeXFpdw34hsi1ch3Wfb0HToQnTqGZFFMDd3l XsJe/FJT1JrwDxmtK73Wo1NSiQAVbGqP33zGEMs7PdOGk9GFQhf2eyCxI+S8PiK9 Aj5VRPoSSBYxVPEVdr9hpLiMphTfxc2ZDP+8U8dmiB+C2f/Da2cjgFE/LbcKw+0x mnkzh4ilupCh+8rTRx5aUe9gYzfUGMymTUUf7i6KMmgrRpi3lz7E15olVFrqZU5s 1sbrLT4EAxx8xut1/CzpP9LBy1jVuBw= -----END CERTIFICATE-----Generated at Sat Sep 21 01:34:50 2024 by rpki-client on console-fra.rpki-client.org