$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/420885af-6fb8-38d7-93e0-904cfcdcc94c.roa File: 420885af-6fb8-38d7-93e0-904cfcdcc94c.roa (raw, json) Hash identifier: 3tnPVkt9IrLOX/1SGt/DAeDeHFEfFhGDkH3lafCXkBU= Subject key identifier: F1:91:9B:3F:38:DC:A5:FB:3B:B3:F2:53:9C:89:73:25:4D:87:3C:11 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858466AD9AF7EC287758C741CE5E0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/420885af-6fb8-38d7-93e0-904cfcdcc94c.roa Signing time: Wed 03 Jul 2024 17:07:18 +0000 ROA not before: Wed 03 Jul 2024 17:07:18 +0000 ROA not after: Tue 01 Oct 2024 17:07:18 +0000 asID: 202 IP address blocks: 20.137.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jul 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:6a:d9:af:7e:c2:87:75:8c:74:1c:e5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 3 17:07:18 2024 GMT Not After : Oct 1 17:07:18 2024 GMT Subject: CN=31b7af16-8d85-4e6a-87ea-6b5dc9baa9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:ff:b1:48:bd:3b:5c:94:c9:d2:c0:48:48: 4f:25:78:2f:88:44:b6:76:79:f6:3e:3c:61:b3:4e: c1:04:ec:25:1f:d2:90:96:be:e0:08:f3:8b:8a:44: 48:d2:97:83:45:ae:41:73:aa:9e:a4:3c:11:5f:f2: c3:00:33:d3:ca:39:00:59:b0:73:d3:b5:86:ab:17: 3c:b9:67:90:41:df:36:be:af:2c:a0:79:0b:66:12: 0e:9d:4c:54:05:20:de:65:4a:da:3c:93:7a:3f:93: 88:75:11:ee:a6:01:5c:b3:85:af:df:4c:16:95:c5: 9b:f8:1b:d8:c2:4f:3a:ab:50:3c:31:0e:a0:45:2f: 88:db:36:f9:a5:5d:57:b2:48:91:7d:26:7f:da:47: 76:ab:3a:4a:f9:84:1a:6f:1b:98:83:07:aa:b5:35: 33:26:c9:76:53:7d:13:f6:2e:dd:34:f1:b0:82:b9: d9:d1:7a:6b:94:51:e1:17:67:e6:13:f8:55:9d:d5: b8:3b:7c:f1:c1:98:1b:c7:b6:a9:76:cb:c3:1b:ce: 62:1d:cb:4c:9c:93:6b:45:eb:8a:3b:bf:dc:40:36: 64:05:42:84:6b:81:90:47:0a:e6:d0:b3:11:75:7c: bc:e6:c0:44:9b:05:34:95:10:ca:04:19:94:bc:44: da:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:91:9B:3F:38:DC:A5:FB:3B:B3:F2:53:9C:89:73:25:4D:87:3C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/420885af-6fb8-38d7-93e0-904cfcdcc94c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:67:a3:04:6c:67:c3:55:24:c3:72:f3:e2:2a:96:be:65:60: b4:36:c8:13:51:cf:ee:99:70:e3:82:8d:76:be:dc:41:fd:bf: 21:b3:7b:f8:b1:d8:82:a3:e2:b1:dc:a6:f2:6f:be:5b:5d:64: 0e:9e:87:0a:04:6e:85:d3:b6:d2:36:ef:45:b5:d6:a4:2f:25: 45:da:0d:da:32:58:be:1f:c2:a4:83:8a:a1:e6:ba:1f:7d:16: f3:1c:81:32:be:57:02:f9:cc:15:3b:4d:9c:cc:c8:d0:29:99: bc:3c:09:22:3f:9a:ad:1d:70:7b:d7:b1:7f:4b:52:92:71:17: 9d:05:88:bc:a6:28:3b:c0:f1:03:96:f0:46:e2:cf:15:dc:a5: 10:13:82:97:85:8a:16:5b:c8:2c:8f:03:9c:09:10:0f:22:9f: 49:18:55:84:52:d6:f5:1a:31:9a:b0:6b:7b:94:52:db:dc:1e: b8:47:2a:dd:37:2a:59:44:48:ab:fd:4c:bf:77:a5:6e:85:32: 84:d4:d3:52:03:56:b3:50:a7:72:f3:89:9b:8f:d9:f7:b5:90: 9d:0c:b3:07:c6:62:7f:eb:e3:cf:73:81:57:ce:e6:f5:21:68: 4b:33:df:87:7f:99:7c:7d:aa:f1:f7:41:3e:87:3d:2a:ca:55: 3b:aa:aa:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZq2a9+wod1jHQc5eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDcwMzE3MDcxOFoXDTI0MTAwMTE3MDcxOFowLzEtMCsGA1UEAxMk MzFiN2FmMTYtOGQ4NS00ZTZhLTg3ZWEtNmI1ZGM5YmFhOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjD/sUi9O1yUydLASEhPJXgviES2dnn2Pjxh s07BBOwlH9KQlr7gCPOLikRI0peDRa5Bc6qepDwRX/LDADPTyjkAWbBz07WGqxc8 uWeQQd82vq8soHkLZhIOnUxUBSDeZUraPJN6P5OIdRHupgFcs4Wv30wWlcWb+BvY wk86q1A8MQ6gRS+I2zb5pV1XskiRfSZ/2kd2qzpK+YQabxuYgweqtTUzJsl2U30T 9i7dNPGwgrnZ0XprlFHhF2fmE/hVndW4O3zxwZgbx7apdsvDG85iHctMnJNrReuK O7/cQDZkBUKEa4GQRwrm0LMRdXy85sBEmwU0lRDKBBmUvETaSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGRmz843KX7O7PyU5yJcyVNhzwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDIwODg1YWYtNmZiOC0z OGQ3LTkzZTAtOTA0Y2ZjZGNjOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBnowRsZ8NVJMNy8+Iqlr5lYLQ2yBNRz+6ZcOOCjXa+3EH9vyGze/ix 2IKj4rHcpvJvvltdZA6ehwoEboXTttI270W11qQvJUXaDdoyWL4fwqSDiqHmuh99 FvMcgTK+VwL5zBU7TZzMyNApmbw8CSI/mq0dcHvXsX9LUpJxF50FiLymKDvA8QOW 8EbizxXcpRATgpeFihZbyCyPA5wJEA8in0kYVYRS1vUaMZqwa3uUUtvcHrhHKt03 KllESKv9TL93pW6FMoTU01IDVrNQp3LziZuP2fe1kJ0MswfGYn/r489zgVfO5vUh aEsz34d/mXx9qvH3QT6HPSrKVTuqquQ= -----END CERTIFICATE-----Generated at Thu Jul 4 03:14:53 2024 by rpki-client on console.sobornost.net