$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa File: ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa (raw, json) Hash identifier: LZjNB3XYHJQoOv/Fxs0dPep4171wIfAfv2KRNvq2NZQ= Subject key identifier: 28:59:85:CB:6C:8B:06:82:3B:ED:5D:74:65:3E:74:57:63:19:B3:00 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F432858471775B7013928116F7C061880 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa Signing time: Tue 03 Sep 2024 13:00:42 +0000 ROA not before: Tue 03 Sep 2024 13:00:42 +0000 ROA not after: Mon 02 Dec 2024 14:00:42 +0000 asID: 396253 IP address blocks: 97.64.56.0/22 maxlen: 22 104.225.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:17:75:b7:01:39:28:11:6f:7c:06:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 3 13:00:42 2024 GMT Not After : Dec 2 14:00:42 2024 GMT Subject: CN=04314a6c-44a6-4d30-88ed-42da79048eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cb:68:9a:db:a9:db:cb:bb:ab:c7:2c:fd:dc: 57:ee:51:1b:c8:2d:8a:36:7f:45:8e:c6:e6:d9:b7: f3:cc:3f:c4:41:29:54:7d:d1:7f:1e:2b:52:cc:10: b7:ba:4c:48:3d:39:57:29:0e:d5:b9:50:5a:e6:af: 9d:d0:7b:de:37:6f:25:2c:92:29:81:32:00:71:12: f7:99:39:0e:dc:5b:d2:b0:65:1e:bb:55:70:6f:b3: be:43:a2:6d:96:f2:6b:da:7e:87:4e:ed:ab:e2:98: cf:5f:7d:33:66:f2:0b:a8:c7:34:e5:0c:7d:a6:20: 50:2b:7d:b5:20:e5:60:0f:e1:03:82:aa:c1:80:10: 78:8d:42:7d:1c:3f:84:71:d6:5c:a1:21:82:ab:38: 3d:a8:97:4e:08:7f:9e:87:ea:06:cb:cc:d7:e6:d3: cc:69:2c:99:c0:e5:90:fa:c7:c5:2d:3e:85:27:ec: 8f:19:0c:80:b2:22:cc:30:8f:9c:da:a7:22:e5:bf: 57:72:fe:95:60:54:c1:e6:dc:be:a9:e9:d3:16:5b: 86:30:ce:4d:12:09:e6:50:4e:c9:eb:6b:0c:42:4d: e4:b1:92:c3:bd:59:fd:28:f2:d5:71:7d:1a:17:a4: 68:e1:d4:3c:4e:6b:72:57:d8:cd:67:de:3d:3b:1b: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:59:85:CB:6C:8B:06:82:3B:ED:5D:74:65:3E:74:57:63:19:B3:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 97.64.56.0/22 104.225.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:17:25:a1:62:2c:6a:47:a2:3d:6e:87:aa:cb:95:87:00:18: 19:56:14:7e:b3:89:e3:eb:29:e2:40:36:db:61:6f:ff:1a:4a: 10:cf:be:c8:7f:8f:27:e2:40:f8:1b:d4:88:41:1e:07:ba:ae: 53:aa:22:64:71:8e:d9:7c:69:0b:33:2d:c1:2e:4b:e3:8c:d2: c0:ae:ee:b5:23:9a:24:23:c8:e6:54:a0:ad:76:55:bb:cb:d5: ab:73:f1:35:22:af:c8:3d:5a:87:fe:58:29:ad:68:03:3f:0e: 60:fe:76:16:02:8f:40:a5:e1:5e:43:cb:48:0c:5d:5e:c7:7d: d6:85:66:bf:93:01:f7:23:dc:e1:4a:3f:cc:c7:11:66:c9:3d: 5f:27:2c:44:d7:6c:14:31:03:ce:0b:74:1d:6b:db:2b:fd:5e: bf:6f:f1:47:52:1b:83:7c:b8:80:8d:d9:30:52:e2:30:e1:11: 85:94:3a:9c:ee:b9:96:df:24:7d:6d:a5:a7:42:c0:09:f9:c4: e6:8f:de:45:7e:e7:60:20:74:c6:2a:f1:64:56:3a:95:b3:b6: 77:50:df:43:64:40:32:13:2e:96:02:8e:97:ff:ec:04:07:7b: 77:29:28:84:53:3b:37:56:f2:d8:48:3a:6c:69:0c:c5:cd:bb: 51:a9:1f:a0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEcXdbcBOSgRb3wGGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI0MDkwMzEzMDA0MloXDTI0MTIwMjE0MDA0MlowLzEtMCsGA1UEAxMk MDQzMTRhNmMtNDRhNi00ZDMwLTg4ZWQtNDJkYTc5MDQ4ZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgctomtup28u7q8cs/dxX7lEbyC2KNn9Fjsbm 2bfzzD/EQSlUfdF/HitSzBC3ukxIPTlXKQ7VuVBa5q+d0HveN28lLJIpgTIAcRL3 mTkO3FvSsGUeu1Vwb7O+Q6JtlvJr2n6HTu2r4pjPX30zZvILqMc05Qx9piBQK321 IOVgD+EDgqrBgBB4jUJ9HD+EcdZcoSGCqzg9qJdOCH+eh+oGy8zX5tPMaSyZwOWQ +sfFLT6FJ+yPGQyAsiLMMI+c2qci5b9Xcv6VYFTB5ty+qenTFluGMM5NEgnmUE7J 62sMQk3ksZLDvVn9KPLVcX0aF6Ro4dQ8TmtyV9jNZ949OxtbDwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFChZhctsiwaCO+1ddGU+dFdjGbMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYWU2MTBmNmEtMmQ3NC0z YWEyLThjZDUtYTM1MDVlNDkyNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCYUA4AwQE aOGwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGwXJaFiLGpHoj1uh6rLlYcAGBlWFH6ziePrKeJANtthb/8a ShDPvsh/jyfiQPgb1IhBHge6rlOqImRxjtl8aQszLcEuS+OM0sCu7rUjmiQjyOZU oK12VbvL1atz8TUir8g9Wof+WCmtaAM/DmD+dhYCj0Cl4V5Dy0gMXV7HfdaFZr+T Afcj3OFKP8zHEWbJPV8nLETXbBQxA84LdB1r2yv9Xr9v8UdSG4N8uICN2TBS4jDh EYWUOpzuuZbfJH1tpadCwAn5xOaP3kV+52AgdMYq8WRWOpWztndQ30NkQDITLpYC jpf/7AQHe3cpKIRTOzdW8thIOmxpDMXNu1GpH6A= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:00 2024 by rpki-client on console-ams.rpki-client.org