$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa File: f934d4a4-fde5-3e78-b53a-cc71da69f923.roa (raw, json) Hash identifier: 1607oHNUfFKOHndPWc/L5XxANTRzKFc1VTdqiXmvMTo= Subject key identifier: 72:5E:D8:4A:A2:0A:23:A2:D5:C1:50:8D:8B:32:FD:F2:1B:AB:5E:7B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847A4713086714B7DE360B5C040 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa Signing time: Thu 24 Oct 2024 01:00:32 +0000 ROA not before: Thu 24 Oct 2024 01:00:32 +0000 ROA not after: Wed 22 Jan 2025 02:00:32 +0000 asID: 203 IP address blocks: 20.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a4:71:30:86:71:4b:7d:e3:60:b5:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 24 01:00:32 2024 GMT Not After : Jan 22 02:00:32 2025 GMT Subject: CN=6d83073b-da60-4ea1-bbad-dd1ceec838c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:a1:45:ed:38:d6:01:52:ad:7f:c0:33:a1: 41:40:07:1c:1b:13:fc:15:60:e8:22:f7:22:85:31: 30:08:b6:64:d4:c8:30:76:b0:9c:49:a8:4b:d7:cd: 96:4e:d7:48:4a:e1:a2:f4:ee:f8:91:0b:17:87:dd: 7e:7e:b9:2a:ce:83:53:e3:21:a4:33:e8:1e:d1:a3: 69:c0:5a:f2:4b:9d:21:14:60:7a:5f:ea:15:4c:37: 1e:8d:f3:9a:8c:6b:40:c4:ed:29:03:f4:11:e7:41: 3c:2b:03:b1:1e:fa:7a:d3:70:64:8e:19:53:dd:ea: 1f:fc:b5:10:9b:30:dd:8d:8a:d5:e5:45:49:fd:d3: ff:d9:7b:56:da:62:8a:10:5a:1c:85:ab:1f:1d:3b: f7:3b:ab:a0:a5:4f:5a:d8:52:78:7f:1e:94:98:9e: 81:9e:3a:57:f6:66:21:3b:57:0e:19:f6:78:4b:43: 97:d9:00:f3:57:0d:b5:4a:9d:18:1a:f9:12:e1:1d: 66:2f:ec:f5:ae:5e:e1:7f:d5:71:d7:de:89:56:bd: af:1f:5b:eb:06:62:19:43:0a:d6:3a:0e:34:c4:2b: ef:e9:3b:e2:b5:b2:c2:bd:60:8d:04:7e:50:da:b9: 54:df:76:e3:c7:75:6e:f6:2e:13:4e:cd:cf:b8:65: dd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5E:D8:4A:A2:0A:23:A2:D5:C1:50:8D:8B:32:FD:F2:1B:AB:5E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f934d4a4-fde5-3e78-b53a-cc71da69f923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b1:f6:e4:bd:92:d9:68:1f:32:7a:4e:57:63:7b:fa:c2:1f: 7f:91:83:c3:86:7e:90:a1:90:02:4e:c9:bb:7e:d9:cb:84:4a: 2f:6c:08:ec:01:ae:99:6a:5a:8a:d7:85:0e:b8:8f:c9:91:ee: fb:5b:a6:bc:e8:52:67:17:3a:76:b6:5b:9b:79:16:29:d8:99: 12:e1:68:d4:cf:9f:91:d1:07:c1:6f:4a:d7:55:25:be:00:db: 2c:59:88:55:1a:b5:66:66:6b:6c:c9:ba:69:e9:33:06:b8:93: c9:f3:67:70:5f:07:c6:ad:72:c2:3e:a4:a1:e1:71:9f:00:07: 45:21:e4:68:97:f9:8f:d0:87:fd:88:b6:46:be:02:a1:75:7f: 21:b6:5b:c3:a1:3e:17:7d:e8:55:aa:14:29:78:67:88:58:75: 1a:d7:7f:7b:33:84:9c:5b:61:17:56:e2:8b:56:af:c0:55:8d: 8a:b8:d6:68:8b:06:54:e2:0c:ac:dc:22:4e:3e:2f:da:f0:56: 62:8f:c7:c4:dc:6a:b1:88:bd:08:6f:02:d5:7c:89:5c:84:bc: af:db:3c:24:2b:6f:3e:6b:8d:78:d5:d3:e2:be:c2:94:13:e3: f0:27:38:50:b5:da:57:7b:9e:12:45:74:5a:af:c2:21:2d:af: cf:d5:cb:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEekcTCGcUt942C1wEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAyNDAxMDAzMloXDTI1MDEyMjAyMDAzMlowLzEtMCsGA1UEAxMk NmQ4MzA3M2ItZGE2MC00ZWExLWJiYWQtZGQxY2VlYzgzOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9WhRe041gFSrX/AM6FBQAccGxP8FWDoIvci hTEwCLZk1MgwdrCcSahL182WTtdISuGi9O74kQsXh91+frkqzoNT4yGkM+ge0aNp wFryS50hFGB6X+oVTDcejfOajGtAxO0pA/QR50E8KwOxHvp603BkjhlT3eof/LUQ mzDdjYrV5UVJ/dP/2XtW2mKKEFochasfHTv3O6ugpU9a2FJ4fx6UmJ6BnjpX9mYh O1cOGfZ4S0OX2QDzVw21Sp0YGvkS4R1mL+z1rl7hf9Vx196JVr2vH1vrBmIZQwrW Og40xCvv6TvitbLCvWCNBH5Q2rlU33bjx3Vu9i4TTs3PuGXdhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJe2EqiCiOi1cFQjYsy/fIbq157MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjkzNGQ0YTQtZmRlNS0z ZTc4LWI1M2EtY2M3MWRhNjlmOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6x9uS9ktloHzJ6Tldje/rCH3+Rg8OGfpChkAJOybt+2cuESi9sCOwB rplqWorXhQ64j8mR7vtbprzoUmcXOna2W5t5FinYmRLhaNTPn5HRB8FvStdVJb4A 2yxZiFUatWZma2zJumnpMwa4k8nzZ3BfB8atcsI+pKHhcZ8AB0Uh5GiX+Y/Qh/2I tka+AqF1fyG2W8OhPhd96FWqFCl4Z4hYdRrXf3szhJxbYRdW4otWr8BVjYq41miL BlTiDKzcIk4+L9rwVmKPx8TcarGIvQhvAtV8iVyEvK/bPCQrbz5rjXjV0+K+wpQT 4/AnOFC12ld7nhJFdFqvwiEtr8/Vyx4= -----END CERTIFICATE-----Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org