$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa File: a14bef6f-3d0e-311d-9920-4d558906aa24.roa (raw, json) Hash identifier: nKdCEvU58HWKPHI4qUyQ7c47h/4xFuyNldArT5RTh5k= Subject key identifier: 98:18:C5:CB:0B:76:00:EB:77:18:F2:43:31:2C:95:17:C9:33:4C:01 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F43285847B5314CD24A60DE3CE641AAF2 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 23465 IP address blocks: 70.96.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:4c:d2:4a:60:de:3c:e6:41:aa:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=6ef71c8d-7ea1-49eb-a9ac-3d28cc2b47a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:bc:6e:8b:74:ee:2e:48:1e:26:4c:bb:c0: 31:83:50:99:e3:86:05:72:70:c0:2e:3b:59:9b:ad: 04:90:f0:28:aa:c4:e3:02:84:29:36:ac:10:96:a6: 6d:34:60:89:fe:00:87:de:33:f2:24:1e:46:d3:93: 71:81:a2:45:88:49:c8:1d:02:f4:27:75:98:bc:32: 49:ca:5b:14:0a:1b:6c:fb:c2:32:52:5b:86:76:80: ac:41:9a:64:24:71:98:60:11:03:aa:a5:6f:85:2f: f1:b4:83:13:c3:35:90:ec:7b:f0:95:91:bd:1c:be: 02:26:4f:d7:94:2d:62:41:e4:b6:31:8a:f2:88:e0: 52:3b:ac:5e:7c:dc:33:62:50:74:96:8f:a3:f2:da: d6:04:98:b2:41:e2:7e:63:00:a5:5a:d2:c2:89:23: b3:33:0b:cc:8f:41:c5:7a:86:6a:4e:7b:15:36:f5: 68:e0:3b:49:8b:67:f5:8b:4f:d5:11:20:77:2a:e0: 4d:42:1b:e5:7e:09:f8:6e:e0:4d:63:73:fd:fb:e8: df:42:ab:bb:38:0f:ed:6a:57:a5:55:ea:f3:a3:6e: 1a:d2:f1:ee:6b:e2:cb:38:65:2c:69:85:3a:4e:40: 28:db:8c:20:d9:9f:01:67:85:9e:67:6d:f8:08:55: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:18:C5:CB:0B:76:00:EB:77:18:F2:43:31:2C:95:17:C9:33:4C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.96.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6c:49:85:af:cb:1d:ff:5f:47:f9:44:84:57:99:aa:98:f7: fe:d6:4f:f0:5c:18:6f:b8:dd:55:46:20:75:73:9c:c8:6a:9c: 7a:47:1e:fb:35:22:90:58:73:f6:e9:42:74:90:f6:94:4c:9e: 65:d6:b4:18:b5:94:ba:40:76:a9:5f:d5:c8:86:63:7c:86:f0: c6:4a:7e:ef:76:68:97:fe:0b:f6:cc:0a:47:a3:5a:2a:a5:80: 5d:ad:77:03:dc:9f:87:c9:3d:d2:bf:c6:9c:f6:c1:67:59:25: ea:3f:3d:85:f1:99:3c:6a:f6:f7:30:2e:75:41:bc:bc:7c:9a: ad:54:2d:60:63:98:d6:90:c4:ec:12:a8:ea:3c:6a:7e:b7:15: 39:cd:9f:06:49:38:77:42:ce:f9:dd:ca:1f:78:5e:2d:34:33: 3a:e0:8d:5a:8c:83:c5:4d:8d:5e:8c:26:fd:d6:85:49:d0:f5: 51:65:a6:cf:19:3e:6c:88:f7:ba:3a:ac:c7:25:91:db:32:c5: c2:85:82:d1:f5:d9:e4:67:c2:7c:a9:c5:20:44:4a:88:a3:4e: 49:e8:5d:2c:a3:c4:70:7f:81:5c:05:15:30:5b:f6:6c:b2:6d: 97:c4:b5:65:a7:1e:1c:9e:c0:32:9f:85:86:ea:ac:e0:58:49: 2c:fa:f9:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MUzSSmDePOZBqvIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk NmVmNzFjOGQtN2VhMS00OWViLWE5YWMtM2QyOGNjMmI0N2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3G8bot07i5IHiZMu8Axg1CZ44YFcnDALjtZ m60EkPAoqsTjAoQpNqwQlqZtNGCJ/gCH3jPyJB5G05NxgaJFiEnIHQL0J3WYvDJJ ylsUChts+8IyUluGdoCsQZpkJHGYYBEDqqVvhS/xtIMTwzWQ7HvwlZG9HL4CJk/X lC1iQeS2MYryiOBSO6xefNwzYlB0lo+j8trWBJiyQeJ+YwClWtLCiSOzMwvMj0HF eoZqTnsVNvVo4DtJi2f1i0/VESB3KuBNQhvlfgn4buBNY3P9++jfQqu7OA/talel Verzo24a0vHua+LLOGUsaYU6TkAo24wg2Z8BZ4WeZ234CFU9AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgYxcsLdgDrdxjyQzEslRfJM0wBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYTE0YmVmNmYtM2QwZS0z MTFkLTk5MjAtNGQ1NTg5MDZhYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRmDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZsSYWvyx3/X0f5RIRXmaqY9/7WT/BcGG+43VVGIHVznMhqnHpHHvs1 IpBYc/bpQnSQ9pRMnmXWtBi1lLpAdqlf1ciGY3yG8MZKfu92aJf+C/bMCkejWiql gF2tdwPcn4fJPdK/xpz2wWdZJeo/PYXxmTxq9vcwLnVBvLx8mq1ULWBjmNaQxOwS qOo8an63FTnNnwZJOHdCzvndyh94Xi00MzrgjVqMg8VNjV6MJv3WhUnQ9VFlps8Z PmyI97o6rMclkdsyxcKFgtH12eRnwnypxSBESoijTknoXSyjxHB/gVwFFTBb9myy bZfEtWWnHhyewDKfhYbqrOBYSSz6+WU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:42 2024 by rpki-client on console-fra.rpki-client.org