$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/44d6c507-632c-36a9-8303-bedd7d8d7696.roa File: 44d6c507-632c-36a9-8303-bedd7d8d7696.roa (raw, json) Hash identifier: XgWWyP3yZLnwmbuGw80TEYCeHG5fZipPxFI5H9Fe7m0= Subject key identifier: 3C:51:28:0E:98:33:06:1E:C5:D2:90:A3:CD:47:12:74:94:1E:39:A1 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F432858472B0EA2A031AB3089D41EA040 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/44d6c507-632c-36a9-8303-bedd7d8d7696.roa Signing time: Mon 09 Sep 2024 12:00:00 +0000 ROA not before: Mon 09 Sep 2024 12:00:00 +0000 ROA not after: Tue 10 Dec 2024 05:00:00 +0000 asID: 577 IP address blocks: 70.28.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2b:0e:a2:a0:31:ab:30:89:d4:1e:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Sep 9 12:00:00 2024 GMT Not After : Dec 10 05:00:00 2024 GMT Subject: CN=aad405c0-d630-4147-8756-304607e1d967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:83:ca:c1:a0:26:1f:93:0f:ac:a6:bc:f1: 3b:b2:99:4c:63:d5:06:24:dc:6f:a5:50:d1:37:33: 98:c5:cd:34:12:80:90:14:e0:bd:02:38:a2:8d:2a: cb:62:e1:6b:fa:4e:d0:f4:9e:34:d4:36:70:39:74: 81:ae:11:45:ac:74:a8:2c:07:02:d3:2b:ec:d3:5d: 3e:47:2c:82:1d:a7:1d:6f:e1:7e:c3:1d:da:8e:a3: d0:47:01:d1:00:85:c0:c2:0b:83:b3:ca:0b:19:ab: ce:29:dd:a0:d4:79:e8:f6:fa:9a:aa:82:40:f5:b8: 64:9f:16:2e:d3:60:c4:da:99:a9:45:4b:a1:0a:2e: 0a:d2:45:9c:3a:01:a4:7d:bf:70:12:5d:6d:c5:30: 98:1e:b0:b3:4d:9f:18:fe:e6:0e:99:6b:a6:23:a5: f3:42:58:12:eb:e3:50:98:51:8b:d7:11:37:b8:27: e6:91:32:44:4a:a7:f1:3d:81:f4:21:80:f2:3f:fd: 02:7b:dc:ac:11:86:56:46:74:ab:e5:91:ef:d0:cc: 95:1d:57:51:6e:5b:b7:f6:f3:26:58:55:43:e1:f3: 51:0f:82:bc:23:79:49:df:69:fb:2d:93:92:d2:8d: b5:1b:ac:0f:1b:6a:6f:8d:ac:01:75:48:ed:54:d7: 88:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:51:28:0E:98:33:06:1E:C5:D2:90:A3:CD:47:12:74:94:1E:39:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/44d6c507-632c-36a9-8303-bedd7d8d7696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 70.28.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ac:8c:4b:e6:4a:e1:1b:1c:0a:0b:7c:23:bc:fc:d2:30:6b: 74:44:e6:3c:bf:1e:2e:e2:f7:c1:cc:dd:77:08:b3:80:0c:f2: bd:50:b2:1e:f6:d8:88:15:da:54:65:2d:5d:69:1d:d9:ef:32: 19:41:4e:ee:4c:97:e9:8b:e3:46:29:5a:8a:b0:18:5d:a0:57: 73:b4:24:9b:7f:35:62:72:c8:61:2e:9e:77:d1:8b:78:24:ef: 21:52:09:7f:34:fd:ee:bf:2a:da:96:a3:0f:bc:c7:12:81:93: f8:49:9f:e1:17:d7:3d:27:a9:4c:3e:70:65:d1:c4:dc:f7:07: 32:cb:2f:06:6e:e4:70:25:fd:da:f1:6c:08:69:ee:f6:24:2c: ce:ca:80:ce:d7:fa:6c:9a:cd:51:66:d7:54:e6:d9:e5:34:e8: fd:89:52:ea:23:b2:7e:a7:77:7b:cc:a7:9c:1d:4d:14:67:1d: b4:42:23:70:b7:ec:d7:eb:f8:c1:20:87:22:ee:a7:66:ff:4b: 7a:8b:0c:4b:22:8a:49:0b:38:05:58:83:6a:66:98:6f:e0:35: 98:9b:f0:5a:81:34:fb:39:80:ab:8a:f8:e8:27:3f:c2:98:10: d8:5d:f1:51:41:fd:3e:59:97:5b:f9:0e:2d:3f:0e:f4:55:08: 28:5e:83:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrDqKgMaswidQeoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk YWFkNDA1YzAtZDYzMC00MTQ3LTg3NTYtMzA0NjA3ZTFkOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFmDysGgJh+TD6ymvPE7splMY9UGJNxvpVDR NzOYxc00EoCQFOC9AjiijSrLYuFr+k7Q9J401DZwOXSBrhFFrHSoLAcC0yvs010+ RyyCHacdb+F+wx3ajqPQRwHRAIXAwguDs8oLGavOKd2g1Hno9vqaqoJA9bhknxYu 02DE2pmpRUuhCi4K0kWcOgGkfb9wEl1txTCYHrCzTZ8Y/uYOmWumI6XzQlgS6+NQ mFGL1xE3uCfmkTJESqfxPYH0IYDyP/0Ce9ysEYZWRnSr5ZHv0MyVHVdRblu39vMm WFVD4fNRD4K8I3lJ32n7LZOS0o21G6wPG2pvjawBdUjtVNeIfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxRKA6YMwYexdKQo81HEnSUHjmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDRkNmM1MDctNjMyYy0z NmE5LTgzMDMtYmVkZDdkOGQ3Njk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARhyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGsjEvmSuEbHAoLfCO8/NIwa3RE5jy/Hi7i98HM3XcIs4AM8r1Qsh72 2IgV2lRlLV1pHdnvMhlBTu5Ml+mL40YpWoqwGF2gV3O0JJt/NWJyyGEunnfRi3gk 7yFSCX80/e6/KtqWow+8xxKBk/hJn+EX1z0nqUw+cGXRxNz3BzLLLwZu5HAl/drx bAhp7vYkLM7KgM7X+myazVFm11Tm2eU06P2JUuojsn6nd3vMp5wdTRRnHbRCI3C3 7Nfr+MEghyLup2b/S3qLDEsiikkLOAVYg2pmmG/gNZib8FqBNPs5gKuK+OgnP8KY ENhd8VFB/T5Zl1v5Di0/DvRVCCheg60= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org