$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2c358d5-3eac-3ac6-89be-5151a9f5bc1c.roa File: e2c358d5-3eac-3ac6-89be-5151a9f5bc1c.roa (raw, json) Hash identifier: zv1D4DGK67SYUAAt+zbYDZ0RRKO0NqJiVP6P8w+kYA0= Subject key identifier: 9D:CE:C2:A5:BF:67:4C:8F:DC:D2:3B:7C:35:2B:5F:6E:E1:1D:BF:05 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285845E495AD156AE1984B865EBBC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2c358d5-3eac-3ac6-89be-5151a9f5bc1c.roa Signing time: Thu 16 May 2024 14:51:57 +0000 ROA not before: Thu 16 May 2024 14:51:57 +0000 ROA not after: Wed 14 Aug 2024 14:51:57 +0000 asID: 203 IP address blocks: 20.132.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Jun 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e4:95:ad:15:6a:e1:98:4b:86:5e:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 16 14:51:57 2024 GMT Not After : Aug 14 14:51:57 2024 GMT Subject: CN=151e0fba-8921-4c41-9a98-8199fefee8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:36:d3:37:d3:d8:48:0a:d6:1e:3d:dd:1d: a2:6d:7d:56:c4:db:2c:8c:4e:06:d1:43:bc:b6:e3: 28:c9:75:59:52:66:0f:50:91:3a:a2:9a:bf:b4:53: 36:2b:04:5a:ac:b1:ec:3c:b8:34:9c:53:1c:70:5c: 25:df:0c:de:64:05:5b:e7:9e:7d:85:cb:9f:8c:d9: 7e:93:57:31:33:bb:c7:21:03:d1:c3:4c:6f:24:92: 82:80:f8:34:81:17:f1:25:f8:73:a1:39:c8:e5:2b: e2:78:83:4f:b5:06:be:98:96:0a:2a:4d:0d:bf:87: 09:43:dd:16:b9:77:4d:66:5a:d1:f9:18:d4:8d:b1: 52:c2:5d:a0:75:9a:13:73:12:3c:56:7f:52:9b:74: f1:3b:5f:e6:0a:f4:4a:21:fd:1b:2a:15:42:0b:fe: fb:f8:ed:91:86:5a:8e:54:a5:c2:07:58:73:50:32: 09:6c:44:85:1f:0d:b8:9a:88:a7:b1:51:a2:e6:e7: f7:be:58:4e:e1:b9:cc:63:a4:27:5d:61:cb:00:43: 49:e3:05:e7:fb:3c:58:5c:90:f1:51:19:c3:ca:1a: e8:59:57:5b:2b:08:76:5d:e3:77:dd:07:11:08:08: 67:fd:f7:5a:3f:d4:dd:39:5a:b4:0b:6b:58:a3:6f: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CE:C2:A5:BF:67:4C:8F:DC:D2:3B:7C:35:2B:5F:6E:E1:1D:BF:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2c358d5-3eac-3ac6-89be-5151a9f5bc1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:57:aa:cc:5c:97:5d:c7:42:7b:8b:05:e0:44:3e:1b:c1:63: a2:4d:16:15:a6:e0:55:0c:70:50:17:ea:ed:7f:61:74:90:64: 62:62:0f:61:09:bf:0b:07:b2:31:32:66:39:6d:39:e1:1f:42: 22:14:45:0b:a7:d5:f9:51:ee:5e:9b:f0:cf:6e:46:a6:2f:36: 32:19:11:05:ea:5a:73:a6:69:21:1d:3b:56:22:7d:d0:b6:ea: 67:84:5d:0f:44:82:b6:7a:e1:86:74:e1:d6:50:3b:53:1e:fc: cf:31:cf:a0:ae:96:ca:7e:d4:25:41:df:04:29:e2:a4:83:7a: 48:9f:b3:11:73:49:37:48:03:d1:83:c1:ed:c8:ca:e8:1d:b4: cf:8c:63:c6:67:96:0b:e2:a9:86:e0:26:30:ee:21:4f:66:cc: f2:d1:7a:4a:ef:3f:8b:38:4a:06:9d:a6:4f:b7:78:77:81:95: a1:58:f5:96:d2:f0:e7:a3:f0:32:f9:31:68:08:82:42:57:ec: 34:be:a2:b2:59:5b:ac:77:b2:9f:f8:cd:3f:56:cb:ff:fa:d8: 13:04:f8:d0:2c:3d:0b:5c:e9:1c:fd:e7:b5:14:96:f3:13:90: 58:f2:b8:fa:59:2a:e9:d9:fd:a4:46:39:34:ff:99:03:8d:9f: 19:8e:82:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXkla0VauGYS4Zeu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDUxNjE0NTE1N1oXDTI0MDgxNDE0NTE1N1owLzEtMCsGA1UEAxMk MTUxZTBmYmEtODkyMS00YzQxLTlhOTgtODE5OWZlZmVlOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZQ20zfT2EgK1h493R2ibX1WxNssjE4G0UO8 tuMoyXVZUmYPUJE6opq/tFM2KwRarLHsPLg0nFMccFwl3wzeZAVb5559hcufjNl+ k1cxM7vHIQPRw0xvJJKCgPg0gRfxJfhzoTnI5SvieINPtQa+mJYKKk0Nv4cJQ90W uXdNZlrR+RjUjbFSwl2gdZoTcxI8Vn9Sm3TxO1/mCvRKIf0bKhVCC/77+O2RhlqO VKXCB1hzUDIJbESFHw24moinsVGi5uf3vlhO4bnMY6QnXWHLAENJ4wXn+zxYXJDx URnDyhroWVdbKwh2XeN33QcRCAhn/fdaP9TdOVq0C2tYo28RaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3OwqW/Z0yP3NI7fDUrX27hHb8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTJjMzU4ZDUtM2VhYy0z YWM2LTg5YmUtNTE1MWE5ZjViYzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIT2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNXqsxcl13HQnuLBeBEPhvBY6JNFhWm4FUMcFAX6u1/YXSQZGJiD2EJ vwsHsjEyZjltOeEfQiIURQun1flR7l6b8M9uRqYvNjIZEQXqWnOmaSEdO1YifdC2 6meEXQ9EgrZ64YZ04dZQO1Me/M8xz6Culsp+1CVB3wQp4qSDekifsxFzSTdIA9GD we3IyugdtM+MY8ZnlgviqYbgJjDuIU9mzPLRekrvP4s4Sgadpk+3eHeBlaFY9ZbS 8Oej8DL5MWgIgkJX7DS+orJZW6x3sp/4zT9Wy//62BME+NAsPQtc6Rz957UUlvMT kFjyuPpZKunZ/aRGOTT/mQONnxmOgoo= -----END CERTIFICATE-----Generated at Sat Jun 1 02:02:34 2024 by rpki-client on console-ams.rpki-client.org