$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa File: d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa (raw, json) Hash identifier: gQ404CaJz0P7O7U3c3mi19iSDgkxeb+kyz16LJkjHDI= Subject key identifier: 88:82:9D:36:0A:30:78:CA:22:84:E2:B4:6E:49:DC:FB:1A:B8:33:12 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847B6448617F39D541496307140 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa Signing time: Wed 30 Oct 2024 10:15:08 +0000 ROA not before: Wed 30 Oct 2024 10:15:08 +0000 ROA not after: Tue 28 Jan 2025 11:15:08 +0000 asID: 3356 IP address blocks: 20.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:44:86:17:f3:9d:54:14:96:30:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 30 10:15:08 2024 GMT Not After : Jan 28 11:15:08 2025 GMT Subject: CN=a3dde4d7-34d7-46d7-a8a1-175440e548e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4d:97:92:bb:f6:eb:7c:74:8c:cc:35:88:f5: 63:40:21:34:b4:cd:d7:ff:31:73:66:cd:a6:11:06: 59:bb:25:28:e5:96:30:9a:c0:ad:dc:8a:80:85:c7: c7:38:cd:7d:d6:5b:3c:c9:b1:06:01:2d:91:e0:97: 48:34:4b:00:79:85:2d:57:0c:24:ed:60:42:4d:c8: 14:51:c5:93:73:f4:e8:67:40:a7:34:c8:28:09:78: 72:26:f2:da:58:a6:a1:05:dd:52:37:e1:fc:0a:f7: bc:b3:b1:38:3e:64:62:b8:48:61:57:d3:26:f2:90: 24:fb:d6:e1:30:22:a6:ef:16:5a:f3:6b:b9:9d:c9: dd:4b:ba:e0:a7:19:41:54:49:49:80:03:f9:38:b9: 51:ba:f7:22:95:35:a4:11:fa:c3:32:a7:d9:43:70: 88:27:8a:02:e5:b6:fb:68:f5:e9:8d:fa:f1:b2:60: 99:4a:09:f4:a5:3c:d7:4c:7f:f2:70:16:fa:33:c6: 6b:48:9a:68:e0:82:b0:a9:71:f6:1d:ca:45:ad:49: 00:fd:f3:33:47:b3:c2:e2:97:eb:9e:08:fb:18:e4: 30:cb:09:fe:b7:2f:4d:98:d1:3d:ff:4d:23:f7:c7: a3:13:9f:d3:14:bd:e3:87:87:27:08:90:40:dd:cb: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:82:9D:36:0A:30:78:CA:22:84:E2:B4:6E:49:DC:FB:1A:B8:33:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d1d9b311-ce9e-386a-b5e5-b6f01cd1cd29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:62:d2:a1:d5:5d:c3:59:e2:48:28:85:24:a1:d4:f4:e3:9d: f7:34:6c:e2:ad:21:3c:b1:45:69:78:40:cd:a8:5e:8a:a5:f3: 7e:35:a8:a9:36:f3:39:26:5a:a0:e2:79:33:90:a0:7f:19:f6: 2d:95:9f:f8:ba:32:49:4f:37:b4:61:7d:1f:8f:79:b4:55:e1: c3:fe:b7:78:c4:a7:de:4a:50:0e:6f:49:93:4f:97:9e:5c:e1: d2:62:83:1f:4c:42:cc:1e:53:36:8c:67:56:5d:7b:87:4e:37: 43:1f:fd:92:6a:fb:7f:30:d3:12:93:cf:2e:99:4b:93:dc:28: 06:d4:85:17:e3:45:aa:ee:39:7a:6c:d3:4a:94:77:81:9f:20: d9:a8:ad:af:92:41:33:35:b1:81:5e:d5:36:f8:d6:34:3a:c9: f0:11:9a:c7:70:8c:11:c9:5c:79:47:71:46:81:50:75:67:b1: ad:3a:20:68:18:d7:be:16:99:45:a8:51:a0:61:23:45:7e:1e: f2:09:53:d9:fc:43:15:8c:14:84:c4:c5:59:66:d6:62:9a:76: 3b:50:0e:1b:a2:48:73:dd:9b:c6:0a:0e:e4:a1:bb:e0:1b:0d: 1b:87:0f:b4:3a:27:3a:47:2f:d7:b4:2d:1b:04:e5:57:78:ae: 77:2c:8f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2RIYX851UFJYwcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAzMDEwMTUwOFoXDTI1MDEyODExMTUwOFowLzEtMCsGA1UEAxMk YTNkZGU0ZDctMzRkNy00NmQ3LWE4YTEtMTc1NDQwZTU0OGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg02Xkrv263x0jMw1iPVjQCE0tM3X/zFzZs2m EQZZuyUo5ZYwmsCt3IqAhcfHOM191ls8ybEGAS2R4JdINEsAeYUtVwwk7WBCTcgU UcWTc/ToZ0CnNMgoCXhyJvLaWKahBd1SN+H8Cve8s7E4PmRiuEhhV9Mm8pAk+9bh MCKm7xZa82u5ncndS7rgpxlBVElJgAP5OLlRuvcilTWkEfrDMqfZQ3CIJ4oC5bb7 aPXpjfrxsmCZSgn0pTzXTH/ycBb6M8ZrSJpo4IKwqXH2HcpFrUkA/fMzR7PC4pfr ngj7GOQwywn+ty9NmNE9/00j98ejE5/TFL3jh4cnCJBA3csFtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiCnTYKMHjKIoTitG5J3PsauDMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDFkOWIzMTEtY2U5ZS0z ODZhLWI1ZTUtYjZmMDFjZDFjZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9i0qHVXcNZ4kgohSSh1PTjnfc0bOKtITyxRWl4QM2oXoql8341qKk2 8zkmWqDieTOQoH8Z9i2Vn/i6MklPN7RhfR+PebRV4cP+t3jEp95KUA5vSZNPl55c 4dJigx9MQsweUzaMZ1Zde4dON0Mf/ZJq+38w0xKTzy6ZS5PcKAbUhRfjRaruOXps 00qUd4GfINmora+SQTM1sYFe1Tb41jQ6yfARmsdwjBHJXHlHcUaBUHVnsa06IGgY 174WmUWoUaBhI0V+HvIJU9n8QxWMFITExVlm1mKadjtQDhuiSHPdm8YKDuShu+Ab DRuHD7Q6JzpHL9e0LRsE5Vd4rncsj9E= -----END CERTIFICATE-----Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org