$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa File: a6d04891-47ad-353a-8897-df25d664bb32.roa (raw, json) Hash identifier: Yu/q0oJmefFbx0cnea/0eRr//zWGIqqpoZjpXHZwrHk= Subject key identifier: A3:F7:C2:D3:00:72:A0:E8:D5:CE:69:F9:32:C3:3F:88:4C:C4:1A:68 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847D4049AC34A841AC0AA265D00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 203 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:9a:c3:4a:84:1a:c0:aa:26:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=33634d19-2cf1-4372-8d43-ce767d9d0ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:3a:e1:ec:fb:ca:11:49:19:bd:4e:7a:db: cc:5e:28:0f:89:4d:20:5a:be:0a:70:d8:2d:c4:4f: de:58:76:b0:f0:ed:80:74:8e:0d:e6:bc:ce:f6:88: ca:5a:f8:d0:18:fd:f3:35:34:69:49:ba:c5:06:05: f8:4d:50:7d:a0:59:1c:74:16:25:7e:0f:6e:69:c2: 09:02:05:44:07:d3:ee:61:da:cd:30:48:74:7b:3b: 66:3e:23:12:a8:bd:a0:39:cd:bd:74:bf:72:f9:9e: 11:5f:e9:56:51:17:8d:ee:e7:21:1b:a7:29:dd:9d: a1:a8:56:3b:3c:56:e2:24:a6:1a:2f:cb:22:15:44: cd:8a:1b:eb:ec:d7:bc:b8:37:7e:4f:63:10:3d:26: ce:fb:ce:cd:fc:eb:51:f8:a5:26:44:c7:cc:8c:25: 1f:c3:8d:59:72:9d:71:0f:89:a8:aa:4d:ab:af:3c: 54:43:19:9a:79:7c:cd:ec:43:e0:53:f7:3b:47:89: 64:97:a1:d2:dd:46:a7:2f:c7:c0:4c:dd:cd:61:e8: ac:58:38:67:68:d9:88:27:3a:7b:1d:6d:4a:3a:db: 86:36:ad:60:6b:a4:02:8b:58:f2:9a:77:8b:8d:ab: 84:14:2f:2a:a7:3a:ec:24:00:95:9d:6d:e5:46:01: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F7:C2:D3:00:72:A0:E8:D5:CE:69:F9:32:C3:3F:88:4C:C4:1A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ad:36:e0:ec:9d:0e:8e:c4:36:e9:c4:86:5d:6d:ce:ad:d3: 80:15:07:cd:e9:da:3b:2d:7f:65:7a:f9:c1:c8:5c:7b:f9:4a: 9b:57:c6:68:53:0c:46:ea:7d:2e:4a:a7:17:a6:96:3c:a3:c1: 5e:c3:6f:f1:df:67:4a:1f:f7:f0:eb:52:9d:d6:a5:80:64:f0: 0c:13:aa:00:3a:99:de:85:77:4f:3c:7d:78:36:de:1e:bb:57: 76:af:d2:ef:aa:c3:66:b4:02:d1:12:18:08:07:6e:42:b5:76: 20:f4:70:93:18:f3:b4:08:a9:b3:04:bd:57:9d:ba:f5:bd:67: 62:e8:7e:ef:db:0e:1a:02:b9:da:a0:54:8f:1e:be:d9:ca:33: 03:33:a9:f6:79:40:74:63:61:d1:48:6b:c2:e4:ab:1b:c7:e5: 0e:c2:41:b3:43:e1:79:29:1e:ca:e9:cf:f9:e9:25:99:ab:f7: c0:6c:2b:1c:37:47:d0:e2:d4:c7:a1:58:78:dc:5b:3c:c5:55: 9a:d6:87:da:6d:e1:1a:95:c6:5e:a5:59:de:08:ad:73:1f:4a: 28:da:e3:98:90:a7:7b:2b:28:6b:24:06:8d:f4:de:ec:8a:10: a1:57:90:bc:75:20:c1:aa:18:7e:c3:6e:fb:bf:be:c7:31:91: 30:48:38:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJrDSoQawKomXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk MzM2MzRkMTktMmNmMS00MzcyLThkNDMtY2U3NjdkOWQwZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv064ez7yhFJGb1OetvMXigPiU0gWr4KcNgt xE/eWHaw8O2AdI4N5rzO9ojKWvjQGP3zNTRpSbrFBgX4TVB9oFkcdBYlfg9uacIJ AgVEB9PuYdrNMEh0eztmPiMSqL2gOc29dL9y+Z4RX+lWUReN7uchG6cp3Z2hqFY7 PFbiJKYaL8siFUTNihvr7Ne8uDd+T2MQPSbO+87N/OtR+KUmRMfMjCUfw41Zcp1x D4moqk2rrzxUQxmaeXzN7EPgU/c7R4lkl6HS3UanL8fATN3NYeisWDhnaNmIJzp7 HW1KOtuGNq1ga6QCi1jymneLjauEFC8qpzrsJACVnW3lRgHu8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP3wtMAcqDo1c5p+TLDP4hMxBpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTZkMDQ4OTEtNDdhZC0z NTNhLTg4OTctZGYyNWQ2NjRiYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAetNuDsnQ6OxDbpxIZdbc6t04AVB83p2jstf2V6+cHIXHv5SptXxmhT DEbqfS5KpxemljyjwV7Db/HfZ0of9/DrUp3WpYBk8AwTqgA6md6Fd088fXg23h67 V3av0u+qw2a0AtESGAgHbkK1diD0cJMY87QIqbMEvVeduvW9Z2Lofu/bDhoCudqg VI8evtnKMwMzqfZ5QHRjYdFIa8LkqxvH5Q7CQbND4XkpHsrpz/npJZmr98BsKxw3 R9Di1MehWHjcWzzFVZrWh9pt4RqVxl6lWd4IrXMfSija45iQp3srKGskBo303uyK EKFXkLx1IMGqGH7Dbvu/vscxkTBIOIc= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:33 2024 by rpki-client on console-fra.rpki-client.org