$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa File: 57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa (raw, json) Hash identifier: s+yzaBcdTzqrixM8+vJvOUU1P52s3N1uNXzzNsfI4TI= Subject key identifier: 9F:CB:B7:79:F8:C5:1F:8B:38:9C:B2:4A:E2:37:F8:F1:AF:77:B1:9A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847B643137B0F05C4BD34896FC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa Signing time: Wed 30 Oct 2024 10:12:13 +0000 ROA not before: Wed 30 Oct 2024 10:12:13 +0000 ROA not after: Tue 28 Jan 2025 11:12:13 +0000 asID: 3356 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:43:13:7b:0f:05:c4:bd:34:89:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 30 10:12:13 2024 GMT Not After : Jan 28 11:12:13 2025 GMT Subject: CN=f49daf62-1d91-4fda-be49-78af7f93b6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:ee:46:0f:45:4f:22:95:cb:19:9e:0a:f5: 8a:cb:0f:41:ac:7a:d7:13:a2:bb:f5:88:86:94:44: e3:56:e6:95:ea:4b:ba:f0:fc:6a:c2:52:5d:51:a3: 29:dd:bd:3f:00:cb:a5:2b:37:0e:9f:4c:43:c6:67: b9:87:c6:41:9a:fc:61:81:ad:b9:2d:b7:0a:f6:a1: 7c:2b:d2:95:c5:7f:a2:e8:7b:30:ed:01:b9:69:77: 65:50:18:25:57:36:e6:4b:65:6c:64:e2:80:ea:22: 52:c8:c5:45:43:47:dc:b0:b8:bb:96:4b:9a:8c:75: 73:f8:ac:ff:28:37:8b:aa:73:4c:0c:ba:70:63:45: 8f:70:27:e7:a9:2e:14:27:47:b6:cc:04:e9:95:44: 2f:fb:51:ee:71:2e:66:cc:4f:ff:93:15:ee:4c:2b: 0e:75:69:43:d1:fd:b0:5e:c4:de:4e:19:33:91:45: df:94:3f:a0:3b:11:22:9b:b1:79:4a:d3:3a:53:26: 92:e5:91:f8:41:aa:f3:2c:51:17:4c:f4:dd:81:44: 48:4e:a8:a8:a0:e1:c2:f5:65:b8:72:27:76:e0:4c: c3:d1:dd:47:9a:08:8d:7e:d8:2e:c5:ca:c9:d5:cf: ba:37:fb:f2:8c:90:8d:69:8d:48:93:d5:6e:10:4c: 5c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CB:B7:79:F8:C5:1F:8B:38:9C:B2:4A:E2:37:F8:F1:AF:77:B1:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a7:15:4f:44:57:84:b4:f7:50:25:e8:1c:b1:e1:c6:2d:1b: be:07:95:4a:6e:0b:07:f3:96:52:12:3a:47:95:35:dd:5d:e0: 5c:88:c1:43:bc:eb:b2:07:1b:8b:71:34:3e:00:40:d7:41:e1: 81:87:f9:ee:e3:8e:f3:29:70:53:5e:9c:4a:98:8f:0d:c7:1d: 9c:ac:e5:1b:4d:75:0b:83:68:0f:50:11:07:d9:ff:2c:a5:17: 2c:b5:f7:99:cc:54:03:99:d5:4a:8c:48:26:88:8a:98:0f:7e: 57:af:5f:9f:33:29:24:1e:ef:16:9e:00:1f:0f:a3:76:6f:e1: db:e7:81:6b:ee:93:c2:11:0e:8f:06:61:d1:0b:e3:fc:9f:9a: 2d:81:45:3b:ef:10:58:de:7d:84:31:a9:79:1a:e8:66:87:34: 43:35:e8:54:65:d4:b7:43:56:99:03:8f:52:68:17:01:67:d7: 42:d0:d9:e3:52:fb:8b:e7:a8:f3:28:e2:7b:fb:ca:93:ae:40: 0f:6a:e3:d4:b1:8d:eb:45:cb:00:45:b6:b3:cd:69:39:82:e0: 3b:7d:b8:00:54:60:1c:5c:ca:c9:64:8c:1f:a3:74:3f:3b:bc: 6c:28:0f:0e:39:41:65:79:a3:2e:36:a8:88:c2:14:b9:25:13: 97:71:10:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2QxN7DwXEvTSJb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAzMDEwMTIxM1oXDTI1MDEyODExMTIxM1owLzEtMCsGA1UEAxMk ZjQ5ZGFmNjItMWQ5MS00ZmRhLWJlNDktNzhhZjdmOTNiNmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApULuRg9FTyKVyxmeCvWKyw9BrHrXE6K79YiG lETjVuaV6ku68PxqwlJdUaMp3b0/AMulKzcOn0xDxme5h8ZBmvxhga25LbcK9qF8 K9KVxX+i6Hsw7QG5aXdlUBglVzbmS2VsZOKA6iJSyMVFQ0fcsLi7lkuajHVz+Kz/ KDeLqnNMDLpwY0WPcCfnqS4UJ0e2zATplUQv+1HucS5mzE//kxXuTCsOdWlD0f2w XsTeThkzkUXflD+gOxEim7F5StM6UyaS5ZH4QarzLFEXTPTdgURITqiooOHC9WW4 cid24EzD0d1HmgiNftguxcrJ1c+6N/vyjJCNaY1Ik9VuEExc+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/Lt3n4xR+LOJyySuI3+PGvd7GaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTdmZmQxZTYtYjE0YS0z N2IwLTljZmEtZDFmNDhhZWVjOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHinFU9EV4S091Al6Byx4cYtG74HlUpuCwfzllISOkeVNd1d4FyIwUO8 67IHG4txND4AQNdB4YGH+e7jjvMpcFNenEqYjw3HHZys5RtNdQuDaA9QEQfZ/yyl Fyy195nMVAOZ1UqMSCaIipgPflevX58zKSQe7xaeAB8Po3Zv4dvngWvuk8IRDo8G YdEL4/yfmi2BRTvvEFjefYQxqXka6GaHNEM16FRl1LdDVpkDj1JoFwFn10LQ2eNS +4vnqPMo4nv7ypOuQA9q49SxjetFywBFtrPNaTmC4Dt9uABUYBxcyslkjB+jdD87 vGwoDw45QWV5oy42qIjCFLklE5dxEA4= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:22 2024 by rpki-client on console-ams.rpki-client.org