$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5e73b702-9d2e-3bcd-a26e-c8a27e8c515b.roa File: 5e73b702-9d2e-3bcd-a26e-c8a27e8c515b.roa (raw, json) Hash identifier: CpibDmiWVKjgMlDV4t2XkJl7fUvO7cGX19F81O6ZW3w= Subject key identifier: 70:D6:E1:D3:EC:27:63:34:58:11:58:64:39:B5:D0:11:D1:02:7F:4E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858476B688DF49EDADE999DDF7A00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5e73b702-9d2e-3bcd-a26e-c8a27e8c515b.roa Signing time: Thu 03 Oct 2024 14:42:06 +0000 ROA not before: Thu 03 Oct 2024 14:42:06 +0000 ROA not after: Wed 01 Jan 2025 15:42:06 +0000 asID: 202 IP address blocks: 20.148.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:68:8d:f4:9e:da:de:99:9d:df:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 3 14:42:06 2024 GMT Not After : Jan 1 15:42:06 2025 GMT Subject: CN=bdb8d87b-e8f7-4374-a060-a9a2048aba2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:72:d6:40:2d:f4:17:5e:14:5e:9a:b6:23: 96:44:2b:ed:9b:c0:a9:d5:62:92:87:cc:73:2c:a2: c1:e4:2f:33:e2:13:43:1c:fd:7a:e4:07:23:78:4c: 9d:eb:af:25:b9:f3:d6:cd:0c:a9:c5:3c:da:fd:48: 5d:ec:bc:8f:e9:e9:cd:00:b0:9e:d6:23:bd:e5:ee: 61:81:1e:2a:8b:df:56:5e:f3:9f:a7:26:3e:0d:98: 44:22:dc:d5:aa:7b:61:bc:70:cb:68:62:c3:10:d9: 69:4a:87:ce:ae:c2:fb:9b:01:a1:7e:09:5b:c0:e6: ee:1d:05:74:48:fa:75:d6:11:a9:f8:6d:2d:6b:89: 08:60:e1:48:7b:c8:10:73:bf:43:41:ad:de:10:e3: 82:fe:3f:b9:44:d0:aa:ea:07:4d:58:b1:6e:b7:df: 7a:cb:02:7d:f0:60:db:63:8c:50:c4:76:d4:b0:6e: 34:d1:57:0f:08:98:ef:93:af:9b:8b:77:81:72:42: b6:04:1a:82:28:f6:8a:83:9b:47:50:d2:a0:b2:2d: 9c:48:a9:12:09:1d:4c:99:b6:c1:c7:02:1f:9a:7f: 19:d4:e2:e2:62:23:1c:d7:d8:00:18:5b:7c:e4:0a: b3:60:d6:63:28:75:88:81:73:49:63:5e:5a:7c:7f: f3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D6:E1:D3:EC:27:63:34:58:11:58:64:39:B5:D0:11:D1:02:7F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5e73b702-9d2e-3bcd-a26e-c8a27e8c515b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:93:7e:1c:1d:27:1a:ef:7d:51:31:45:bb:8b:48:60:31:f3: 90:ad:39:c8:8a:7c:cc:5a:77:e1:70:e5:e8:bb:2c:e5:04:04: 6a:e8:0b:85:9e:b0:bc:ac:ae:fd:33:4b:f7:50:7a:c4:34:ca: 73:a3:47:c9:ae:17:25:b9:c5:eb:50:23:2e:fc:ae:80:cc:72: bf:24:2a:46:1a:6f:cd:2f:bc:de:2c:e8:d8:f8:32:87:0c:5c: 49:a2:b5:09:4c:93:39:4e:d1:6a:6d:a8:5e:d4:84:11:d5:7d: a2:0e:1d:fc:00:63:ae:66:53:f3:70:62:6e:90:b1:cb:87:86: dd:67:29:00:de:88:2f:88:ce:72:c2:7e:3f:6e:75:31:5e:ce: 65:5d:99:44:c0:74:d8:ff:6d:d8:25:b5:fa:93:17:56:08:8f: bd:5b:a5:3b:f4:c6:e9:cd:f0:d8:76:1e:ed:b3:80:15:64:c4: f5:7b:46:ee:b5:c7:83:0c:cc:af:d9:11:64:ef:d0:90:42:71: db:69:24:0f:2e:3a:8c:74:d2:82:d2:86:49:6e:f8:c1:a4:69: 4b:36:3e:1b:20:b5:81:6d:8b:ec:a4:5e:0f:d7:78:7e:1f:ab: 4c:ae:e0:54:3f:ad:f9:3e:2c:60:af:86:7d:25:c6:c7:fe:3a: 90:c5:7d:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdraI30ntremZ3fegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAwMzE0NDIwNloXDTI1MDEwMTE1NDIwNlowLzEtMCsGA1UEAxMk YmRiOGQ4N2ItZThmNy00Mzc0LWEwNjAtYTlhMjA0OGFiYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkFy1kAt9BdeFF6atiOWRCvtm8Cp1WKSh8xz LKLB5C8z4hNDHP165AcjeEyd668lufPWzQypxTza/Uhd7LyP6enNALCe1iO95e5h gR4qi99WXvOfpyY+DZhEItzVqnthvHDLaGLDENlpSofOrsL7mwGhfglbwObuHQV0 SPp11hGp+G0ta4kIYOFIe8gQc79DQa3eEOOC/j+5RNCq6gdNWLFut996ywJ98GDb Y4xQxHbUsG400VcPCJjvk6+bi3eBckK2BBqCKPaKg5tHUNKgsi2cSKkSCR1MmbbB xwIfmn8Z1OLiYiMc19gAGFt85AqzYNZjKHWIgXNJY15afH/zdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDW4dPsJ2M0WBFYZDm10BHRAn9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWU3M2I3MDItOWQyZS0z YmNkLWEyNmUtYzhhMjdlOGM1MTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCTfhwdJxrvfVExRbuLSGAx85CtOciKfMxad+Fw5ei7LOUEBGroC4We sLysrv0zS/dQesQ0ynOjR8muFyW5xetQIy78roDMcr8kKkYab80vvN4s6Nj4MocM XEmitQlMkzlO0WptqF7UhBHVfaIOHfwAY65mU/NwYm6QscuHht1nKQDeiC+IznLC fj9udTFezmVdmUTAdNj/bdgltfqTF1YIj71bpTv0xunN8Nh2Hu2zgBVkxPV7Ru61 x4MMzK/ZEWTv0JBCcdtpJA8uOox00oLShklu+MGkaUs2PhsgtYFti+ykXg/XeH4f q0yu4FQ/rfk+LGCvhn0lxsf+OpDFfa0= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:33 2024 by rpki-client on console-fra.rpki-client.org