$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa File: a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa (raw, json) Hash identifier: 9xyhTXvHaW/7YcSk7D8r8ynDIn0NNjcZU1GXxtmE7l4= Subject key identifier: C5:9F:5A:C1:0F:49:BD:DE:BF:41:75:B2:3F:86:4A:2A:B7:42:98:DE Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584737907CC079D96BC2C33D2540 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa Signing time: Sun 15 Sep 2024 01:00:30 +0000 ROA not before: Sun 15 Sep 2024 01:00:30 +0000 ROA not after: Sat 14 Dec 2024 02:00:30 +0000 asID: 203 IP address blocks: 20.134.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:37:90:7c:c0:79:d9:6b:c2:c3:3d:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 15 01:00:30 2024 GMT Not After : Dec 14 02:00:30 2024 GMT Subject: CN=268136fc-84d4-42aa-abf2-b094cbffa173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:56:42:46:42:57:ae:03:7c:d1:fe:0a:80:a6: e4:d4:21:5c:15:54:f5:ac:02:7e:42:47:97:c8:b2: 15:dc:a0:08:43:80:9b:8f:67:29:1c:c2:b8:22:a8: 7e:1e:4f:35:4f:7e:ab:74:c6:0b:1d:7a:0a:ca:26: eb:3e:7b:ed:f1:35:63:e9:28:2a:3e:5f:2e:06:9e: 1c:e0:62:fc:68:39:e8:4c:57:ab:29:8e:1e:01:92: f6:3f:38:ef:6d:2e:23:01:88:6a:0d:a7:38:43:bc: 1b:46:21:49:fd:ca:ae:65:20:23:4c:47:f2:3e:36: 7d:37:05:b7:c3:3d:5c:5c:00:84:98:d5:cf:cd:f2: d6:49:be:9c:f0:ce:52:e8:62:37:98:26:24:5f:bd: a3:20:19:f9:0b:79:3a:29:49:79:90:97:16:33:2c: d4:39:0f:d7:3d:0f:bd:36:df:fa:b5:53:6d:a4:ca: fc:b5:7c:29:51:d3:12:6e:ae:91:18:25:f9:2c:f5: f9:f6:99:af:8c:d1:f1:e1:86:62:08:37:0a:fd:1e: 79:56:00:03:c6:b5:d2:bb:b4:80:d9:db:05:83:2d: 99:80:7f:61:5e:b0:f9:ef:df:49:3b:23:8c:59:2a: ef:d8:99:dd:cb:92:b4:4e:c8:11:11:02:c7:6f:a9: f9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9F:5A:C1:0F:49:BD:DE:BF:41:75:B2:3F:86:4A:2A:B7:42:98:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.134.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:96:4e:0d:91:89:07:73:bc:69:60:b1:82:38:4c:a0:57:4e: c1:73:d5:f0:8f:23:09:30:45:66:5e:db:41:1d:eb:3e:23:54: 0a:61:ef:bd:99:b2:c7:f9:80:b9:0b:29:18:ad:f0:6a:9a:5e: ba:15:95:9b:2a:47:13:50:88:2b:b5:9a:a7:cd:14:bd:4b:e6: 4e:f4:10:af:2e:01:d6:ac:63:4b:ad:8d:0e:87:bf:86:f3:66: d9:6c:f5:51:65:29:fa:a3:1b:27:7d:31:e5:5d:8a:65:ac:f1: 0a:e0:1c:11:19:2b:9d:ee:4f:57:ef:7a:bc:ab:c0:5f:b8:b7: b8:dd:c0:c2:03:98:e8:4b:a0:ed:8d:da:d9:c3:85:bc:48:32: 73:bb:2d:f5:67:a2:71:82:27:8a:c4:c2:3b:16:17:34:ed:03: 8b:47:f3:03:d8:c6:9d:92:84:f4:47:90:f8:4e:6d:6a:7a:8a: 2d:8c:b0:84:82:f4:40:e6:ed:a4:2d:88:15:98:b4:cf:23:6f: 59:64:58:9c:d5:d7:0f:89:a7:25:a2:c2:8b:01:b6:ba:7b:e1: 4c:20:d2:8a:07:b7:4d:18:d6:d0:01:15:d9:d9:ae:5b:f4:e8: 02:88:46:c6:71:ff:bc:ef:ac:eb:c0:fc:03:a2:4d:99:fc:80: a9:dc:db:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc3kHzAedlrwsM9JUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDkxNTAxMDAzMFoXDTI0MTIxNDAyMDAzMFowLzEtMCsGA1UEAxMk MjY4MTM2ZmMtODRkNC00MmFhLWFiZjItYjA5NGNiZmZhMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilZCRkJXrgN80f4KgKbk1CFcFVT1rAJ+QkeX yLIV3KAIQ4Cbj2cpHMK4Iqh+Hk81T36rdMYLHXoKyibrPnvt8TVj6SgqPl8uBp4c 4GL8aDnoTFerKY4eAZL2PzjvbS4jAYhqDac4Q7wbRiFJ/cquZSAjTEfyPjZ9NwW3 wz1cXACEmNXPzfLWSb6c8M5S6GI3mCYkX72jIBn5C3k6KUl5kJcWMyzUOQ/XPQ+9 Nt/6tVNtpMr8tXwpUdMSbq6RGCX5LPX59pmvjNHx4YZiCDcK/R55VgADxrXSu7SA 2dsFgy2ZgH9hXrD5799JOyOMWSrv2Jndy5K0TsgREQLHb6n5KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWfWsEPSb3ev0F1sj+GSiq3QpjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTUxYzFiNzEtMmRhMi0z YTlmLWE3MWYtZTE1YzkzNGNjN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaWTg2RiQdzvGlgsYI4TKBXTsFz1fCPIwkwRWZe20Ed6z4jVAph772Z ssf5gLkLKRit8GqaXroVlZsqRxNQiCu1mqfNFL1L5k70EK8uAdasY0utjQ6Hv4bz Ztls9VFlKfqjGyd9MeVdimWs8QrgHBEZK53uT1fveryrwF+4t7jdwMIDmOhLoO2N 2tnDhbxIMnO7LfVnonGCJ4rEwjsWFzTtA4tH8wPYxp2ShPRHkPhObWp6ii2MsISC 9EDm7aQtiBWYtM8jb1lkWJzV1w+JpyWiwosBtrp74Uwg0ooHt00Y1tABFdnZrlv0 6AKIRsZx/7zvrOvA/AOiTZn8gKnc20g= -----END CERTIFICATE-----Generated at Sat Sep 21 01:34:50 2024 by rpki-client on console-fra.rpki-client.org