$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f1000f97-e6af-3d02-92d0-b9d303e40aa0.roa File: f1000f97-e6af-3d02-92d0-b9d303e40aa0.roa (raw, json) Hash identifier: MhKEdHhrp+T2NIUmuFNysZ28xdLMf8GrhqzlF0H0VdE= Subject key identifier: 65:9B:B3:46:56:E3:F8:39:9E:CC:6E:4E:27:DF:AB:86:D0:8D:64:54 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285845E49E44598977D29BBDB32F80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f1000f97-e6af-3d02-92d0-b9d303e40aa0.roa Signing time: Thu 16 May 2024 15:09:16 +0000 ROA not before: Thu 16 May 2024 15:09:16 +0000 ROA not after: Wed 14 Aug 2024 15:09:16 +0000 asID: 3360 IP address blocks: 20.132.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Jun 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e4:9e:44:59:89:77:d2:9b:bd:b3:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 16 15:09:16 2024 GMT Not After : Aug 14 15:09:16 2024 GMT Subject: CN=46e86d48-ad6a-43e1-b41b-2f8d0dbf1c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:bd:25:a6:91:2b:39:75:1b:60:7d:f5:ef: f2:4e:95:bd:b8:0b:54:bf:89:df:e0:a1:bf:51:0a: 95:7e:22:0d:05:da:ad:0d:ad:e4:3c:c4:5c:e8:22: 65:77:39:79:53:4e:7d:75:a6:91:c8:8d:6f:e0:27: 42:46:07:70:fb:60:40:c9:db:9e:f0:0b:1e:e1:44: f6:e0:b9:9f:12:50:f2:bd:f3:f3:b6:4d:44:48:01: 06:e2:5a:5d:e2:49:63:a9:42:e6:6f:0d:95:f2:91: ab:c7:77:e9:46:b9:5c:9a:42:34:1e:77:a1:d8:fa: 7a:ba:75:e9:2a:39:1c:90:82:8a:4b:d0:cf:31:93: 64:f5:3a:71:81:6f:6e:81:d1:7a:7e:57:81:a9:fe: 01:8d:1d:01:be:c5:a3:c9:e0:5b:37:8c:39:70:58: 28:40:7e:71:1b:11:be:29:5e:aa:75:c3:f1:ed:90: 04:9f:69:d1:a2:20:77:c2:63:b9:dd:77:8f:ff:68: 73:ba:59:92:da:7c:96:cc:ca:de:5b:54:cb:b9:c6: 3e:eb:82:40:08:9c:a2:59:7a:79:03:ea:12:bb:75: 1a:67:d6:2d:f4:28:1d:95:53:44:cf:35:9c:de:b7: 8b:7a:91:8b:f4:a4:92:fa:98:0d:5a:41:4e:9d:9e: 50:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9B:B3:46:56:E3:F8:39:9E:CC:6E:4E:27:DF:AB:86:D0:8D:64:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f1000f97-e6af-3d02-92d0-b9d303e40aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b9:a0:5c:55:6f:fd:25:6e:48:be:cd:18:1b:b3:37:ac:82: 67:26:78:8b:72:09:dc:ea:3d:d0:f0:0b:ec:74:c2:ec:18:a6: bf:46:79:f2:28:24:b0:ad:d5:16:5b:68:f3:a2:b9:3b:99:74: d2:76:cd:42:14:fd:02:79:c1:e3:80:42:80:fa:cd:03:e0:56: f9:88:f0:fa:10:f4:41:01:fe:fb:ac:5a:07:f5:6a:06:83:a4: ae:be:a2:01:cc:cf:01:dd:be:8e:e4:b7:1f:94:45:6a:71:f1: 92:95:95:29:e7:00:99:89:0f:cd:4d:cc:dd:39:20:f2:f8:2b: 95:6d:ec:11:98:d2:4a:1f:b1:c2:9e:f4:4a:e5:51:53:9a:78: 84:fc:24:b3:42:c1:dd:7e:ef:57:11:d7:1f:03:60:23:d6:28: db:3f:fb:bc:f4:5f:a5:e4:f3:87:1b:1c:00:bd:bb:06:e7:69: 9a:22:fd:95:86:63:4c:56:fa:3d:b1:a9:a2:bf:ad:aa:3d:d0: e9:9c:5a:2e:4a:dd:0a:1f:6d:d9:93:e2:69:57:14:61:34:62: 68:3f:95:59:35:4d:ca:96:3e:b4:30:12:bb:7c:a1:03:47:98: ac:c0:c6:0f:50:03:21:21:70:b0:e8:56:8d:ee:39:3d:e2:a7: e2:af:8f:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXknkRZiXfSm72zL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDUxNjE1MDkxNloXDTI0MDgxNDE1MDkxNlowLzEtMCsGA1UEAxMk NDZlODZkNDgtYWQ2YS00M2UxLWI0MWItMmY4ZDBkYmYxYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo++9JaaRKzl1G2B99e/yTpW9uAtUv4nf4KG/ UQqVfiINBdqtDa3kPMRc6CJldzl5U059daaRyI1v4CdCRgdw+2BAydue8Ase4UT2 4LmfElDyvfPztk1ESAEG4lpd4kljqULmbw2V8pGrx3fpRrlcmkI0Hneh2Pp6unXp KjkckIKKS9DPMZNk9TpxgW9ugdF6fleBqf4BjR0BvsWjyeBbN4w5cFgoQH5xGxG+ KV6qdcPx7ZAEn2nRoiB3wmO53XeP/2hzulmS2nyWzMreW1TLucY+64JACJyiWXp5 A+oSu3UaZ9Yt9CgdlVNEzzWc3reLepGL9KSS+pgNWkFOnZ5QqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWbs0ZW4/g5nsxuTiffq4bQjWRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjEwMDBmOTctZTZhZi0z ZDAyLTkyZDAtYjlkMzAzZTQwYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFITlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD65oFxVb/0lbki+zRgbszesgmcmeItyCdzqPdDwC+x0wuwYpr9GefIo JLCt1RZbaPOiuTuZdNJ2zUIU/QJ5weOAQoD6zQPgVvmI8PoQ9EEB/vusWgf1agaD pK6+ogHMzwHdvo7ktx+URWpx8ZKVlSnnAJmJD81NzN05IPL4K5Vt7BGY0kofscKe 9ErlUVOaeIT8JLNCwd1+71cR1x8DYCPWKNs/+7z0X6Xk84cbHAC9uwbnaZoi/ZWG Y0xW+j2xqaK/rao90OmcWi5K3QofbdmT4mlXFGE0Ymg/lVk1TcqWPrQwErt8oQNH mKzAxg9QAyEhcLDoVo3uOT3ip+KvjzA= -----END CERTIFICATE-----Generated at Sat Jun 1 01:42:30 2024 by rpki-client on console-fra.rpki-client.org