$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa File: da015e1a-f458-3674-9325-2b4dbacc74f1.roa (raw, json) Hash identifier: 4q3619HJt3C+L7o72pp6twQcvbS/KWp9tUoVMqrxDRk= Subject key identifier: 57:F5:4F:99:CF:BD:E0:DC:35:A0:2D:A1:32:73:2B:34:DA:31:18:AA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847D4049A89D66C4B2F4D2C3200 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 3360 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:9a:89:d6:6c:4b:2f:4d:2c:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=f8999e18-44fe-4e34-8020-547951411e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:50:d1:1e:28:d9:9e:13:83:25:f3:72:58:9f: 2a:e2:6b:55:ab:a4:81:30:1f:4b:5b:91:4e:b5:69: 76:e4:a9:db:eb:e5:4e:d0:e8:06:ba:26:b9:56:de: 87:86:15:17:73:59:cf:b6:dd:90:b1:6e:30:22:95: bb:61:3e:36:2f:af:22:79:f8:52:f7:d3:9c:09:2a: 6c:c1:51:19:50:84:9a:86:55:40:c7:45:78:54:39: b5:a1:e9:0e:04:07:40:6e:d6:81:c0:28:18:75:5b: c7:72:98:dc:fb:02:00:27:60:5c:f6:bd:98:69:f2: 0f:47:55:52:0a:9c:a0:e0:fa:aa:c6:43:66:0d:4e: 82:0b:21:53:b6:76:02:63:c2:8a:77:91:26:ca:d9: 4e:71:ef:0e:04:55:89:8c:3e:44:cd:8c:f3:a5:1c: 32:03:7b:ec:cc:20:fe:9a:68:3d:60:8a:7d:62:d3: 72:8a:39:32:84:a0:b1:5d:33:c6:03:4f:bc:67:15: 4a:2c:3c:f0:79:dc:af:bf:6d:f7:bf:a2:19:f9:d8: f0:cf:d8:9b:35:af:19:e3:79:2a:ee:80:87:e2:d2: 89:ab:4a:6c:c0:bf:14:67:c5:07:34:68:c2:20:e0: 66:45:13:4e:f2:26:d2:47:9d:07:1d:c6:4d:e8:e4: 1f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F5:4F:99:CF:BD:E0:DC:35:A0:2D:A1:32:73:2B:34:DA:31:18:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:bc:69:6f:9b:5d:c2:16:fb:10:b3:19:fe:80:45:b3:52:c7: 9d:3c:81:12:c2:af:3b:e4:12:9d:b8:00:06:72:79:47:a4:9a: 5d:31:55:d1:9e:5b:4d:3b:59:12:f0:36:19:f8:4f:5d:b0:1d: a3:dd:d3:87:09:57:a6:d2:2a:d3:71:a1:2e:59:63:fb:b5:be: 3c:41:7d:b4:63:fb:18:44:9e:df:f2:19:b7:f0:72:e9:55:2e: a2:65:5d:58:69:11:de:03:2f:bc:73:53:27:fe:88:d7:fb:10: ea:94:be:dc:92:f2:fb:36:b3:90:4b:62:8f:ed:c3:cb:8a:98: 96:34:c2:32:74:e9:62:f2:03:56:1e:0e:35:58:d0:d4:d9:33: 0e:9f:ba:0f:94:70:6b:ab:17:7c:db:2e:a5:d0:5c:05:f4:18: ac:9c:d4:3c:b3:ea:11:f9:10:ca:a7:31:b5:ab:7d:6c:6e:dc: 42:2c:ec:ed:22:dd:fa:e0:8d:79:99:51:75:1c:1c:ab:86:e1: 27:e8:23:10:26:22:16:a9:8c:2d:3f:be:8f:43:8c:ae:56:36: 31:fa:6c:f0:17:54:92:8a:ae:2b:c5:1f:31:fa:e7:04:37:f6: 91:c3:e3:31:0b:f0:3d:14:b5:f5:98:95:f9:9b:5b:7d:ed:70: ce:ea:3a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJqJ1mxLL00sMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk Zjg5OTllMTgtNDRmZS00ZTM0LTgwMjAtNTQ3OTUxNDExZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1DRHijZnhODJfNyWJ8q4mtVq6SBMB9LW5FO tWl25Knb6+VO0OgGuia5Vt6HhhUXc1nPtt2QsW4wIpW7YT42L68iefhS99OcCSps wVEZUISahlVAx0V4VDm1oekOBAdAbtaBwCgYdVvHcpjc+wIAJ2Bc9r2YafIPR1VS Cpyg4PqqxkNmDU6CCyFTtnYCY8KKd5EmytlOce8OBFWJjD5EzYzzpRwyA3vszCD+ mmg9YIp9YtNyijkyhKCxXTPGA0+8ZxVKLDzwedyvv233v6IZ+djwz9ibNa8Z43kq 7oCH4tKJq0pswL8UZ8UHNGjCIOBmRRNO8ibSR50HHcZN6OQfiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFf1T5nPveDcNaAtoTJzKzTaMRiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEwMTVlMWEtZjQ1OC0z Njc0LTkzMjUtMmI0ZGJhY2M3NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJi8aW+bXcIW+xCzGf6ARbNSx508gRLCrzvkEp24AAZyeUekml0xVdGe W007WRLwNhn4T12wHaPd04cJV6bSKtNxoS5ZY/u1vjxBfbRj+xhEnt/yGbfwculV LqJlXVhpEd4DL7xzUyf+iNf7EOqUvtyS8vs2s5BLYo/tw8uKmJY0wjJ06WLyA1Ye DjVY0NTZMw6fug+UcGurF3zbLqXQXAX0GKyc1Dyz6hH5EMqnMbWrfWxu3EIs7O0i 3frgjXmZUXUcHKuG4SfoIxAmIhapjC0/vo9DjK5WNjH6bPAXVJKKrivFHzH65wQ3 9pHD4zEL8D0UtfWYlfmbW33tcM7qOpk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org