$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa2ce0f1-9da2-3179-8c52-8be3548bcb46.roa File: aa2ce0f1-9da2-3179-8c52-8be3548bcb46.roa (raw, json) Hash identifier: f0SgcpFBIqkk956axQ2CMxKp1EYtkQAQ+WUb0LJ65mE= Subject key identifier: 45:E5:96:DE:5C:B1:7C:2E:0A:A4:26:E7:3C:3A:89:C4:38:E4:CF:82 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285845E49B75B1F042B953ABFB8500 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa2ce0f1-9da2-3179-8c52-8be3548bcb46.roa Signing time: Thu 16 May 2024 15:03:37 +0000 ROA not before: Thu 16 May 2024 15:03:37 +0000 ROA not after: Wed 14 Aug 2024 15:03:37 +0000 asID: 3356 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e4:9b:75:b1:f0:42:b9:53:ab:fb:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 16 15:03:37 2024 GMT Not After : Aug 14 15:03:37 2024 GMT Subject: CN=15dd6cb8-42d0-40f3-b914-7d805fa162e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bd:07:26:6e:8e:ec:26:68:cf:eb:c4:64:5f: 94:e7:15:94:49:ea:15:63:25:d2:9c:af:7f:0d:5f: 35:94:a2:99:fc:70:10:47:f9:1c:a1:b7:4d:ed:81: 30:f1:7d:8b:82:e8:95:ff:88:e2:fa:28:4c:bd:ea: 3a:12:0d:37:63:31:e9:ef:5a:44:c7:bd:91:50:ab: f6:2c:61:07:55:e2:e3:7c:9d:b3:7a:15:ba:27:70: aa:4d:bf:52:fe:1a:e6:0c:11:4c:88:b9:5f:e8:c2: cc:46:63:75:0d:dc:e2:53:e2:bf:1d:59:05:45:84: b2:e2:cc:ad:ea:d6:3c:f8:ad:e4:bf:e7:32:0d:21: 31:d2:35:52:28:9c:69:69:d2:93:6e:4b:fa:69:0e: e6:07:b1:93:16:57:64:76:67:40:19:17:fe:00:67: c1:a6:5a:c5:6b:60:8d:21:c4:a2:3a:74:01:42:40: 0d:69:c2:53:b9:6f:b4:c6:23:a1:74:d0:95:4d:27: 38:6d:58:0b:db:ca:7d:44:a1:3e:e3:21:32:3f:6e: d3:0e:71:cc:b3:3c:f8:c7:bb:c6:d8:b1:90:a3:d5: da:11:b9:d1:3e:7b:80:4c:ba:c5:5f:db:02:21:28: cd:a5:45:fa:94:e2:85:fc:55:da:4e:59:53:9e:08: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E5:96:DE:5C:B1:7C:2E:0A:A4:26:E7:3C:3A:89:C4:38:E4:CF:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa2ce0f1-9da2-3179-8c52-8be3548bcb46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:54:e7:30:be:48:9a:87:c5:58:75:83:fe:10:b3:c2:77:5b: 11:04:27:73:a2:a5:00:26:d6:e4:48:15:60:8d:1a:a0:49:65: 86:79:9a:9e:26:5b:85:95:67:fd:30:d7:70:ec:d4:01:eb:e2: 14:e3:dc:de:8a:d8:74:14:e5:23:69:0f:91:3f:f6:16:36:2c: 69:89:94:90:43:08:1c:8d:cf:82:8c:f4:da:85:5c:3d:b8:5d: 33:03:c0:9d:73:3f:22:fb:60:47:70:59:c8:8c:e9:32:37:01: e8:27:1c:a2:16:d2:28:1a:ed:05:fc:54:3f:25:6f:f7:fd:c7: d9:06:92:36:8b:41:9f:bc:6a:b0:e0:54:e9:a8:df:6c:19:3f: ab:a6:d9:8f:4c:86:32:1d:81:4f:de:55:10:dc:b9:12:e2:06: 3b:13:85:77:f5:04:2f:40:e9:43:29:d2:c8:84:a6:58:e1:19: ee:76:68:08:5b:a4:d4:a5:d1:10:d7:85:64:43:78:41:ff:ab: bb:6a:68:d0:bb:06:36:26:28:0f:17:46:9a:91:c6:eb:0f:90: 44:72:d3:f8:50:90:0a:1a:5e:86:22:35:60:33:85:78:ac:93: 36:1f:34:bb:5a:1b:37:7f:c7:9d:0a:3e:cf:c2:d2:76:dd:a5: c6:fd:5d:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXkm3Wx8EK5U6v7hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDUxNjE1MDMzN1oXDTI0MDgxNDE1MDMzN1owLzEtMCsGA1UEAxMk MTVkZDZjYjgtNDJkMC00MGYzLWI5MTQtN2Q4MDVmYTE2MmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL0HJm6O7CZoz+vEZF+U5xWUSeoVYyXSnK9/ DV81lKKZ/HAQR/kcobdN7YEw8X2LguiV/4ji+ihMveo6Eg03YzHp71pEx72RUKv2 LGEHVeLjfJ2zehW6J3CqTb9S/hrmDBFMiLlf6MLMRmN1DdziU+K/HVkFRYSy4syt 6tY8+K3kv+cyDSEx0jVSKJxpadKTbkv6aQ7mB7GTFldkdmdAGRf+AGfBplrFa2CN IcSiOnQBQkANacJTuW+0xiOhdNCVTSc4bVgL28p9RKE+4yEyP27TDnHMszz4x7vG 2LGQo9XaEbnRPnuATLrFX9sCISjNpUX6lOKF/FXaTllTngjgRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXllt5csXwuCqQm5zw6icQ45M+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWEyY2UwZjEtOWRhMi0z MTc5LThjNTItOGJlMzU0OGJjYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5U5zC+SJqHxVh1g/4Qs8J3WxEEJ3OipQAm1uRIFWCNGqBJZYZ5mp4m W4WVZ/0w13Ds1AHr4hTj3N6K2HQU5SNpD5E/9hY2LGmJlJBDCByNz4KM9NqFXD24 XTMDwJ1zPyL7YEdwWciM6TI3AegnHKIW0iga7QX8VD8lb/f9x9kGkjaLQZ+8arDg VOmo32wZP6um2Y9MhjIdgU/eVRDcuRLiBjsThXf1BC9A6UMp0siEpljhGe52aAhb pNSl0RDXhWRDeEH/q7tqaNC7BjYmKA8XRpqRxusPkERy0/hQkAoaXoYiNWAzhXis kzYfNLtaGzd/x50KPs/C0nbdpcb9Xd0= -----END CERTIFICATE-----Generated at Sat Jun 1 11:15:21 2024 by rpki-client on console-fra.rpki-client.org