$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d9a49544-d44b-35a8-8f49-6dfa8859c180.roa File: d9a49544-d44b-35a8-8f49-6dfa8859c180.roa (raw, json) Hash identifier: i5+owgKzhDo5/FZU4wANgR6gIP3TnsqLwcLq3DbT9Hc= Subject key identifier: 65:66:3B:FE:D1:57:58:71:A3:08:A2:B8:7E:36:41:36:6E:15:1F:8A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584659DA330DB24B48EA5C689C64 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d9a49544-d44b-35a8-8f49-6dfa8859c180.roa Signing time: Thu 27 Jun 2024 14:59:36 +0000 ROA not before: Thu 27 Jun 2024 14:59:36 +0000 ROA not after: Wed 25 Sep 2024 14:59:36 +0000 asID: 4237 IP address blocks: 20.137.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jul 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:59:da:33:0d:b2:4b:48:ea:5c:68:9c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jun 27 14:59:36 2024 GMT Not After : Sep 25 14:59:36 2024 GMT Subject: CN=d5f23c39-9c30-46d7-9664-2917f3948787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:f8:02:f8:be:05:eb:5d:07:ce:1c:9c:04: 06:9f:8a:d1:ca:6b:e8:c6:94:d3:20:4d:3d:1d:78: c3:4b:50:77:79:be:87:43:5d:0c:6e:da:21:21:33: c6:ac:fd:aa:dd:8e:40:1b:26:ba:34:62:c6:eb:6c: 3d:4f:d7:51:68:94:77:e8:f7:5a:44:3e:9a:4d:f8: ce:c5:62:2f:ce:37:07:91:87:b7:a3:bc:3c:9b:da: c8:3c:bf:89:99:96:ab:4e:54:e2:79:6a:0e:2c:0c: 93:2f:a4:bd:4d:2b:7a:0c:4a:5a:25:40:78:aa:43: 3b:c9:a4:91:94:7b:a6:aa:26:f5:94:b2:a7:0a:5c: 3e:e6:cc:1e:8a:5d:bb:b7:17:11:70:9c:07:53:94: 5d:3b:3c:bc:25:09:cd:81:87:8c:22:11:22:1d:0d: 00:89:1c:7b:f5:16:16:8f:51:2a:5c:83:dd:d5:ee: 0a:41:65:84:1b:d2:e7:ab:4d:10:52:1d:08:ef:ba: 39:6d:77:44:66:a6:d7:a8:bf:eb:0d:f5:ef:85:33: 7b:d6:4e:47:ad:74:22:18:7c:7d:4e:4e:71:b0:42: 87:aa:0e:f7:ef:3a:05:51:63:71:21:e8:d2:33:2e: 40:3e:8f:8d:5d:f5:b6:5f:fd:29:13:a2:12:0b:0e: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:66:3B:FE:D1:57:58:71:A3:08:A2:B8:7E:36:41:36:6E:15:1F:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d9a49544-d44b-35a8-8f49-6dfa8859c180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:38:05:47:0f:e9:da:51:4f:c8:2b:c5:b0:03:1a:34:7d:74: 9f:0a:3e:0c:22:a8:b1:f3:9c:2c:a2:75:41:34:18:ed:50:5c: 05:5e:63:83:6b:d5:3b:15:c4:02:ff:7d:3d:dc:e9:0f:b4:cd: c4:d4:77:c8:97:f5:78:e3:fe:c7:d5:68:73:f0:ff:bc:1e:ea: 4b:5b:29:35:e1:fd:12:0d:e9:ed:33:a4:3d:1b:0d:fb:a4:46: a9:26:ae:6d:af:5f:04:3d:ef:ae:54:4e:6e:ed:90:fe:e6:0f: bf:f7:4c:eb:9a:ee:84:7e:fd:c5:8a:2d:9e:05:58:0c:4d:ff: 5e:da:a0:c5:0f:64:a7:be:c6:f5:4f:01:52:e8:a4:52:29:32: 2b:3a:f0:46:b4:bf:58:67:39:2e:b8:92:fa:a9:c9:79:4d:6a: 70:ff:65:d5:fd:7f:4f:a1:43:92:de:40:d6:f8:f0:94:d3:ca: 61:f6:21:df:f2:62:be:af:5b:2a:bb:4e:df:97:e7:38:a4:90: 10:4c:fa:1d:cc:2e:ba:aa:f7:e0:70:f9:e3:85:ff:91:1e:ee: 76:01:d1:e5:79:c3:39:1f:e5:a4:53:0a:0b:ca:2e:6a:27:fd: da:ec:c2:7c:65:66:be:d3:a7:13:8b:7e:e2:a3:84:74:48:3b: 96:d9:e0:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZZ2jMNsktI6lxonGQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MDYyNzE0NTkzNloXDTI0MDkyNTE0NTkzNlowLzEtMCsGA1UEAxMk ZDVmMjNjMzktOWMzMC00NmQ3LTk2NjQtMjkxN2YzOTQ4Nzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkj4Avi+BetdB84cnAQGn4rRymvoxpTTIE09 HXjDS1B3eb6HQ10MbtohITPGrP2q3Y5AGya6NGLG62w9T9dRaJR36PdaRD6aTfjO xWIvzjcHkYe3o7w8m9rIPL+JmZarTlTieWoOLAyTL6S9TSt6DEpaJUB4qkM7yaSR lHumqib1lLKnClw+5sweil27txcRcJwHU5RdOzy8JQnNgYeMIhEiHQ0AiRx79RYW j1EqXIPd1e4KQWWEG9Lnq00QUh0I77o5bXdEZqbXqL/rDfXvhTN71k5HrXQiGHx9 Tk5xsEKHqg737zoFUWNxIejSMy5APo+NXfW2X/0pE6ISCw7C+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVmO/7RV1hxowiiuH42QTZuFR+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDlhNDk1NDQtZDQ0Yi0z NWE4LThmNDktNmRmYTg4NTljMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFImgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo4BUcP6dpRT8grxbADGjR9dJ8KPgwiqLHznCyidUE0GO1QXAVeY4Nr 1TsVxAL/fT3c6Q+0zcTUd8iX9Xjj/sfVaHPw/7we6ktbKTXh/RIN6e0zpD0bDfuk Rqkmrm2vXwQ9765UTm7tkP7mD7/3TOua7oR+/cWKLZ4FWAxN/17aoMUPZKe+xvVP AVLopFIpMis68Ea0v1hnOS64kvqpyXlNanD/ZdX9f0+hQ5LeQNb48JTTymH2Id/y Yr6vWyq7Tt+X5zikkBBM+h3MLrqq9+Bw+eOF/5Ee7nYB0eV5wzkf5aRTCgvKLmon /drswnxlZr7TpxOLfuKjhHRIO5bZ4PQ= -----END CERTIFICATE-----Generated at Thu Jul 4 03:14:53 2024 by rpki-client on console.sobornost.net