$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b6f9f83-0786-3b3f-b262-d19655e8e10e.roa File: 8b6f9f83-0786-3b3f-b262-d19655e8e10e.roa (raw, json) Hash identifier: gD4TzPOdwono/AcZ6Zo5nZ9rfLXk+P2egcWYK295fIg= Subject key identifier: 57:27:2A:22:66:CE:7B:40:7A:0A:2C:6E:63:F7:D1:64:15:1D:D9:A8 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F432858472B0E99BEA6ABD20413D9E500 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b6f9f83-0786-3b3f-b262-d19655e8e10e.roa Signing time: Mon 09 Sep 2024 12:00:00 +0000 ROA not before: Mon 09 Sep 2024 12:00:00 +0000 ROA not after: Tue 10 Dec 2024 05:00:00 +0000 asID: 577 IP address blocks: 70.28.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2b:0e:99:be:a6:ab:d2:04:13:d9:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Sep 9 12:00:00 2024 GMT Not After : Dec 10 05:00:00 2024 GMT Subject: CN=3edf4307-d0c5-40b9-aa39-7f1e5b20d427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:c8:5e:82:6f:ef:c3:12:8d:a1:34:8b:66: 8d:79:87:90:b1:c0:12:fe:d7:df:71:9c:c3:9e:73: 48:e2:32:a4:fa:99:bd:5c:cc:1b:5b:e6:89:6e:f8: e8:99:5c:ca:28:b0:ba:28:e9:75:ea:ce:50:66:ff: 9f:39:ce:f8:1c:da:4b:e6:bd:26:8f:31:e5:75:c3: 32:15:02:e4:e6:f8:98:29:e7:c4:cb:da:de:6c:49: b0:d4:05:fc:88:85:f9:21:b2:76:3f:26:2d:6c:06: 31:36:08:df:3b:4b:cd:55:68:67:60:05:c1:4d:e5: 00:92:26:c2:d3:81:3b:e2:92:31:6c:f4:30:f1:a6: 3b:ef:69:37:76:d4:22:4f:49:53:20:46:b2:4a:39: 9c:0f:5c:49:58:e8:13:b1:e9:4b:b0:63:cd:a4:9d: 49:c1:d6:ec:b0:07:75:83:06:fa:5f:0f:f9:4c:01: bf:e0:9b:d4:62:14:ec:a0:21:d0:48:60:b1:7b:60: d1:92:8e:6e:70:7c:50:12:fe:8e:3d:01:a1:7c:e8: 25:04:0f:54:1f:57:d1:e3:92:10:1c:d6:b5:a9:97: eb:79:d6:86:7c:03:da:b1:1f:04:4d:50:d0:71:f9: 12:69:95:33:9d:08:a3:1a:67:43:d6:00:b8:2f:ba: 4d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:27:2A:22:66:CE:7B:40:7A:0A:2C:6E:63:F7:D1:64:15:1D:D9:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b6f9f83-0786-3b3f-b262-d19655e8e10e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 70.28.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:fe:de:cb:50:f4:79:e1:14:dc:b5:fa:61:93:6b:36:94:0b: a1:1e:14:6b:9c:c0:ac:50:ac:fc:75:1d:d3:eb:09:98:ea:cd: 14:49:37:c1:5e:08:a0:71:b3:22:0a:17:8e:5c:81:ae:12:36: 5c:9d:71:41:db:fe:53:19:d8:1a:d9:85:f8:b5:ef:03:ec:9f: 16:fc:21:24:c9:04:1a:54:b2:f4:51:2d:45:74:b8:30:4c:94: df:6b:12:e2:42:8b:52:99:65:be:57:13:23:be:c1:53:6a:0d: 83:33:96:a3:dc:d2:52:dc:db:a8:23:df:f3:0c:19:7c:5f:a5: 75:6d:20:8e:5a:fd:29:b9:57:70:1f:3d:76:34:4c:99:9a:88: b6:d2:38:7a:b5:c6:ff:ba:ae:2e:9b:f6:48:5a:ca:63:76:f1: 23:42:57:82:42:0c:fe:b5:7a:08:38:b9:07:fc:37:6d:10:d0: c3:2a:82:b6:cc:bb:e5:f4:ac:76:c5:0a:2a:5f:fc:08:c3:15: e1:be:32:c0:4b:f8:65:7a:34:b4:95:16:5a:ef:e4:3f:09:84: 70:82:fe:a4:a7:6b:a3:c4:f7:a6:e2:d3:67:bb:63:ff:0e:39: 9a:26:28:6a:47:11:e0:a6:77:e3:60:67:04:70:75:91:cb:07: 62:f1:10:b8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcrDpm+pqvSBBPZ5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk M2VkZjQzMDctZDBjNS00MGI5LWFhMzktN2YxZTViMjBkNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2XIXoJv78MSjaE0i2aNeYeQscAS/tffcZzD nnNI4jKk+pm9XMwbW+aJbvjomVzKKLC6KOl16s5QZv+fOc74HNpL5r0mjzHldcMy FQLk5viYKefEy9rebEmw1AX8iIX5IbJ2PyYtbAYxNgjfO0vNVWhnYAXBTeUAkibC 04E74pIxbPQw8aY772k3dtQiT0lTIEaySjmcD1xJWOgTselLsGPNpJ1JwdbssAd1 gwb6Xw/5TAG/4JvUYhTsoCHQSGCxe2DRko5ucHxQEv6OPQGhfOglBA9UH1fR45IQ HNa1qZfredaGfAPasR8ETVDQcfkSaZUznQijGmdD1gC4L7pN6QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFcnKiJmzntAegosbmP30WQVHdmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGI2ZjlmODMtMDc4Ni0z YjNmLWIyNjItZDE5NjU1ZThlMTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARhwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjP7ey1D0eeEU3LX6YZNrNpQLoR4Ua5zArFCs/HUd0+sJmOrNFEk3wV4I oHGzIgoXjlyBrhI2XJ1xQdv+UxnYGtmF+LXvA+yfFvwhJMkEGlSy9FEtRXS4MEyU 32sS4kKLUpllvlcTI77BU2oNgzOWo9zSUtzbqCPf8wwZfF+ldW0gjlr9KblXcB89 djRMmZqIttI4erXG/7quLpv2SFrKY3bxI0JXgkIM/rV6CDi5B/w3bRDQwyqCtsy7 5fSsdsUKKl/8CMMV4b4ywEv4ZXo0tJUWWu/kPwmEcIL+pKdro8T3puLTZ7tj/w45 miYoakcR4KZ342BnBHB1kcsHYvEQuA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:11 2024 by rpki-client on console-ams.rpki-client.org