$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/f8c13836-c165-39bc-9bda-e76385fde4be.roa File: f8c13836-c165-39bc-9bda-e76385fde4be.roa (raw, json) Hash identifier: y4Qnv/uEtLmsuqXbL1Xkhmm6lX69YkTTGK5HHethezs= Subject key identifier: 26:F6:94:79:26:AC:62:38:B3:22:EE:D5:23:CD:83:C1:6C:C8:B2:D0 Certificate issuer: /CN=1f1c0c08-444d-43e6-923b-55c2d71244e4 Certificate serial: 010D0C9F43285847AB6C0EEC6D1D240F74E2E900 Authority key identifier: 4B:D4:90:27:6C:37:FF:DF:57:06:1E:69:C5:A0:95:7A:E8:06:FA:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/f8c13836-c165-39bc-9bda-e76385fde4be.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 397711 IP address blocks: 170.76.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:0e:ec:6d:1d:24:0f:74:e2:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1c0c08-444d-43e6-923b-55c2d71244e4 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=dea95af4-2320-48c3-b34d-5d5136c50a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:4c:f3:61:00:0b:e8:79:62:45:b7:98:34: 5c:87:bf:01:5c:95:b5:be:6b:bf:32:2e:f6:da:01: 00:56:91:09:93:a2:87:65:08:3e:d9:5e:d0:9e:10: d1:72:f3:21:c7:2a:4a:3b:c1:a0:b7:54:01:40:7c: 72:ec:bc:ce:f7:a9:ca:06:04:1e:fb:2a:8e:85:31: cc:d0:fa:ed:94:70:4b:75:21:f4:0e:0c:c5:3a:01: 2e:ee:98:63:7f:62:63:d1:de:ce:ad:c9:47:6e:e1: f6:5e:6b:0c:a0:27:08:ff:8c:23:0c:6d:bc:28:27: 16:2a:e2:41:3d:d1:e9:72:e6:25:39:4e:dc:c9:5b: 98:1f:63:6c:53:23:36:40:ea:85:55:5c:24:a2:fe: cc:aa:9f:73:86:d9:2a:e9:14:00:64:22:23:f3:83: 5d:90:c6:81:62:01:50:85:66:6e:fe:9b:b8:01:af: b9:f0:74:f2:59:dc:c1:9d:6b:10:8c:ea:d6:b7:1e: 5a:cd:da:6a:0c:fb:d2:cd:5d:b5:4d:75:86:63:fd: 95:48:68:d7:2c:b7:b9:52:68:b2:55:75:f0:2f:5c: 97:98:cb:a9:f1:19:33:aa:5b:39:63:d1:1c:01:e5: 22:1a:a5:92:42:4c:c4:92:6b:9b:e2:3e:26:ec:5d: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F6:94:79:26:AC:62:38:B3:22:EE:D5:23:CD:83:C1:6C:C8:B2:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/f8c13836-c165-39bc-9bda-e76385fde4be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.crl X509v3 Authority Key Identifier: keyid:4B:D4:90:27:6C:37:FF:DF:57:06:1E:69:C5:A0:95:7A:E8:06:FA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer sbgp-ipAddrBlock: critical IPv4: 170.76.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:73:e5:39:b8:83:1d:62:20:30:8c:96:05:de:3f:96:e1:0f: 43:a4:23:bd:4f:fa:e6:c3:bb:1f:65:e8:32:1a:c9:b5:f9:a1: e7:1c:02:2d:6e:8e:47:62:fe:fa:bf:c5:7d:a6:97:c2:4f:01: 89:06:80:dc:27:42:4a:48:11:7c:b3:78:40:69:11:8c:a6:46: b4:aa:e1:23:5b:c6:da:74:e0:ef:e1:51:3a:93:5b:a7:9f:45: a0:01:ea:ec:86:21:4f:70:5e:46:e0:f4:6d:2e:e2:70:19:ef: f6:3a:f3:5e:5e:94:55:20:80:8e:9f:80:49:91:07:a9:a2:3d: 80:51:e9:c1:4d:9f:aa:87:39:a9:68:5e:14:6d:6d:0c:5f:9b: 2e:24:5e:fd:31:dc:54:67:f2:5a:b3:1c:28:53:58:e4:40:17: 6a:91:d0:eb:60:98:57:7b:1c:bd:34:ac:6c:93:1c:d5:6d:96: 8e:04:83:06:ec:ee:df:b0:71:6a:40:82:30:ea:33:a8:c6:78: 28:ad:4d:ee:14:5c:f6:98:87:09:ea:91:c0:ad:21:8e:79:13: 0c:68:b2:cb:04:b6:46:70:84:70:6d:a9:71:e5:3f:b8:92:b5: 64:90:45:42:bd:eb:fc:a3:70:c3:82:6f:48:85:b4:ba:8a:00: d1:6c:2b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbA7sbR0kD3Ti6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxYzBjMDgtNDQ0ZC00M2U2LTkyM2ItNTVjMmQ3MTI0 NGU0MB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk ZGVhOTVhZjQtMjMyMC00OGMzLWIzNGQtNWQ1MTM2YzUwYThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZNM82EAC+h5YkW3mDRch78BXJW1vmu/Mi72 2gEAVpEJk6KHZQg+2V7QnhDRcvMhxypKO8Ggt1QBQHxy7LzO96nKBgQe+yqOhTHM 0PrtlHBLdSH0DgzFOgEu7phjf2Jj0d7OrclHbuH2XmsMoCcI/4wjDG28KCcWKuJB PdHpcuYlOU7cyVuYH2NsUyM2QOqFVVwkov7Mqp9zhtkq6RQAZCIj84NdkMaBYgFQ hWZu/pu4Aa+58HTyWdzBnWsQjOrWtx5azdpqDPvSzV21TXWGY/2VSGjXLLe5Umiy VXXwL1yXmMup8Rkzqls5Y9EcAeUiGqWSQkzEkmub4j4m7F09gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCb2lHkmrGI4syLu1SPNg8FsyLLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZjFj MGMwOC00NDRkLTQzZTYtOTIzYi01NWMyZDcxMjQ0ZTQvZjhjMTM4MzYtYzE2NS0z OWJjLTliZGEtZTc2Mzg1ZmRlNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWYxYzBjMDgtNDQ0ZC00M2U2LTky M2ItNTVjMmQ3MTI0NGU0LzFmMWMwYzA4LTQ0NGQtNDNlNi05MjNiLTU1YzJkNzEy NDRlNC5jcmwwHwYDVR0jBBgwFoAUS9SQJ2w3/99XBh5pxaCVeugG+hYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZjFjMGMwOC00NDRkLTQzZTYtOTIzYi01NWMy ZDcxMjQ0ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqkzxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENz5Tm4gx1iIDCMlgXeP5bhD0OkI71P+ubDux9l6DIaybX5oeccAi1u jkdi/vq/xX2ml8JPAYkGgNwnQkpIEXyzeEBpEYymRrSq4SNbxtp04O/hUTqTW6ef RaAB6uyGIU9wXkbg9G0u4nAZ7/Y6815elFUggI6fgEmRB6miPYBR6cFNn6qHOalo XhRtbQxfmy4kXv0x3FRn8lqzHChTWORAF2qR0OtgmFd7HL00rGyTHNVtlo4Egwbs 7t+wcWpAgjDqM6jGeCitTe4UXPaYhwnqkcCtIY55EwxosssEtkZwhHBtqXHlP7iS tWSQRUK96/yjcMOCb0iFtLqKANFsK1I= -----END CERTIFICATE-----Generated at Fri Nov 22 04:06:56 2024 by rpki-client on console-ams.rpki-client.org