$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa File: 48d31edc-bef9-3b8a-8019-51240e7e896a.roa (raw, json) Hash identifier: GE91q0q3CyYsATEOwgJV8oDOJ23H41cjp5HyGiSKC4M= Subject key identifier: 7D:92:7B:C1:7D:5C:25:63:C4:B1:A8:23:BC:70:F4:5A:7F:FD:6A:74 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584737907DD9444A8BAFBEF1F7C8 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa Signing time: Sun 15 Sep 2024 01:00:30 +0000 ROA not before: Sun 15 Sep 2024 01:00:30 +0000 ROA not after: Sat 14 Dec 2024 02:00:30 +0000 asID: 203 IP address blocks: 20.154.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:37:90:7d:d9:44:4a:8b:af:be:f1:f7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 15 01:00:30 2024 GMT Not After : Dec 14 02:00:30 2024 GMT Subject: CN=a0ab8de5-4b9e-4813-944d-07e7b87fadc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:af:a7:93:55:82:72:67:b7:09:c6:5e:46: bb:eb:c3:f0:87:63:d4:aa:10:75:26:71:2d:88:fb: d4:2b:c4:bd:71:2a:c2:63:3e:4d:71:fb:cd:27:e4: 81:15:4c:e6:6b:03:c4:db:55:67:60:77:ee:85:90: 77:2e:b2:c4:8e:5d:63:9a:23:61:4c:b4:cb:96:3c: 20:a1:f1:68:6b:c7:f1:b4:e0:70:7a:47:1c:7c:22: d7:ee:6c:f4:41:73:dc:d5:6e:52:1e:f8:97:55:72: ce:f2:48:77:cd:a3:8c:7f:52:3c:bb:49:f4:94:c0: 59:f1:82:ba:28:11:4b:8d:d7:75:22:c9:cb:d4:00: 29:96:0e:69:3c:5b:66:d0:64:aa:34:4e:69:a5:a1: 08:a5:bd:c2:61:e6:52:29:93:40:bc:d1:8c:42:a4: d6:e5:3d:8e:27:e8:c8:7c:43:14:59:9c:87:9f:af: 90:b2:2a:3d:7c:4a:ce:bd:d0:67:d0:ac:3e:b4:62: fb:cf:5f:b7:fd:08:b9:64:ab:21:e7:92:40:cd:a8: 1b:21:23:a1:6f:00:65:b1:2b:5b:42:c9:c8:5d:29: b9:f3:3b:22:d9:2e:cb:90:a9:b0:8d:14:76:6b:c9: e3:7d:7e:47:a5:c2:1f:83:3e:f6:62:20:45:f8:85: 11:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:92:7B:C1:7D:5C:25:63:C4:B1:A8:23:BC:70:F4:5A:7F:FD:6A:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.154.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:2b:3e:ad:c9:9d:26:f7:66:09:eb:15:94:b3:b5:98:fe:ed: 55:6c:64:11:47:31:11:d4:7e:ba:71:2a:1c:4e:25:59:db:9f: 16:34:39:77:b3:d4:6b:92:49:4b:cb:c2:52:5e:f6:f1:67:0e: 4d:2e:7f:21:0e:13:b2:df:aa:ab:b2:9c:fd:df:04:fa:89:77: 19:55:1c:d8:8e:f0:82:de:0c:30:d3:1f:98:ea:cf:d1:fa:c5: bb:18:84:8f:4a:47:18:b0:ba:5f:90:c1:a9:e3:3f:83:2b:cc: ab:97:4f:76:70:c1:96:33:aa:8d:df:c8:98:37:99:05:16:f1: 15:5e:73:5c:33:f3:3a:fb:f4:5f:9f:8b:b9:0a:1d:66:2b:18: e0:cc:ae:49:5b:30:54:f7:15:3b:1c:43:29:09:b7:4f:9c:59: 0b:e4:41:e9:7e:c9:09:66:56:f2:7e:09:97:a0:4a:8c:a6:eb: d8:5e:66:be:29:eb:05:01:0f:e6:50:bd:b8:a6:7d:c7:18:c6: 35:74:f6:bd:25:e1:d4:ff:99:75:c7:66:19:f3:eb:5a:aa:a4: 62:3d:bb:48:06:4d:dc:5e:00:63:da:9e:94:e4:b3:45:7c:26: 3a:ef:04:32:92:2a:84:4f:e8:19:82:ae:48:0d:2e:76:57:40: 6b:5c:b9:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc3kH3ZREqLr77x98gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDkxNTAxMDAzMFoXDTI0MTIxNDAyMDAzMFowLzEtMCsGA1UEAxMk YTBhYjhkZTUtNGI5ZS00ODEzLTk0NGQtMDdlN2I4N2ZhZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyCvp5NVgnJntwnGXka768Pwh2PUqhB1JnEt iPvUK8S9cSrCYz5NcfvNJ+SBFUzmawPE21VnYHfuhZB3LrLEjl1jmiNhTLTLljwg ofFoa8fxtOBwekccfCLX7mz0QXPc1W5SHviXVXLO8kh3zaOMf1I8u0n0lMBZ8YK6 KBFLjdd1IsnL1AAplg5pPFtm0GSqNE5ppaEIpb3CYeZSKZNAvNGMQqTW5T2OJ+jI fEMUWZyHn6+Qsio9fErOvdBn0Kw+tGL7z1+3/Qi5ZKsh55JAzagbISOhbwBlsStb QsnIXSm58zsi2S7LkKmwjRR2a8njfX5HpcIfgz72YiBF+IUREwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2Se8F9XCVjxLGoI7xw9Fp//Wp0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDhkMzFlZGMtYmVmOS0z YjhhLTgwMTktNTEyNDBlN2U4OTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJpaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4rPq3JnSb3ZgnrFZSztZj+7VVsZBFHMRHUfrpxKhxOJVnbnxY0OXez 1GuSSUvLwlJe9vFnDk0ufyEOE7LfqquynP3fBPqJdxlVHNiO8ILeDDDTH5jqz9H6 xbsYhI9KRxiwul+QwanjP4MrzKuXT3ZwwZYzqo3fyJg3mQUW8RVec1wz8zr79F+f i7kKHWYrGODMrklbMFT3FTscQykJt0+cWQvkQel+yQlmVvJ+CZegSoym69heZr4p 6wUBD+ZQvbimfccYxjV09r0l4dT/mXXHZhnz61qqpGI9u0gGTdxeAGPanpTks0V8 JjrvBDKSKoRP6BmCrkgNLnZXQGtcueI= -----END CERTIFICATE-----Generated at Sat Sep 21 01:34:50 2024 by rpki-client on console-fra.rpki-client.org