$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa File: da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa (raw, json) Hash identifier: hyJyy/luMFPy96Wk5kLTI2kHLYudeLmiFv/l1tNS2cQ= Subject key identifier: 1C:52:97:3D:68:87:18:6D:8A:0E:DA:83:99:7F:69:4D:C0:74:E0:60 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847A47130EF1C342BDD8FB9AC80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa Signing time: Thu 24 Oct 2024 01:00:32 +0000 ROA not before: Thu 24 Oct 2024 01:00:32 +0000 ROA not after: Wed 22 Jan 2025 02:00:32 +0000 asID: 3360 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a4:71:30:ef:1c:34:2b:dd:8f:b9:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 24 01:00:32 2024 GMT Not After : Jan 22 02:00:32 2025 GMT Subject: CN=fa979dfa-1e3e-4761-963b-fb1500749c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:4a:81:f2:11:57:ce:d6:3b:7b:47:b7:e0: 55:75:8b:2e:dc:37:77:92:a4:b1:ef:55:91:5e:85: fb:50:f3:2a:19:5e:47:86:18:55:ef:90:01:fb:6a: a8:bd:b0:27:da:77:bb:1b:f4:ab:26:ee:86:af:5e: 6d:b4:59:1d:5f:cf:cc:56:ba:b9:91:f3:01:6b:a9: 17:4b:e1:2b:7a:b2:02:18:d9:cc:d7:ce:a3:be:56: 23:65:cb:2b:ac:11:47:bf:5d:49:c4:03:f3:95:b1: d7:fb:7e:8c:8d:9e:52:2c:69:c0:d4:4d:cf:56:1c: 3d:10:56:c4:ae:78:e4:aa:66:cd:96:ec:bc:06:d6: f4:ff:5c:79:51:7b:b1:e4:92:07:49:65:aa:80:15: 42:14:d5:3f:82:d2:a2:56:69:ee:af:a2:d8:53:1b: 38:38:63:5f:4e:4a:5f:93:cd:e8:bd:f6:49:aa:90: 24:60:0c:ff:a0:90:57:c2:9b:aa:6e:b5:03:44:90: ee:fb:2a:8c:5b:f7:8c:52:f5:4e:68:04:3c:64:44: ff:18:84:8b:ca:b0:23:a0:24:02:1d:d6:3e:a1:c8: ad:1f:a1:57:b3:d4:f7:94:92:7d:be:8f:e4:9d:d4: 30:68:10:fe:e4:35:52:50:40:ea:d2:ef:ad:6b:84: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:52:97:3D:68:87:18:6D:8A:0E:DA:83:99:7F:69:4D:C0:74:E0:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:98:29:c0:80:bc:75:37:52:b9:11:0c:c9:70:b6:b6:68:04: 0b:83:db:95:e8:f9:46:4f:94:3c:94:73:40:f7:b0:85:9b:59: be:26:d2:67:06:95:0f:42:bd:4e:76:78:5f:33:84:ca:6c:d1: f1:86:f2:f2:79:38:e8:d2:86:35:32:6e:52:53:3a:f0:aa:4f: c9:7c:76:10:90:8c:02:a0:e4:80:bd:67:70:96:a3:17:e7:21: ba:30:5e:00:0b:05:20:52:36:dd:48:e4:53:e3:04:ff:78:d0: 4d:74:78:ac:7c:c5:96:7e:f0:b3:75:db:8c:82:cc:02:62:7d: c8:1a:1f:56:16:ac:2a:84:4a:94:dd:40:5c:0a:91:86:49:c6: 69:3e:44:31:16:a2:14:29:f4:a1:c0:21:fd:a4:7f:98:1b:5b: 40:c0:4b:44:6f:4a:3a:69:29:09:c2:b5:bd:38:ab:47:6c:20: 92:5b:79:7d:f6:14:85:70:5e:5e:ea:2f:31:35:15:04:a9:f3: 47:b6:66:4a:dd:39:02:04:fb:75:37:a8:83:83:94:29:62:26: 5c:ed:17:12:bc:0a:8f:cf:9a:81:fc:4e:ad:24:5f:6a:df:0d: 1d:63:35:6d:7d:6d:cd:b3:f2:cc:7f:a0:8d:19:c0:53:df:a7: e7:5b:63:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEekcTDvHDQr3Y+5rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAyNDAxMDAzMloXDTI1MDEyMjAyMDAzMlowLzEtMCsGA1UEAxMk ZmE5NzlkZmEtMWUzZS00NzYxLTk2M2ItZmIxNTAwNzQ5YzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbtKgfIRV87WO3tHt+BVdYsu3Dd3kqSx71WR XoX7UPMqGV5HhhhV75AB+2qovbAn2ne7G/SrJu6Gr15ttFkdX8/MVrq5kfMBa6kX S+ErerICGNnM186jvlYjZcsrrBFHv11JxAPzlbHX+36MjZ5SLGnA1E3PVhw9EFbE rnjkqmbNluy8Btb0/1x5UXux5JIHSWWqgBVCFNU/gtKiVmnur6LYUxs4OGNfTkpf k83ovfZJqpAkYAz/oJBXwpuqbrUDRJDu+yqMW/eMUvVOaAQ8ZET/GISLyrAjoCQC HdY+ocitH6FXs9T3lJJ9vo/kndQwaBD+5DVSUEDq0u+ta4RbnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxSlz1ohxhtig7ag5l/aU3AdOBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGEzOWM3OTctOWFmNC0z ZDcxLWJmYTItNWM0ZmMwYjQ3NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqYKcCAvHU3UrkRDMlwtrZoBAuD25Xo+UZPlDyUc0D3sIWbWb4m0mcG lQ9CvU52eF8zhMps0fGG8vJ5OOjShjUyblJTOvCqT8l8dhCQjAKg5IC9Z3CWoxfn IbowXgALBSBSNt1I5FPjBP940E10eKx8xZZ+8LN124yCzAJifcgaH1YWrCqESpTd QFwKkYZJxmk+RDEWohQp9KHAIf2kf5gbW0DAS0RvSjppKQnCtb04q0dsIJJbeX32 FIVwXl7qLzE1FQSp80e2ZkrdOQIE+3U3qIODlCliJlztFxK8Co/PmoH8Tq0kX2rf DR1jNW19bc2z8sx/oI0ZwFPfp+dbY7M= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:22 2024 by rpki-client on console-ams.rpki-client.org