$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa File: a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa (raw, json) Hash identifier: coZUzW+mmGBVWe+Pgg82+v4XVsP13qyF5q2AcH9ihVg= Subject key identifier: 28:0B:81:DC:64:CD:CA:EB:C4:BC:71:9C:0D:99:5F:BF:9D:86:F2:8C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858476B5EBA7E014659D293E81D00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa Signing time: Thu 03 Oct 2024 14:22:19 +0000 ROA not before: Thu 03 Oct 2024 14:22:19 +0000 ROA not after: Wed 01 Jan 2025 15:22:19 +0000 asID: 3356 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:5e:ba:7e:01:46:59:d2:93:e8:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 3 14:22:19 2024 GMT Not After : Jan 1 15:22:19 2025 GMT Subject: CN=c7050381-1886-483b-b8a7-e2924749078e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:55:7b:aa:c3:55:58:62:f2:3f:86:56:19: bb:8e:7e:9d:6d:90:ef:82:db:ad:b6:0e:e4:b6:7e: 18:fd:74:d9:20:d5:e7:8f:00:e9:c7:02:37:17:c7: ad:a4:65:9c:09:55:98:d2:59:de:4e:a0:1b:96:29: f9:ab:37:e7:91:ac:10:c7:45:36:99:5f:02:4d:d3: 47:ca:79:1a:a9:3d:46:3b:cc:7e:f2:99:54:0e:87: 28:d4:91:6c:3b:4f:8c:14:64:6a:fb:c5:35:77:44: 92:27:8d:b6:63:ce:19:da:da:b1:26:01:10:68:0d: a4:76:bc:46:ee:63:0c:8a:dc:b1:1d:9d:e2:cb:1f: 71:05:3a:f1:85:e6:12:3a:80:e0:9b:70:d5:3a:9d: b4:9c:7c:46:b7:98:d3:11:ff:98:23:43:2a:ea:a7: 73:34:fb:e2:12:c0:d1:da:db:48:80:09:87:c9:63: 7f:8d:c7:44:35:ba:74:51:31:6b:ec:d7:75:ec:86: 95:8d:45:8d:ba:63:10:cb:74:ce:2a:21:a1:53:a3: 31:16:1a:e7:41:8c:f3:47:63:a2:64:5f:24:e1:2d: ad:81:bc:b7:6d:57:ab:20:bb:5a:b9:96:a9:69:b6: 18:8d:28:f4:97:31:22:11:4a:74:57:87:64:f5:2d: 7f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0B:81:DC:64:CD:CA:EB:C4:BC:71:9C:0D:99:5F:BF:9D:86:F2:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b0:83:fb:7b:4d:f6:5a:04:ff:1f:16:ea:80:a7:80:27:88: 4d:a8:2e:25:69:6e:e5:3a:6f:5a:2c:69:21:b9:88:36:67:e2: 66:5a:84:b0:27:33:d2:93:64:ff:1c:2d:8e:da:6a:ea:35:2e: be:78:9d:24:de:9d:fd:fb:3e:b6:5c:be:b8:90:b4:da:c5:d3: 77:8f:17:61:e9:17:56:42:5a:16:3e:49:5e:4e:d5:ae:e3:3c: f4:f4:38:d8:fe:98:2a:0c:d9:b5:af:fb:a2:a1:2d:8d:02:30: 9e:2c:d5:a1:0b:b1:b8:09:9d:3d:9e:ae:f5:c5:f2:c3:e0:ea: cd:41:f3:2b:52:a3:fb:1f:50:66:c8:be:e5:ae:c0:84:ce:03: 8c:a5:f4:0d:39:44:4d:24:92:a2:a2:fb:f5:95:58:b2:95:7c: fd:d8:69:03:44:df:a2:40:5e:78:4a:5b:08:5e:d5:4a:71:ff: 2a:6b:e4:69:11:e5:a1:7f:e1:c1:f3:2c:8d:63:f1:88:11:ba: 30:a7:31:4c:36:a9:ce:c6:76:7b:8f:76:ec:80:32:0d:10:f2: d6:9d:b5:5c:e9:c7:77:93:84:b0:c0:57:31:1f:ac:02:5c:54: ac:e6:c0:74:ea:64:8f:3e:a1:63:c0:d2:38:bd:9c:02:f3:bd: 23:b4:4c:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrXrp+AUZZ0pPoHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAwMzE0MjIxOVoXDTI1MDEwMTE1MjIxOVowLzEtMCsGA1UEAxMk YzcwNTAzODEtMTg4Ni00ODNiLWI4YTctZTI5MjQ3NDkwNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDhVe6rDVVhi8j+GVhm7jn6dbZDvgtuttg7k tn4Y/XTZINXnjwDpxwI3F8etpGWcCVWY0lneTqAblin5qzfnkawQx0U2mV8CTdNH ynkaqT1GO8x+8plUDoco1JFsO0+MFGRq+8U1d0SSJ422Y84Z2tqxJgEQaA2kdrxG 7mMMityxHZ3iyx9xBTrxheYSOoDgm3DVOp20nHxGt5jTEf+YI0Mq6qdzNPviEsDR 2ttIgAmHyWN/jcdENbp0UTFr7Nd17IaVjUWNumMQy3TOKiGhU6MxFhrnQYzzR2Oi ZF8k4S2tgby3bVerILtauZapabYYjSj0lzEiEUp0V4dk9S1/OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgLgdxkzcrrxLxxnA2ZX7+dhvKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTEwYTA2NDYtZDBkYy0z MGRjLWI5YjQtMzMyMzVmNmM4MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIywg/t7TfZaBP8fFuqAp4AniE2oLiVpbuU6b1osaSG5iDZn4mZahLAn M9KTZP8cLY7aauo1Lr54nSTenf37PrZcvriQtNrF03ePF2HpF1ZCWhY+SV5O1a7j PPT0ONj+mCoM2bWv+6KhLY0CMJ4s1aELsbgJnT2ervXF8sPg6s1B8ytSo/sfUGbI vuWuwITOA4yl9A05RE0kkqKi+/WVWLKVfP3YaQNE36JAXnhKWwhe1Upx/ypr5GkR 5aF/4cHzLI1j8YgRujCnMUw2qc7GdnuPduyAMg0Q8tadtVzpx3eThLDAVzEfrAJc VKzmwHTqZI8+oWPA0ji9nALzvSO0TAg= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:33 2024 by rpki-client on console-fra.rpki-client.org