$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa File: 59c44230-ec55-3638-8a91-87a24d084422.roa (raw, json) Hash identifier: 2r4juxDTJO7L9n9xgpGX5KUzGNRTb1z39brLiuIGcwI= Subject key identifier: D8:86:AB:81:EB:39:AA:01:3B:A1:B3:FA:17:3D:C2:04:5C:37:89:E5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847643B7331106AE3220BABD000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa Signing time: Tue 01 Oct 2024 01:00:31 +0000 ROA not before: Tue 01 Oct 2024 01:00:31 +0000 ROA not after: Mon 30 Dec 2024 02:00:31 +0000 asID: 3356 IP address blocks: 20.137.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:64:3b:73:31:10:6a:e3:22:0b:ab:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 1 01:00:31 2024 GMT Not After : Dec 30 02:00:31 2024 GMT Subject: CN=9fae9ee9-90c4-4b37-9c0e-2baef72f1771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:f8:a8:74:20:f1:db:59:eb:b0:56:2a:78: 7f:dd:61:c8:64:d5:54:2b:0e:9f:a1:2b:18:a0:4f: 3a:f3:eb:0f:83:f0:26:58:b2:3e:29:8d:0f:65:85: 09:e1:dc:3a:ec:00:36:a0:59:88:ad:b2:ef:ea:1c: 45:34:ed:68:bf:a7:4b:0e:71:3d:c5:5b:93:70:39: 81:d2:44:5c:9e:8a:40:16:6f:05:82:de:92:24:f8: 5c:82:a4:42:c8:5a:36:4a:52:29:7d:83:77:9a:cf: 02:21:1b:f2:a7:9f:bb:d2:0d:a8:b1:c0:73:20:41: f4:c9:3a:e1:d4:56:a9:7d:18:30:25:7e:8a:ed:c8: 8a:b3:d2:98:28:7e:1c:53:5e:e9:0f:96:17:c6:6c: e1:73:49:aa:4f:19:7b:3d:84:71:1a:42:22:1f:e6: 78:93:63:65:e8:7d:a4:c4:62:3d:23:67:4f:ef:3c: 4e:8e:c2:3b:e2:2f:ce:4f:2b:91:3b:14:ab:fd:de: 68:f5:cb:2e:f8:b5:31:9d:8f:bb:1d:7e:d2:a5:66: 8d:a5:49:ec:31:87:2c:8a:b4:92:6e:68:b7:26:ba: 2c:94:ce:b1:dc:aa:f4:ae:ee:8a:26:c9:7b:8a:22: fe:62:42:fa:e7:26:70:75:09:55:8d:f6:3d:37:a4: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:86:AB:81:EB:39:AA:01:3B:A1:B3:FA:17:3D:C2:04:5C:37:89:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2a:79:3c:d7:60:f0:76:44:89:49:a9:7c:51:42:0a:7e:b6: c5:d0:f2:b4:11:63:35:60:ba:ee:65:86:f4:98:2a:cc:e6:94: 6d:75:6d:e0:f2:79:0b:c4:60:6e:04:c7:23:2b:b8:79:b8:ef: 57:69:83:a3:dd:cf:7a:4e:3a:26:bb:55:b9:91:7c:61:4b:ad: d3:5c:49:6c:9f:95:91:55:a5:7a:53:da:93:0f:89:e9:bc:b9: a8:c4:df:ea:f2:db:cb:dc:2a:e3:bb:1f:9b:3e:c1:92:80:0f: 04:57:f7:55:db:90:41:5b:4f:20:d2:3b:91:45:41:df:dc:6f: 14:d6:9d:dd:14:02:24:51:62:a6:2a:64:fc:82:17:d8:26:87: fe:26:73:bf:8e:89:0d:82:c2:51:28:03:f1:5e:7f:59:45:39: 33:f0:d5:95:be:d5:d0:6a:61:ce:5f:e4:a0:92:a0:ec:b0:04: 38:1d:06:dd:aa:67:89:1d:64:4a:6f:8a:c2:89:26:40:7f:48: 39:82:34:2a:56:01:e6:c0:0e:4f:1a:91:a2:10:2c:26:85:4c: f3:81:4f:8d:2e:b0:1b:da:3b:57:3f:97:34:8c:25:ed:c7:70: ad:bf:28:49:3d:63:08:03:b0:6a:38:22:3c:5d:a5:94:20:77: 9d:07:71:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdkO3MxEGrjIgur0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAwMTAxMDAzMVoXDTI0MTIzMDAyMDAzMVowLzEtMCsGA1UEAxMk OWZhZTllZTktOTBjNC00YjM3LTljMGUtMmJhZWY3MmYxNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdr4qHQg8dtZ67BWKnh/3WHIZNVUKw6foSsY oE868+sPg/AmWLI+KY0PZYUJ4dw67AA2oFmIrbLv6hxFNO1ov6dLDnE9xVuTcDmB 0kRcnopAFm8Fgt6SJPhcgqRCyFo2SlIpfYN3ms8CIRvyp5+70g2oscBzIEH0yTrh 1FapfRgwJX6K7ciKs9KYKH4cU17pD5YXxmzhc0mqTxl7PYRxGkIiH+Z4k2Nl6H2k xGI9I2dP7zxOjsI74i/OTyuROxSr/d5o9csu+LUxnY+7HX7SpWaNpUnsMYcsirSS bmi3JroslM6x3Kr0ru6KJsl7iiL+YkL65yZwdQlVjfY9N6TyjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiGq4HrOaoBO6Gz+hc9wgRcN4nlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTljNDQyMzAtZWM1NS0z NjM4LThhOTEtODdhMjRkMDg0NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQqeTzXYPB2RIlJqXxRQgp+tsXQ8rQRYzVguu5lhvSYKszmlG11beDy eQvEYG4ExyMruHm471dpg6Pdz3pOOia7VbmRfGFLrdNcSWyflZFVpXpT2pMPiem8 uajE3+ry28vcKuO7H5s+wZKADwRX91XbkEFbTyDSO5FFQd/cbxTWnd0UAiRRYqYq ZPyCF9gmh/4mc7+OiQ2CwlEoA/Fef1lFOTPw1ZW+1dBqYc5f5KCSoOywBDgdBt2q Z4kdZEpvisKJJkB/SDmCNCpWAebADk8akaIQLCaFTPOBT40usBvaO1c/lzSMJe3H cK2/KEk9YwgDsGo4IjxdpZQgd50HccA= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:33 2024 by rpki-client on console-fra.rpki-client.org