$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa File: a6d04891-47ad-353a-8897-df25d664bb32.roa (raw, json) Hash identifier: BarqsHdDWTjNuvZk+sbOXF5W1igC0EvnwDgk5GaYKBI= Subject key identifier: FA:08:94:9C:36:11:B1:02:89:88:83:9C:88:96:2A:D8:B9:45:C1:78 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285846F34A1788DA52964177B9FE50 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa Signing time: Wed 21 Aug 2024 14:03:44 +0000 ROA not before: Wed 21 Aug 2024 14:03:44 +0000 ROA not after: Tue 19 Nov 2024 15:03:44 +0000 asID: 203 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:f3:4a:17:88:da:52:96:41:77:b9:fe:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 21 14:03:44 2024 GMT Not After : Nov 19 15:03:44 2024 GMT Subject: CN=c0da0c78-1d36-4f93-bc8b-d58ea623fc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:66:21:39:f0:23:97:b6:a7:d9:8a:b2:9c:a3: d7:23:17:3a:7f:7b:00:0f:e0:cc:c3:35:bd:ba:5f: 08:b1:76:d2:6a:16:4c:85:52:20:41:c7:04:b5:2c: 60:1a:04:16:ac:42:91:18:b9:61:0f:c1:1a:63:28: b2:77:02:d4:5c:29:26:bf:28:1e:0d:c9:ad:89:6c: f1:e3:a9:8d:03:28:04:6c:ec:7e:08:73:a5:27:a5: 6c:51:f3:b3:31:17:39:46:fc:2f:2e:f2:ba:3e:0c: f6:65:6c:dc:a6:e2:6d:7f:72:15:0e:05:0d:7f:34: f2:51:62:8d:c8:1f:0a:85:2b:39:22:70:25:0c:30: 75:cf:e4:24:13:60:e0:b7:25:15:25:16:d1:a1:27: 6f:a5:7b:b3:76:ea:31:29:ae:70:d9:66:5c:99:b4: f6:f9:95:06:82:19:2a:62:83:15:bd:fe:ba:b8:b0: 18:4b:dd:5f:85:ff:f3:4b:ed:33:db:b2:f9:c5:37: b7:aa:65:4c:6a:77:7c:e0:09:a5:20:db:4c:77:f3: 32:b3:3a:08:ca:a8:fb:d3:c8:40:75:e2:7f:e8:11: 33:4b:23:00:3b:cf:bc:2d:49:c2:b9:3b:39:a1:c9: 28:b9:45:68:4c:fc:67:32:ab:50:a4:61:1c:78:81: 2c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:08:94:9C:36:11:B1:02:89:88:83:9C:88:96:2A:D8:B9:45:C1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a6d04891-47ad-353a-8897-df25d664bb32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b4:20:84:75:1e:b8:b5:7a:e1:a4:b8:24:d5:52:66:c4:82: 1c:5b:f2:87:46:ad:44:1e:10:74:9a:07:3c:f4:e6:d5:e5:72: 0f:17:32:5c:48:74:08:de:25:fc:46:55:a1:6d:4c:b2:01:94: 6d:79:86:5b:d0:5a:a4:bb:cc:b4:8f:16:d8:72:4d:a3:ee:d6: 71:c1:a3:0b:a5:e2:95:79:2b:c3:4a:55:f3:4b:33:57:0d:5a: 33:3c:d2:28:b9:f0:4e:36:df:d0:62:52:22:51:e3:ca:08:a5: ff:6c:db:97:87:26:eb:99:9c:59:2e:e2:e6:45:7c:bc:aa:c4: cf:c7:2c:c0:34:31:46:be:b6:1b:4d:23:e1:13:b3:a3:d5:dd: 68:fb:72:8f:1f:e5:36:3b:81:b7:1d:29:da:60:0f:1d:1b:b9: 1d:b4:9a:66:cb:46:7d:0c:66:e3:4c:4b:5e:93:af:04:b4:d8: 80:f5:5c:eb:bf:10:f5:a3:26:a7:a1:02:b0:dc:e5:4a:fb:8c: 6a:26:8f:67:70:62:51:d7:87:ec:50:16:69:da:65:12:cf:89: 04:b6:37:dc:1c:d0:da:25:d1:23:37:b3:23:6a:2a:cc:92:2d: 10:e2:17:bd:59:a3:1f:e0:01:eb:6e:6e:68:0d:a8:2a:de:9c: 99:89:c6:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbzSheI2lKWQXe5/lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDgyMTE0MDM0NFoXDTI0MTExOTE1MDM0NFowLzEtMCsGA1UEAxMk YzBkYTBjNzgtMWQzNi00ZjkzLWJjOGItZDU4ZWE2MjNmYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGYhOfAjl7an2YqynKPXIxc6f3sAD+DMwzW9 ul8IsXbSahZMhVIgQccEtSxgGgQWrEKRGLlhD8EaYyiydwLUXCkmvygeDcmtiWzx 46mNAygEbOx+CHOlJ6VsUfOzMRc5RvwvLvK6Pgz2ZWzcpuJtf3IVDgUNfzTyUWKN yB8KhSs5InAlDDB1z+QkE2DgtyUVJRbRoSdvpXuzduoxKa5w2WZcmbT2+ZUGghkq YoMVvf66uLAYS91fhf/zS+0z27L5xTe3qmVMand84AmlINtMd/MyszoIyqj708hA deJ/6BEzSyMAO8+8LUnCuTs5ockouUVoTPxnMqtQpGEceIEs9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoIlJw2EbECiYiDnIiWKti5RcF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTZkMDQ4OTEtNDdhZC0z NTNhLTg4OTctZGYyNWQ2NjRiYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS0IIR1Hri1euGkuCTVUmbEghxb8odGrUQeEHSaBzz05tXlcg8XMlxI dAjeJfxGVaFtTLIBlG15hlvQWqS7zLSPFthyTaPu1nHBowul4pV5K8NKVfNLM1cN WjM80ii58E4239BiUiJR48oIpf9s25eHJuuZnFku4uZFfLyqxM/HLMA0MUa+thtN I+ETs6PV3Wj7co8f5TY7gbcdKdpgDx0buR20mmbLRn0MZuNMS16TrwS02ID1XOu/ EPWjJqehArDc5Ur7jGomj2dwYlHXh+xQFmnaZRLPiQS2N9wc0Nol0SM3syNqKsyS LRDiF71Zox/gAetubmgNqCrenJmJxkI= -----END CERTIFICATE-----Generated at Sat Sep 21 01:34:50 2024 by rpki-client on console-fra.rpki-client.org