$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa458d0c-b835-3cf5-80ee-a0ec7c96e6cf.roa File: aa458d0c-b835-3cf5-80ee-a0ec7c96e6cf.roa (raw, json) Hash identifier: CsQbaXjAEzv/SW6j8eKElv0LytcubE+mDv4HBeS5+xg= Subject key identifier: 2D:38:A0:A2:F0:F8:B4:0C:29:A8:C2:91:4F:C1:82:B6:9C:02:1A:39 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847D4049BCF1DD48D26CA3B9600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa458d0c-b835-3cf5-80ee-a0ec7c96e6cf.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 3360 IP address blocks: 20.155.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:9b:cf:1d:d4:8d:26:ca:3b:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=463b54b3-2edd-4b70-9d08-e5fcc6a271fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a4:03:39:6d:07:fc:c8:59:a8:bc:b6:ca:08: 81:9b:33:d3:46:87:ec:7a:01:8a:c5:ce:03:64:87: 7b:ff:d1:95:13:ab:82:58:bf:c0:ab:df:f9:fa:d3: 9f:55:4d:1b:82:a2:2b:e3:bb:16:6b:0e:3a:aa:30: d8:97:ed:f8:d1:33:f1:cb:54:ab:77:47:4d:5d:13: c8:d2:61:dd:ba:fc:9c:48:90:2e:41:c6:90:d3:9c: 7e:9e:63:c0:39:c0:99:60:ed:bb:56:c0:a4:25:d2: cc:f5:60:7a:eb:f8:48:f8:01:30:ee:57:9a:9e:b8: 7b:eb:29:04:52:d4:7b:14:ac:95:0e:dd:46:60:97: 6d:ff:55:e9:95:1e:5c:ad:7c:2e:53:d3:5c:0f:56: 02:2e:ef:d5:3c:7f:ed:a1:69:5d:10:ef:b7:3d:88: ee:31:1e:6c:37:8b:7c:95:fa:e5:50:c1:fa:5b:4e: c5:fd:d8:15:19:83:76:81:3d:bf:52:68:44:2b:a8: 18:d8:23:5f:6b:53:20:a0:ab:f3:29:a3:e7:ae:dc: 13:86:52:2a:2c:c6:c7:17:b5:fb:35:d8:aa:dc:11: 17:32:3d:33:73:ec:6d:f0:e1:09:28:35:15:20:a9: dc:53:44:80:bc:7c:15:a4:f5:e6:95:63:2e:55:e8: 18:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:38:A0:A2:F0:F8:B4:0C:29:A8:C2:91:4F:C1:82:B6:9C:02:1A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa458d0c-b835-3cf5-80ee-a0ec7c96e6cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.155.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a7:6b:b7:e0:fd:e7:09:99:36:59:90:a4:26:bf:5d:3d:55: 1a:43:04:1b:97:21:71:1b:3f:0d:5f:2d:1f:0e:03:3a:6b:42: bb:4d:d7:64:b0:a1:b8:d6:e9:78:ef:a9:e9:49:6d:6a:b3:b4: 84:23:5a:83:da:72:b7:df:1c:aa:0d:db:cf:0c:bc:c0:ff:a2: 35:cc:da:47:75:b7:5c:5c:5e:ec:c9:0e:01:4d:98:95:9e:3c: a6:cd:3d:3c:80:2d:b5:77:61:c5:ab:75:5d:a3:77:9f:b7:a2: 13:23:66:aa:eb:0a:80:14:5b:d8:96:44:e8:43:a8:1a:1f:4e: bb:d5:e3:5a:2b:09:ad:41:cf:60:4e:58:f6:6e:60:7f:9b:19: d4:99:a7:71:80:07:03:d5:a2:fd:07:e1:23:eb:f8:2f:6f:e3: 1d:fd:01:d4:1d:5b:7f:85:a7:2a:75:71:39:b3:9f:54:b9:9d: b6:9d:d2:99:1d:dd:42:c4:dc:6e:36:0e:c6:8d:74:2b:a9:dd: 7a:2f:a9:df:c4:74:00:91:ec:b8:2b:d1:82:19:d0:08:da:d7: 31:b8:99:38:f1:09:8f:a2:76:a3:30:76:85:66:3f:4d:31:fb: 1c:75:70:da:45:01:4f:e2:74:1f:d7:65:c9:4c:ac:dd:95:d7: 9f:e4:fa:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJvPHdSNJso7lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk NDYzYjU0YjMtMmVkZC00YjcwLTlkMDgtZTVmY2M2YTI3MWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06QDOW0H/MhZqLy2ygiBmzPTRofsegGKxc4D ZId7/9GVE6uCWL/Aq9/5+tOfVU0bgqIr47sWaw46qjDYl+340TPxy1Srd0dNXRPI 0mHduvycSJAuQcaQ05x+nmPAOcCZYO27VsCkJdLM9WB66/hI+AEw7leanrh76ykE UtR7FKyVDt1GYJdt/1XplR5crXwuU9NcD1YCLu/VPH/toWldEO+3PYjuMR5sN4t8 lfrlUMH6W07F/dgVGYN2gT2/UmhEK6gY2CNfa1MgoKvzKaPnrtwThlIqLMbHF7X7 Ndiq3BEXMj0zc+xt8OEJKDUVIKncU0SAvHwVpPXmlWMuVegY8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC04oKLw+LQMKajCkU/BgracAho5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWE0NThkMGMtYjgzNS0z Y2Y1LTgwZWUtYTBlYzdjOTZlNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFJtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyna7fg/ecJmTZZkKQmv109VRpDBBuXIXEbPw1fLR8OAzprQrtN12Sw objW6XjvqelJbWqztIQjWoPacrffHKoN288MvMD/ojXM2kd1t1xcXuzJDgFNmJWe PKbNPTyALbV3YcWrdV2jd5+3ohMjZqrrCoAUW9iWROhDqBofTrvV41orCa1Bz2BO WPZuYH+bGdSZp3GABwPVov0H4SPr+C9v4x39AdQdW3+Fpyp1cTmzn1S5nbad0pkd 3ULE3G42DsaNdCup3Xovqd/EdACR7Lgr0YIZ0Aja1zG4mTjxCY+idqMwdoVmP00x +xx1cNpFAU/idB/XZclMrN2V15/k+uc= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:33 2024 by rpki-client on console-fra.rpki-client.org