$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/aa09b2d6-2ea8-3336-8d9b-31681094c753.roa File: aa09b2d6-2ea8-3336-8d9b-31681094c753.roa (raw, json) Hash identifier: uMSXbRXNChop1mkzD8YDxb+A8b5qAUvxOGvMNbzaJJw= Subject key identifier: AE:7F:03:F4:10:40:BE:95:71:27:0D:73:08:71:28:D9:D7:0D:3F:0B Certificate issuer: /CN=76c188c9-4fff-4233-9a69-35e66734774b Certificate serial: 010D0C9F43285847739662C6D36EF0FDB442DDE0 Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/aa09b2d6-2ea8-3336-8d9b-31681094c753.roa Signing time: Sun 06 Oct 2024 13:00:41 +0000 ROA not before: Sun 06 Oct 2024 13:00:41 +0000 ROA not after: Sat 04 Jan 2025 14:00:41 +0000 asID: 33651 IP address blocks: 64.84.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:73:96:62:c6:d3:6e:f0:fd:b4:42:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b Validity Not Before: Oct 6 13:00:41 2024 GMT Not After : Jan 4 14:00:41 2025 GMT Subject: CN=a6ee69da-6b3a-4848-9a45-e49adf5ad22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:5d:3d:58:a7:c6:c4:85:55:e1:c9:f3:6c: 48:d8:f2:42:4e:ee:51:1a:fa:33:8e:6d:88:a1:bf: 7a:28:34:84:8f:32:3b:e5:14:d9:dc:57:75:5b:eb: 66:02:58:ee:e0:6e:92:04:b7:f1:e8:50:4f:ca:1d: cd:c2:b2:d4:11:ca:fd:4a:7a:e0:54:ea:af:a2:d5: 3b:a0:77:ca:ed:c3:30:39:be:05:9c:96:a9:55:11: af:6b:aa:13:f8:61:30:ec:4b:10:c0:bf:fd:a7:ac: 8e:75:f1:45:74:75:76:b6:77:68:c5:3c:ed:b6:70: df:8b:92:80:c5:1d:49:bd:48:64:09:ba:0a:d1:2b: 23:75:04:36:d5:5f:c9:3e:d3:92:4b:9b:7d:99:02: e8:23:ac:08:96:17:53:d1:89:74:81:6a:0d:04:53: 40:19:35:21:23:4d:47:e7:b9:7d:7b:a1:ef:f3:9a: 82:00:3a:7f:c7:af:33:41:35:18:01:ea:9e:40:64: d9:7f:71:e3:33:cf:07:ed:3d:7e:a8:58:56:5e:f6: fa:6c:bc:d6:28:5d:51:5f:97:33:16:53:a1:32:65: 95:d1:2c:b2:a4:03:8f:55:e1:0e:49:ad:9e:fc:e0: e0:09:4b:2c:f7:26:12:ca:e1:00:ec:90:eb:53:35: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7F:03:F4:10:40:BE:95:71:27:0D:73:08:71:28:D9:D7:0D:3F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/aa09b2d6-2ea8-3336-8d9b-31681094c753.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl X509v3 Authority Key Identifier: keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer sbgp-ipAddrBlock: critical IPv4: 64.84.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:5d:2b:fc:bd:5c:a2:84:28:7f:45:10:98:3d:42:81:26:fc: de:8e:6d:1e:86:04:83:89:a7:36:6d:aa:5b:60:5f:80:23:33: 2e:af:fa:77:e0:8b:11:5f:5e:85:7f:47:11:83:83:80:6d:2f: 06:ab:13:2a:43:19:36:ce:10:dd:d6:3a:2d:85:93:9a:89:10: e0:db:3f:01:d4:6a:64:d2:c9:c8:8f:ca:e5:da:ae:a4:54:15: 92:6f:73:c2:f9:e3:55:73:2d:da:9c:10:2a:0a:b1:a2:71:c7: 7d:15:5a:14:a7:97:f7:b4:a1:a4:9c:72:c4:3b:5f:d9:6c:ad: 01:6a:8e:9a:21:f9:7a:c9:bd:db:a8:be:63:3b:66:77:3f:b1: f1:72:6f:f0:3c:44:6f:cf:5f:d9:fa:16:37:fa:37:e4:af:03: de:cf:fe:93:b9:1d:61:25:39:8f:fc:a9:a2:2a:f2:c6:ba:6c: 9d:44:01:03:23:ee:bf:ed:41:66:07:41:00:11:54:a4:13:b8: b4:26:ea:73:9f:eb:39:44:79:e0:c8:49:e4:3c:1b:47:a4:c5: 90:ba:21:12:9d:18:52:8a:b8:9d:d7:d1:58:9d:43:00:ee:4e: 4f:51:62:34:fd:31:8a:18:c8:79:a7:d9:57:8e:ee:3e:5c:af: 93:ee:fb:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdzlmLG027w/bRC3eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZjMTg4YzktNGZmZi00MjMzLTlhNjktMzVlNjY3MzQ3 NzRiMB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk YTZlZTY5ZGEtNmIzYS00ODQ4LTlhNDUtZTQ5YWRmNWFkMjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTRdPVinxsSFVeHJ82xI2PJCTu5RGvozjm2I ob96KDSEjzI75RTZ3Fd1W+tmAlju4G6SBLfx6FBPyh3NwrLUEcr9SnrgVOqvotU7 oHfK7cMwOb4FnJapVRGva6oT+GEw7EsQwL/9p6yOdfFFdHV2tndoxTzttnDfi5KA xR1JvUhkCboK0SsjdQQ21V/JPtOSS5t9mQLoI6wIlhdT0Yl0gWoNBFNAGTUhI01H 57l9e6Hv85qCADp/x68zQTUYAeqeQGTZf3HjM88H7T1+qFhWXvb6bLzWKF1RX5cz FlOhMmWV0SyypAOPVeEOSa2e/ODgCUss9yYSyuEA7JDrUzWjHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5/A/QQQL6VcScNcwhxKNnXDT8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NmMx ODhjOS00ZmZmLTQyMzMtOWE2OS0zNWU2NjczNDc3NGIvYWEwOWIyZDYtMmVhOC0z MzM2LThkOWItMzE2ODEwOTRjNzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzZjMTg4YzktNGZmZi00MjMzLTlh NjktMzVlNjY3MzQ3NzRiLzc2YzE4OGM5LTRmZmYtNDIzMy05YTY5LTM1ZTY2NzM0 Nzc0Yi5jcmwwHwYDVR0jBBgwFoAU2+KmpXhT9xLjHzFSCsVBuxw+5xswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NmMxODhjOS00ZmZmLTQyMzMtOWE2OS0zNWU2 NjczNDc3NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5dK/y9XKKEKH9FEJg9QoEm/N6ObR6GBIOJpzZtqltgX4AjMy6v+nfg ixFfXoV/RxGDg4BtLwarEypDGTbOEN3WOi2Fk5qJEODbPwHUamTSyciPyuXarqRU FZJvc8L541VzLdqcECoKsaJxx30VWhSnl/e0oaSccsQ7X9lsrQFqjpoh+XrJvduo vmM7Znc/sfFyb/A8RG/PX9n6Fjf6N+SvA97P/pO5HWElOY/8qaIq8sa6bJ1EAQMj 7r/tQWYHQQARVKQTuLQm6nOf6zlEeeDISeQ8G0ekxZC6IRKdGFKKuJ3X0VidQwDu Tk9RYjT9MYoYyHmn2VeO7j5cr5Pu+0A= -----END CERTIFICATE-----Generated at Thu Nov 21 21:42:57 2024 by rpki-client on console-ams.rpki-client.org