$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa File: 59a83d47-6316-3fc5-9032-22b42a178341.roa (raw, json) Hash identifier: NDUs9p57c9V5IdB/nWtx+91fU7tkaeb3utH3WQAunp8= Subject key identifier: 2F:39:DE:0C:86:02:99:E8:CB:45:AD:13:6F:8E:51:8D:65:3F:D0:75 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584737907CD143FE338B13458710 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa Signing time: Sun 15 Sep 2024 01:00:30 +0000 ROA not before: Sun 15 Sep 2024 01:00:30 +0000 ROA not after: Sat 14 Dec 2024 02:00:30 +0000 asID: 202 IP address blocks: 20.134.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:37:90:7c:d1:43:fe:33:8b:13:45:87:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 15 01:00:30 2024 GMT Not After : Dec 14 02:00:30 2024 GMT Subject: CN=c17d418c-c2a0-4e0c-896c-ebac23c6edb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dd:fa:b1:ae:f1:2b:fd:a6:d8:55:41:c2:6b: 61:ba:fc:6f:3b:2e:41:16:8e:4c:5a:59:b1:7f:97: e6:84:0e:be:10:b7:20:c5:09:79:61:af:34:1a:24: 93:bd:89:46:00:91:7b:45:cc:10:8d:8a:01:6b:b3: 78:55:5e:38:5d:5d:d0:e8:49:9e:07:e5:b6:3d:45: 91:6a:f3:8a:e5:8f:50:d9:11:55:bf:14:1e:e3:d5: 7a:a0:2a:ce:c4:2d:9c:55:c5:c9:dc:1f:86:e8:95: d9:c3:25:12:51:91:45:a5:31:15:e5:32:bd:3d:61: 05:2b:ce:8c:5e:8a:f5:0d:d7:5d:a2:82:74:db:9c: a5:1b:78:d1:1c:dc:7b:a7:ad:a7:8b:a2:ce:67:63: d2:21:b9:ee:36:13:8c:b8:28:2a:b2:3b:6c:18:cf: b1:be:cc:ca:42:57:5a:77:86:27:b8:1d:05:94:63: c8:54:85:6a:3b:73:7b:ed:ba:db:87:2c:eb:0c:80: cf:ce:8c:b6:ad:8a:c0:40:ff:dd:46:fa:af:95:2d: 90:ce:df:41:b6:41:76:26:c6:92:f3:ed:93:95:48: 86:50:e4:23:f4:3d:37:46:4c:ab:81:91:c7:ac:ce: e5:98:41:cd:2f:de:c1:a5:8e:7d:1d:4f:05:e9:2a: 38:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:39:DE:0C:86:02:99:E8:CB:45:AD:13:6F:8E:51:8D:65:3F:D0:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:87:c3:6f:aa:29:30:20:03:85:18:18:df:ee:d6:08:e5:c8: c9:84:57:b5:ca:49:43:d2:f7:bd:0e:5d:bd:0c:7a:a3:d8:8f: 8d:f8:f6:8a:6e:5e:8e:a9:5f:c0:e5:91:2e:df:fd:58:82:51: 7f:77:1f:f0:45:40:e4:e8:bf:4a:9c:a8:90:eb:f2:b9:da:8e: 4d:d7:77:e4:74:34:ab:64:5f:17:df:b3:38:b1:c9:4e:79:47: 30:67:bf:ad:3d:b8:9a:af:bc:e3:cd:15:7b:38:19:34:fd:ef: bd:cf:5b:b9:27:b7:63:91:df:42:23:b3:1d:43:e6:f5:bf:38: 31:8d:c6:0c:a3:2d:8c:18:d6:4c:ba:29:c5:3c:37:3f:62:b5: cc:ce:fd:01:11:59:57:28:0b:9c:cd:66:9e:31:ea:04:c9:7a: 44:c8:3a:c4:d2:93:dc:02:97:1e:73:ac:ae:0c:7e:5f:21:37: a0:11:42:1d:b3:60:43:48:4f:49:6f:3f:bd:38:e6:3e:12:43: dd:3c:b6:65:5e:ef:ff:ba:83:c9:14:84:1b:0d:aa:99:24:a5: be:33:3c:2d:d5:e0:18:d8:34:22:72:0f:f1:f9:2f:ac:e0:ed: dd:57:96:f3:e8:79:c3:ae:2c:9d:22:24:73:20:64:01:e9:5d: ca:22:0b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc3kHzRQ/4zixNFhxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDkxNTAxMDAzMFoXDTI0MTIxNDAyMDAzMFowLzEtMCsGA1UEAxMk YzE3ZDQxOGMtYzJhMC00ZTBjLTg5NmMtZWJhYzIzYzZlZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd36sa7xK/2m2FVBwmthuvxvOy5BFo5MWlmx f5fmhA6+ELcgxQl5Ya80GiSTvYlGAJF7RcwQjYoBa7N4VV44XV3Q6EmeB+W2PUWR avOK5Y9Q2RFVvxQe49V6oCrOxC2cVcXJ3B+G6JXZwyUSUZFFpTEV5TK9PWEFK86M Xor1DdddooJ025ylG3jRHNx7p62ni6LOZ2PSIbnuNhOMuCgqsjtsGM+xvszKQlda d4YnuB0FlGPIVIVqO3N77brbhyzrDIDPzoy2rYrAQP/dRvqvlS2Qzt9BtkF2JsaS 8+2TlUiGUOQj9D03RkyrgZHHrM7lmEHNL97BpY59HU8F6So4sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC853gyGApnoy0WtE2+OUY1lP9B1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTlhODNkNDctNjMxNi0z ZmM1LTkwMzItMjJiNDJhMTc4MzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6Hw2+qKTAgA4UYGN/u1gjlyMmEV7XKSUPS970OXb0MeqPYj4349opu Xo6pX8DlkS7f/ViCUX93H/BFQOTov0qcqJDr8rnajk3Xd+R0NKtkXxffszixyU55 RzBnv609uJqvvOPNFXs4GTT9773PW7knt2OR30Ijsx1D5vW/ODGNxgyjLYwY1ky6 KcU8Nz9itczO/QERWVcoC5zNZp4x6gTJekTIOsTSk9wClx5zrK4Mfl8hN6ARQh2z YENIT0lvP7045j4SQ908tmVe7/+6g8kUhBsNqpkkpb4zPC3V4BjYNCJyD/H5L6zg 7d1XlvPoecOuLJ0iJHMgZAHpXcoiC1I= -----END CERTIFICATE-----Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org