$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7b2035b1-e5ad-3ccd-a019-63413c9d5680.roa File: 7b2035b1-e5ad-3ccd-a019-63413c9d5680.roa (raw, json) Hash identifier: zAJVcUBeG+lf6L5HX7mkYPJ0monP+zeZQLRpKqpq20w= Subject key identifier: 55:42:6E:F1:3C:4C:A0:99:E4:D5:6E:48:F3:38:72:67:56:78:B5:90 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858466BA78BCA762294CD2AEA8BC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7b2035b1-e5ad-3ccd-a019-63413c9d5680.roa Signing time: Thu 04 Jul 2024 00:02:05 +0000 ROA not before: Thu 04 Jul 2024 00:02:05 +0000 ROA not after: Wed 02 Oct 2024 00:02:05 +0000 asID: 21877 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jul 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:6b:a7:8b:ca:76:22:94:cd:2a:ea:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 4 00:02:05 2024 GMT Not After : Oct 2 00:02:05 2024 GMT Subject: CN=f6f52987-4223-43dd-b429-3bbd25f5a62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e4:7f:01:bb:4f:1c:ad:7c:03:48:28:2a:ae: 36:9f:4e:fc:c8:5d:17:1c:53:e9:94:90:b9:a0:07: d7:51:00:d3:7e:f8:21:c7:47:4e:aa:84:55:6b:17: 9e:15:77:23:6d:1f:92:ff:3a:08:38:0b:32:70:e8: a6:51:86:bc:60:a5:8f:0e:18:2a:8e:a2:ca:c6:8a: 76:c3:a5:ab:89:35:4a:7b:ea:70:d0:78:f0:22:bb: a3:77:f2:01:5b:2f:2f:a5:eb:91:91:db:5b:0b:a3: be:b6:42:43:b4:f7:0f:19:2d:7b:7c:22:17:cb:de: 5f:4e:fd:70:66:2c:51:b8:ce:3e:7b:2a:be:3a:a1: f8:da:71:0c:e2:66:1f:ba:5f:5d:ed:ac:b5:49:43: 60:8f:62:d2:7c:90:68:82:45:09:93:45:c8:80:f9: 68:37:a5:b8:b7:fb:1a:5d:2b:13:98:62:5c:53:2f: 90:9d:14:0a:b1:30:c3:2e:1b:46:cd:1a:b6:b0:02: ec:bf:5c:47:b0:ae:84:c0:8e:de:81:8c:a9:fe:84: b6:79:41:97:e5:ac:30:85:22:a4:95:f7:71:e0:ee: 0f:12:b2:c4:33:39:c9:09:5f:39:69:08:81:1a:98: 83:68:4a:09:82:31:da:91:4a:d7:9b:c0:e7:dc:f6: cf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:42:6E:F1:3C:4C:A0:99:E4:D5:6E:48:F3:38:72:67:56:78:B5:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7b2035b1-e5ad-3ccd-a019-63413c9d5680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e9:59:37:60:a9:df:76:cd:b3:90:f8:21:67:e3:62:18:0f: 3b:22:f9:5b:b7:7b:9d:ab:cd:ff:3f:b9:e1:65:23:5b:28:16: fe:a2:1f:a1:c4:57:7d:f0:37:db:a5:7f:84:c2:a8:33:3c:71: 49:79:8d:de:ed:ce:58:a0:33:b6:e5:b9:8f:e8:8e:04:8a:8a: d7:0f:dd:80:6c:ad:26:bd:80:53:27:8b:cd:f8:72:05:f2:19: 6b:45:a6:2a:d3:cf:76:5c:8b:b2:41:82:a5:37:49:17:ab:73: 93:89:35:0c:17:13:53:7f:f2:45:24:a5:b1:e2:9c:7c:a5:47: ec:d9:fe:09:ff:7f:cf:6c:d8:7b:82:ac:f0:d2:e7:9b:ee:b6: 49:74:97:b6:0e:3c:8a:d2:5b:b5:07:6e:97:4d:80:58:93:b3: 9b:d3:2d:7b:8d:b8:1d:5c:46:df:ef:29:1c:27:ac:f1:4b:c8: b4:50:74:5e:cb:d1:01:a8:13:4f:81:5b:cb:a3:46:5e:69:c4: c1:33:fe:d4:f4:49:8e:6d:3a:0a:eb:e5:89:ac:a1:4d:99:fd: 00:b1:b8:d5:76:17:3a:9b:8e:c9:ed:65:9f:e0:bb:03:63:c2: dc:d7:78:76:16:3a:d5:9f:d5:e2:a8:d4:91:26:78:35:7d:90: 06:60:86:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZrp4vKdiKUzSrqi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDcwNDAwMDIwNVoXDTI0MTAwMjAwMDIwNVowLzEtMCsGA1UEAxMk ZjZmNTI5ODctNDIyMy00M2RkLWI0MjktM2JiZDI1ZjVhNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+R/AbtPHK18A0goKq42n078yF0XHFPplJC5 oAfXUQDTfvghx0dOqoRVaxeeFXcjbR+S/zoIOAsycOimUYa8YKWPDhgqjqLKxop2 w6WriTVKe+pw0HjwIrujd/IBWy8vpeuRkdtbC6O+tkJDtPcPGS17fCIXy95fTv1w ZixRuM4+eyq+OqH42nEM4mYful9d7ay1SUNgj2LSfJBogkUJk0XIgPloN6W4t/sa XSsTmGJcUy+QnRQKsTDDLhtGzRq2sALsv1xHsK6EwI7egYyp/oS2eUGX5awwhSKk lfdx4O4PErLEMznJCV85aQiBGpiDaEoJgjHakUrXm8Dn3PbPqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVCbvE8TKCZ5NVuSPM4cmdWeLWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2IyMDM1YjEtZTVhZC0z Y2NkLWEwMTktNjM0MTNjOWQ1NjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbpWTdgqd92zbOQ+CFn42IYDzsi+Vu3e52rzf8/ueFlI1soFv6iH6HE V33wN9ulf4TCqDM8cUl5jd7tzligM7bluY/ojgSKitcP3YBsrSa9gFMni834cgXy GWtFpirTz3Zci7JBgqU3SRerc5OJNQwXE1N/8kUkpbHinHylR+zZ/gn/f89s2HuC rPDS55vutkl0l7YOPIrSW7UHbpdNgFiTs5vTLXuNuB1cRt/vKRwnrPFLyLRQdF7L 0QGoE0+BW8ujRl5pxMEz/tT0SY5tOgrr5YmsoU2Z/QCxuNV2FzqbjsntZZ/guwNj wtzXeHYWOtWf1eKo1JEmeDV9kAZghoQ= -----END CERTIFICATE-----Generated at Thu Jul 4 03:14:53 2024 by rpki-client on console.sobornost.net