$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa File: 74c04573-b423-34d6-a92c-a33a7e85298a.roa (raw, json) Hash identifier: YGi7UbmVr97Out81A3WFuQGMhwGPcodbomKmCxnSSNs= Subject key identifier: C9:DD:ED:25:76:AD:74:72:CE:D1:27:D3:0C:D9:D4:3D:7B:7A:97:32 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584737907D79DCB68DC27A0D29F0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa Signing time: Sun 15 Sep 2024 01:00:30 +0000 ROA not before: Sun 15 Sep 2024 01:00:30 +0000 ROA not after: Sat 14 Dec 2024 02:00:30 +0000 asID: 203 IP address blocks: 20.139.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:37:90:7d:79:dc:b6:8d:c2:7a:0d:29:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 15 01:00:30 2024 GMT Not After : Dec 14 02:00:30 2024 GMT Subject: CN=1d9323ba-56e1-4f2b-bc07-d926ee0b4a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:17:ae:08:3f:73:08:33:78:6e:8a:3b:01: f1:67:aa:d0:5a:d7:9f:40:7e:21:fc:76:28:07:fc: 3d:25:63:96:b8:91:6e:34:c0:a7:8d:26:b9:7f:50: 6f:9c:6b:95:7a:61:a3:b4:1f:ec:20:7d:31:5e:df: f2:80:ac:ec:59:ab:72:a9:17:76:fd:42:e1:b2:43: 26:76:da:c0:0c:23:7c:97:7a:3d:9d:42:01:bb:0b: a0:77:04:f7:58:4b:a1:61:67:e5:e6:9c:93:be:c7: 84:a4:56:e7:ff:5c:6f:ed:dd:f1:43:be:55:50:76: 62:46:d3:f6:2c:5e:1b:15:5b:25:d3:bb:90:a9:ea: 1d:31:21:d9:d9:d7:96:be:22:f0:cc:b2:49:72:10: f6:e7:1f:ac:3b:47:58:a6:c5:01:7d:2b:1a:25:b5: ec:e4:f6:c5:7b:4f:78:71:b4:81:83:b7:cd:25:52: d9:5c:d8:74:ab:48:4a:d9:50:33:16:c6:ed:18:80: 75:40:75:e9:e0:40:68:bd:7b:80:85:26:0a:78:41: 17:05:9a:3d:b6:a2:21:68:1a:6c:b9:75:18:ca:a3: ac:13:ba:55:f8:c3:e7:24:8e:d0:73:7c:3b:00:07: fc:b4:1a:38:20:56:25:09:eb:90:f6:d6:cc:bb:31: c3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DD:ED:25:76:AD:74:72:CE:D1:27:D3:0C:D9:D4:3D:7B:7A:97:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5f:68:ba:9d:0c:b6:76:4d:31:21:b4:cd:dc:ae:05:f6:ec: 95:9c:3f:7d:47:c1:94:5e:01:72:5c:00:b1:2f:d9:c2:fa:f4: 77:b8:f5:eb:21:11:7a:c3:4c:e2:fc:b1:b3:5c:30:e8:71:36: ae:3f:64:c2:76:42:f7:f7:38:52:c3:77:6e:89:1d:a4:56:3b: 1c:fc:07:d0:25:96:b3:60:38:75:81:06:f0:3a:03:73:f7:15: 38:73:be:1a:3b:47:ca:49:2e:43:19:f8:4f:78:1a:53:23:25: 3b:5a:11:d3:98:5c:94:a9:a0:c5:e6:2d:32:9e:b7:50:24:ce: e1:13:7a:0e:33:fe:5e:66:9f:30:ce:ae:d2:5b:bc:98:12:10: 10:cc:16:ff:1a:f1:ea:1b:5c:09:e8:07:05:b1:6c:57:32:90: 3b:d7:1d:bf:df:dd:dc:a2:ee:c8:04:61:16:db:39:2d:cc:4f: 55:4e:38:b6:5c:50:95:82:04:65:5e:ee:5f:0b:3f:3c:09:10: ff:af:41:50:6f:ff:b7:21:4c:95:d8:46:71:f0:3c:f3:30:bc: 60:2e:8f:b5:de:d6:58:09:a8:9f:e8:7e:09:d8:bf:58:57:25: ff:0a:d2:9c:15:7d:91:d9:a4:b8:7c:fb:de:19:c8:33:6b:ea: 4f:ec:f3:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc3kH153LaNwnoNKfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDkxNTAxMDAzMFoXDTI0MTIxNDAyMDAzMFowLzEtMCsGA1UEAxMk MWQ5MzIzYmEtNTZlMS00ZjJiLWJjMDctZDkyNmVlMGI0YTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyEXrgg/cwgzeG6KOwHxZ6rQWtefQH4h/HYo B/w9JWOWuJFuNMCnjSa5f1BvnGuVemGjtB/sIH0xXt/ygKzsWatyqRd2/ULhskMm dtrADCN8l3o9nUIBuwugdwT3WEuhYWfl5pyTvseEpFbn/1xv7d3xQ75VUHZiRtP2 LF4bFVsl07uQqeodMSHZ2deWviLwzLJJchD25x+sO0dYpsUBfSsaJbXs5PbFe094 cbSBg7fNJVLZXNh0q0hK2VAzFsbtGIB1QHXp4EBovXuAhSYKeEEXBZo9tqIhaBps uXUYyqOsE7pV+MPnJI7Qc3w7AAf8tBo4IFYlCeuQ9tbMuzHDGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnd7SV2rXRyztEn0wzZ1D17epcyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzRjMDQ1NzMtYjQyMy0z NGQ2LWE5MmMtYTMzYTdlODUyOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpfaLqdDLZ2TTEhtM3crgX27JWcP31HwZReAXJcALEv2cL69He49esh EXrDTOL8sbNcMOhxNq4/ZMJ2Qvf3OFLDd26JHaRWOxz8B9AllrNgOHWBBvA6A3P3 FThzvho7R8pJLkMZ+E94GlMjJTtaEdOYXJSpoMXmLTKet1AkzuETeg4z/l5mnzDO rtJbvJgSEBDMFv8a8eobXAnoBwWxbFcykDvXHb/f3dyi7sgEYRbbOS3MT1VOOLZc UJWCBGVe7l8LPzwJEP+vQVBv/7chTJXYRnHwPPMwvGAuj7Xe1lgJqJ/ofgnYv1hX Jf8K0pwVfZHZpLh8+94ZyDNr6k/s81M= -----END CERTIFICATE-----Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org