$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa File: e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa (raw, json) Hash identifier: A1yHGabkZy6Jul3Ocw7gwO0jBWdiPEuI1h3zHRf+6Uw= Subject key identifier: 5F:98:C6:DB:56:F3:71:5D:D0:00:10:DB:81:B6:B9:C8:F9:D6:FC:7B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847D4049A9F86CC112CF0015200 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 3356 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:9a:9f:86:cc:11:2c:f0:01:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=c053479b-e3f8-42c3-89e0-9be6556a3c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:50:ca:b3:e2:eb:32:2b:13:ad:7a:02:fa:d5: 43:a7:dc:c3:66:c9:bd:ae:58:f1:d5:d4:0f:6f:f5: 9e:18:3c:41:4b:07:70:51:05:ac:c0:10:e0:1e:00: 2d:4c:d8:22:8f:d2:92:3c:b9:66:37:11:8b:f0:65: a2:b9:02:c3:72:5e:4b:15:13:cf:4b:66:9b:a2:75: 85:ea:65:ae:2f:ee:a8:72:82:88:78:0e:df:8e:eb: 64:c7:f7:87:98:0a:16:67:1e:9c:33:ec:7b:e3:49: a6:50:65:ac:93:25:3b:00:35:4c:14:7c:79:ea:16: 62:be:3c:1e:67:9a:42:9e:2e:39:3b:b9:b0:0f:a7: 12:62:27:63:27:51:f1:f8:fe:15:08:9a:c9:27:b8: 47:ac:15:54:61:79:ef:6a:be:7a:22:72:ab:12:e5: 33:c5:e3:00:ae:b5:c6:75:eb:57:6e:c8:ef:3e:cd: 7a:0b:f7:51:d0:e2:c1:9c:4e:c6:ae:4b:55:d1:f8: 2a:64:29:21:b0:34:5f:63:f4:46:f0:cd:21:51:ae: e8:b7:76:0f:65:51:67:2c:d5:a6:ea:81:e3:58:71: f7:b6:e3:90:6b:2d:53:e5:11:95:5b:ae:2a:27:1b: 87:f7:6b:7f:44:1d:aa:c8:15:89:d9:d4:f4:54:4d: 80:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:98:C6:DB:56:F3:71:5D:D0:00:10:DB:81:B6:B9:C8:F9:D6:FC:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:1d:37:84:fc:9b:05:af:15:85:c7:fe:b4:50:76:55:30:c4: 8e:12:2f:b0:ad:37:0a:63:2a:a6:4e:d3:81:ac:e8:a1:c5:2c: be:84:57:d8:33:ea:c1:e6:3e:7e:6b:3b:47:bd:a4:1f:25:11: f3:69:0b:d9:1c:e4:bd:17:23:dd:2f:9a:55:32:c0:74:9c:37: 30:c5:88:42:d0:cc:9c:a9:33:f1:3e:18:f7:c8:a1:bd:41:83: 8f:72:2d:2b:6d:de:5b:de:c5:35:bd:dc:dd:1f:37:2b:c6:f0: f6:5f:eb:a4:5a:ba:8a:58:f1:ca:a2:fc:03:d3:45:ff:08:fd: 27:80:eb:5f:af:91:4a:80:ab:0f:fb:f5:c2:8d:c3:ea:c0:8b: cb:a8:b5:ef:ca:26:46:10:2e:a1:65:7d:1c:26:11:a6:fa:76: e2:da:d9:e2:a0:13:1c:92:cf:27:94:f2:b9:35:05:f3:d4:68: d8:ee:50:e1:c5:9d:33:49:f1:b7:85:7a:12:68:be:a0:41:85: 7d:e7:4b:b5:cb:c1:3b:55:43:36:b0:97:0c:60:83:bb:e8:0d: d2:0e:d1:8f:22:52:9b:3a:35:13:9b:2c:cc:de:ec:83:70:71: 2d:4b:d2:7f:82:9c:8b:40:bc:a6:eb:15:e6:36:20:38:c0:49: 59:c8:44:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJqfhswRLPABUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk YzA1MzQ3OWItZTNmOC00MmMzLTg5ZTAtOWJlNjU1NmEzYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01DKs+LrMisTrXoC+tVDp9zDZsm9rljx1dQP b/WeGDxBSwdwUQWswBDgHgAtTNgij9KSPLlmNxGL8GWiuQLDcl5LFRPPS2abonWF 6mWuL+6ocoKIeA7fjutkx/eHmAoWZx6cM+x740mmUGWskyU7ADVMFHx56hZivjwe Z5pCni45O7mwD6cSYidjJ1Hx+P4VCJrJJ7hHrBVUYXnvar56InKrEuUzxeMArrXG detXbsjvPs16C/dR0OLBnE7GrktV0fgqZCkhsDRfY/RG8M0hUa7ot3YPZVFnLNWm 6oHjWHH3tuOQay1T5RGVW64qJxuH92t/RB2qyBWJ2dT0VE2AKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+YxttW83Fd0AAQ24G2ucj51vx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTJkMTdkNzEtZjZmOC0z YmU1LWFkMmQtODgzODE3MTYwOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkdN4T8mwWvFYXH/rRQdlUwxI4SL7CtNwpjKqZO04Gs6KHFLL6EV9gz 6sHmPn5rO0e9pB8lEfNpC9kc5L0XI90vmlUywHScNzDFiELQzJypM/E+GPfIob1B g49yLStt3lvexTW93N0fNyvG8PZf66RauopY8cqi/APTRf8I/SeA61+vkUqAqw/7 9cKNw+rAi8uote/KJkYQLqFlfRwmEab6duLa2eKgExySzyeU8rk1BfPUaNjuUOHF nTNJ8beFehJovqBBhX3nS7XLwTtVQzawlwxgg7voDdIO0Y8iUps6NRObLMze7INw cS1L0n+CnItAvKbrFeY2IDjASVnIRDs= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:33 2024 by rpki-client on console-fra.rpki-client.org