$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c964f79f-8fc6-3edb-83f1-2eb650271acf.roa File: c964f79f-8fc6-3edb-83f1-2eb650271acf.roa (raw, json) Hash identifier: kpVshZYKfGpU9pYsum3mGeqC5RBaFdHAVInVA/6fvWw= Subject key identifier: 8E:8F:B3:41:A2:EC:D8:A3:78:2B:28:5F:36:ED:FA:44:D4:37:2F:21 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858476B67E13F6B28FCC1B4104B00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c964f79f-8fc6-3edb-83f1-2eb650271acf.roa Signing time: Thu 03 Oct 2024 14:40:45 +0000 ROA not before: Thu 03 Oct 2024 14:40:45 +0000 ROA not after: Wed 01 Jan 2025 15:40:45 +0000 asID: 203 IP address blocks: 20.148.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:67:e1:3f:6b:28:fc:c1:b4:10:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 3 14:40:45 2024 GMT Not After : Jan 1 15:40:45 2025 GMT Subject: CN=8a9c3cc8-0365-48b5-a4d7-6851809c3bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:77:20:3f:73:76:de:32:b8:c6:63:20:71: 2f:df:4b:38:f4:79:09:85:4e:c3:2f:78:37:3a:ea: 39:36:e3:be:44:e3:ce:ff:c9:b2:e0:22:ce:ed:c0: f2:f1:43:1f:3b:40:01:98:50:d9:4b:e2:9b:6e:ef: 1c:8f:cd:0f:cc:ee:86:12:64:af:93:2c:86:3f:70: 9b:e7:c6:44:01:10:f3:1a:22:b7:8c:60:46:5c:bf: 28:40:5f:51:13:e0:e9:a8:49:da:5f:fd:6b:92:ca: 45:43:69:6b:ee:0e:3b:12:84:b2:0b:d1:a6:80:90: f0:08:b3:07:4a:b6:3b:41:9f:af:aa:e5:f1:4d:cc: ff:e5:93:f0:78:bb:59:47:4b:ef:5b:02:64:d2:55: d2:3f:75:df:ee:89:fa:d0:0f:07:cb:c3:02:c6:49: 23:11:92:2d:d1:a3:df:2f:7f:be:73:52:e1:e6:b3: 0e:21:34:68:3e:53:c1:8a:ef:6b:45:a8:d8:17:54: 99:77:32:40:e6:19:11:97:8b:80:ca:2d:ee:4f:29: a9:6f:d0:55:99:ed:7a:90:61:c1:b4:7f:2d:65:2c: 66:e8:f4:e0:32:14:3e:b7:11:c9:4c:eb:50:4f:1f: 68:75:f1:57:d9:6c:69:0a:56:a6:2f:99:6d:6b:97: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8F:B3:41:A2:EC:D8:A3:78:2B:28:5F:36:ED:FA:44:D4:37:2F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c964f79f-8fc6-3edb-83f1-2eb650271acf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6c:88:92:62:7b:a6:76:07:8b:fe:bc:67:0b:1e:6f:ef:99: 42:e5:62:48:e3:2f:67:9c:63:22:8e:62:f5:bc:e7:84:1e:91: f3:49:dc:7d:4a:1f:49:75:7b:16:d6:17:d3:71:24:1d:3b:ae: 40:b3:89:5a:b8:99:99:7c:22:58:ad:ef:a7:4d:5c:ab:0d:cf: 56:a3:41:1e:bd:0e:81:42:8e:da:a9:97:60:98:47:88:72:b0: 59:c5:76:5d:b4:5d:59:82:72:3e:17:eb:d0:9b:9d:ab:78:5d: ef:75:4e:15:ca:26:a8:76:51:0a:3a:d7:73:91:6c:93:77:98: b1:0a:7d:1a:82:82:77:ef:46:42:17:b5:cb:fe:c6:8f:5e:27: 18:c9:33:b7:be:4e:f5:7c:26:29:08:bb:4e:2d:81:e1:4f:04: f1:d0:71:cd:3e:7b:fd:a3:5b:6a:ef:6e:39:32:63:5a:05:48: 90:fc:32:61:49:83:9e:73:74:34:58:db:d1:1c:9b:74:80:ad: 7c:e2:4c:db:5c:1a:83:ca:da:65:01:a2:43:f9:b0:c0:92:d5: a2:c6:f9:3d:73:4b:77:b9:86:d3:90:67:b7:1b:fa:84:db:31: f4:39:25:38:b3:e8:c1:5e:ae:f6:d9:3c:b1:39:f1:bf:80:bd: 5b:51:68:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrZ+E/ayj8wbQQSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAwMzE0NDA0NVoXDTI1MDEwMTE1NDA0NVowLzEtMCsGA1UEAxMk OGE5YzNjYzgtMDM2NS00OGI1LWE0ZDctNjg1MTgwOWMzYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1V3ID9zdt4yuMZjIHEv30s49HkJhU7DL3g3 Ouo5NuO+ROPO/8my4CLO7cDy8UMfO0ABmFDZS+Kbbu8cj80PzO6GEmSvkyyGP3Cb 58ZEARDzGiK3jGBGXL8oQF9RE+DpqEnaX/1rkspFQ2lr7g47EoSyC9GmgJDwCLMH SrY7QZ+vquXxTcz/5ZPweLtZR0vvWwJk0lXSP3Xf7on60A8Hy8MCxkkjEZIt0aPf L3++c1Lh5rMOITRoPlPBiu9rRajYF1SZdzJA5hkRl4uAyi3uTympb9BVme16kGHB tH8tZSxm6PTgMhQ+txHJTOtQTx9odfFX2WxpClamL5lta5eIjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6Ps0Gi7NijeCsoXzbt+kTUNy8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzk2NGY3OWYtOGZjNi0z ZWRiLTgzZjEtMmViNjUwMjcxYWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVsiJJie6Z2B4v+vGcLHm/vmULlYkjjL2ecYyKOYvW854QekfNJ3H1K H0l1exbWF9NxJB07rkCziVq4mZl8Ilit76dNXKsNz1ajQR69DoFCjtqpl2CYR4hy sFnFdl20XVmCcj4X69Cbnat4Xe91ThXKJqh2UQo613ORbJN3mLEKfRqCgnfvRkIX tcv+xo9eJxjJM7e+TvV8JikIu04tgeFPBPHQcc0+e/2jW2rvbjkyY1oFSJD8MmFJ g55zdDRY29Ecm3SArXziTNtcGoPK2mUBokP5sMCS1aLG+T1zS3e5htOQZ7cb+oTb MfQ5JTiz6MFervbZPLE58b+AvVtRaN8= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:22 2024 by rpki-client on console-ams.rpki-client.org