$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa File: 9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa (raw, json) Hash identifier: KEt6te7ticZaLx/07AIL7+ZUlGJyrZDHImcz4Yt1ndU= Subject key identifier: F2:00:E1:A0:42:E4:5D:B9:8F:E1:E3:3F:51:46:83:AE:46:DC:00:13 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847D4049B1BA904780686222D80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 203 IP address blocks: 20.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:9b:1b:a9:04:78:06:86:22:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=c5dcafb4-2b01-4deb-a8d6-a6dab5f31a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:c2:5f:3d:13:d7:ea:f5:c1:61:0f:40:c6: ef:3e:4b:90:1c:02:c6:7b:d6:36:2b:56:54:46:5a: 5c:29:63:5c:72:66:09:8d:e2:51:85:4b:0e:75:cd: a6:43:ce:1e:d3:ac:b8:89:e2:cb:35:ac:22:b4:31: 0d:90:f4:0d:ba:95:3f:79:64:93:62:49:e0:8f:6d: f9:06:63:bd:52:6c:57:94:a4:60:60:80:aa:f6:7e: ef:37:51:28:2d:53:7f:92:2e:f6:39:2e:56:32:7f: f7:41:db:00:37:74:1b:18:67:84:83:20:cd:4f:d4: 93:b1:34:90:31:b9:a9:2f:6c:29:7b:fe:a0:d6:44: 04:7a:90:c9:dc:5b:5d:26:ed:fe:2c:92:f0:ca:c8: 6e:be:20:3a:82:e1:5d:fe:31:62:ca:3f:4c:2f:6b: d4:b7:31:63:03:d7:b1:1f:be:7c:ca:b4:09:9f:56: 9d:8e:9d:e9:9c:34:0a:a8:a5:41:96:f9:df:98:f9: c2:7e:0d:9a:af:b6:fd:c4:69:1a:51:a3:b6:f6:07: e0:bf:47:05:75:c4:5a:ad:10:f5:80:7d:94:93:d2: 29:f4:66:b8:95:e9:4c:be:05:db:d7:30:3e:76:a5: 85:c0:05:2c:15:79:d9:a7:f9:ea:52:bd:40:e9:f2: 2e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:00:E1:A0:42:E4:5D:B9:8F:E1:E3:3F:51:46:83:AE:46:DC:00:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d1:34:44:d2:c3:fb:c0:74:52:12:44:e0:52:42:24:10:42: 69:41:a7:4a:d9:93:cb:04:c9:7d:20:c2:37:01:e0:1f:81:32: 48:b4:22:cf:96:a2:8d:ed:29:72:d7:aa:09:71:7c:25:cd:87: 74:12:86:c6:37:34:f7:30:72:3f:af:5f:f9:21:c8:64:b7:e6: 29:d7:63:68:c9:dc:0b:54:6f:fd:15:8c:9d:d5:14:86:2f:c9: 79:a2:ec:d8:20:ab:78:7a:15:28:79:3a:14:9e:ee:2d:c1:38: 58:ac:11:f7:ef:46:18:58:af:e8:ab:b2:2e:50:29:02:f7:3b: b5:d9:fe:6e:c1:c2:73:89:d4:60:12:b5:78:a5:7f:94:6a:65: 8d:b6:40:b2:e8:21:9a:04:b3:60:e3:1e:e1:b1:24:c3:54:0a: 2d:6d:b4:65:cb:e8:e7:14:4d:a6:44:40:32:36:bc:38:76:6a: 15:d4:b2:6d:fa:91:eb:65:d4:b8:0a:36:66:ba:71:7b:92:c8: f6:ae:7e:14:26:60:91:7f:68:6c:8c:c7:84:2e:f7:11:28:fe: e7:9d:2f:b0:68:67:e3:9c:16:bf:0d:f1:8c:60:06:e7:37:83: 27:cc:2c:c7:5e:42:bc:7d:01:74:d3:2b:53:10:d4:09:13:83: 55:bc:65:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJsbqQR4BoYiLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk YzVkY2FmYjQtMmIwMS00ZGViLWE4ZDYtYTZkYWI1ZjMxYTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomLCXz0T1+r1wWEPQMbvPkuQHALGe9Y2K1ZU RlpcKWNccmYJjeJRhUsOdc2mQ84e06y4ieLLNawitDENkPQNupU/eWSTYkngj235 BmO9UmxXlKRgYICq9n7vN1EoLVN/ki72OS5WMn/3QdsAN3QbGGeEgyDNT9STsTSQ MbmpL2wpe/6g1kQEepDJ3FtdJu3+LJLwyshuviA6guFd/jFiyj9ML2vUtzFjA9ex H758yrQJn1adjp3pnDQKqKVBlvnfmPnCfg2ar7b9xGkaUaO29gfgv0cFdcRarRD1 gH2Uk9Ip9Ga4lelMvgXb1zA+dqWFwAUsFXnZp/nqUr1A6fIu4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIA4aBC5F25j+HjP1FGg65G3AATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWE2N2IwYmUtOWI4NS0z ODFmLThmOGItODBmM2E0YjkzYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfRNETSw/vAdFISROBSQiQQQmlBp0rZk8sEyX0gwjcB4B+BMki0Is+W oo3tKXLXqglxfCXNh3QShsY3NPcwcj+vX/khyGS35inXY2jJ3AtUb/0VjJ3VFIYv yXmi7Nggq3h6FSh5OhSe7i3BOFisEffvRhhYr+irsi5QKQL3O7XZ/m7BwnOJ1GAS tXilf5RqZY22QLLoIZoEs2DjHuGxJMNUCi1ttGXL6OcUTaZEQDI2vDh2ahXUsm36 ketl1LgKNma6cXuSyPaufhQmYJF/aGyMx4Qu9xEo/uedL7BoZ+OcFr8N8YxgBuc3 gyfMLMdeQrx9AXTTK1MQ1AkTg1W8Zas= -----END CERTIFICATE-----Generated at Sun Nov 10 15:10:54 2024 by rpki-client on console-fra.rpki-client.org