$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/33330f62-f621-30ef-aec0-b2d8fe0dc591.roa File: 33330f62-f621-30ef-aec0-b2d8fe0dc591.roa (raw, json) Hash identifier: jfcz6Ok03WgV0ne0DHkBf+e826E7ClhShbjp7zYN30E= Subject key identifier: C1:2A:74:82:64:3D:E7:12:67:DA:C1:B1:B7:6E:CA:F2:E0:E9:37:81 Certificate issuer: /CN=31671c23-3278-409b-837d-7dfe69606940 Certificate serial: 010D0C9F432858474DE602AEBCE90ECA44694600 Authority key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/33330f62-f621-30ef-aec0-b2d8fe0dc591.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 16509 IP address blocks: 170.62.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e6:02:ae:bc:e9:0e:ca:44:69:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31671c23-3278-409b-837d-7dfe69606940 Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=d78c0282-1fbf-4557-889d-e4f1bc100528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:d4:df:84:40:32:01:b6:3a:85:65:60:2b: 83:8b:95:f8:8e:34:8a:e5:a5:a5:b7:8e:85:40:83: 33:05:63:e9:ea:7a:35:c2:bb:51:6c:3e:63:67:d8: 75:20:a1:7d:7d:fd:fe:58:c7:e4:48:80:13:00:76: 4d:70:0c:fb:26:f2:c1:fd:30:09:ed:71:81:7b:e5: cc:35:00:d0:df:26:75:cb:fd:ce:b2:01:62:ff:a5: e1:be:58:2b:e6:fe:ee:62:98:39:cd:f4:3a:26:8a: 70:87:b7:a8:cd:8a:f3:24:4b:b0:10:da:50:e6:ee: b3:f0:c4:a5:b3:14:45:a4:2a:23:82:e6:36:82:b4: 9d:9e:f2:37:1e:06:8f:72:03:1f:d7:2d:1b:5e:a4: 85:7e:0e:c5:bf:17:2e:d4:21:6c:1c:52:84:49:71: 44:8b:4b:09:5d:1b:b8:6e:6e:cb:30:71:29:7c:4e: 7f:86:cc:19:e2:7c:85:4e:5c:ae:91:3b:bb:b7:9e: 27:96:b3:aa:2f:6d:18:aa:47:8d:1b:6b:57:51:72: 9e:c1:1a:03:80:e5:2c:33:56:b0:e7:d9:17:29:99: 97:6d:4f:14:cf:84:4f:4a:3f:57:5a:0c:45:4e:b5: 81:02:e3:8f:0a:11:ea:02:4b:c8:33:f8:20:2b:87: 93:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2A:74:82:64:3D:E7:12:67:DA:C1:B1:B7:6E:CA:F2:E0:E9:37:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/33330f62-f621-30ef-aec0-b2d8fe0dc591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl X509v3 Authority Key Identifier: keyid:67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer sbgp-ipAddrBlock: critical IPv4: 170.62.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:76:f9:24:2a:bb:d2:c8:41:bb:44:95:36:30:52:02:50:1b: 15:1c:aa:ca:e9:f9:7b:37:14:15:12:a9:0b:df:c2:49:bb:cd: 17:1b:e6:87:bc:6b:d6:6f:28:dd:88:ba:09:07:70:b9:e3:18: f3:8b:c2:aa:1b:26:d5:aa:3a:af:5a:96:05:91:7d:49:95:7c: d4:45:bb:0a:d5:d4:48:b4:af:8c:cd:9c:21:2d:44:14:c8:18: 15:0d:0d:9d:cb:06:a9:ac:bc:3c:80:1c:4b:4a:17:7e:fe:54: b5:85:d0:96:cf:34:34:6d:80:f6:4a:38:19:48:78:68:03:ac: 98:23:b4:ef:46:4a:48:46:d7:50:05:7c:23:58:2f:d5:04:f8: 88:66:85:02:f1:bf:03:7d:47:93:a9:39:a7:2c:ed:2b:ea:ad: 68:b5:df:32:0d:33:d8:bb:7a:5e:1d:b0:e8:67:a0:97:48:de: 9b:1e:db:87:26:77:cd:30:77:54:26:db:be:fa:cd:26:28:53: 7d:f3:88:82:bd:c4:df:5d:e6:e7:06:70:aa:a9:3a:a9:14:5c: fa:f3:1e:6f:07:06:f9:be:37:7f:80:e0:9a:97:db:40:ab:c3: 71:35:f6:fb:d8:56:4e:b9:ef:48:0a:0c:04:36:72:02:fb:74: 57:99:ee:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5gKuvOkOykRpRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE2NzFjMjMtMzI3OC00MDliLTgzN2QtN2RmZTY5NjA2 OTQwMB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk ZDc4YzAyODItMWZiZi00NTU3LTg4OWQtZTRmMWJjMTAwNTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1PU34RAMgG2OoVlYCuDi5X4jjSK5aWlt46F QIMzBWPp6no1wrtRbD5jZ9h1IKF9ff3+WMfkSIATAHZNcAz7JvLB/TAJ7XGBe+XM NQDQ3yZ1y/3OsgFi/6Xhvlgr5v7uYpg5zfQ6Jopwh7eozYrzJEuwENpQ5u6z8MSl sxRFpCojguY2grSdnvI3HgaPcgMf1y0bXqSFfg7Fvxcu1CFsHFKESXFEi0sJXRu4 bm7LMHEpfE5/hswZ4nyFTlyukTu7t54nlrOqL20YqkeNG2tXUXKewRoDgOUsM1aw 59kXKZmXbU8Uz4RPSj9XWgxFTrWBAuOPChHqAkvIM/ggK4eTkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEqdIJkPecSZ9rBsbduyvLg6TeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTY3 MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZlNjk2MDY5NDAvMzMzMzBmNjItZjYyMS0z MGVmLWFlYzAtYjJkOGZlMGRjNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzE2NzFjMjMtMzI3OC00MDliLTgz N2QtN2RmZTY5NjA2OTQwLzMxNjcxYzIzLTMyNzgtNDA5Yi04MzdkLTdkZmU2OTYw Njk0MC5jcmwwHwYDVR0jBBgwFoAUZxYj4GdaMB9RUq8/Ry/8J86NPxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMTY3MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZl Njk2MDY5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj4qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ2+SQqu9LIQbtElTYwUgJQGxUcqsrp+Xs3FBUSqQvfwkm7zRcb5oe8 a9ZvKN2IugkHcLnjGPOLwqobJtWqOq9algWRfUmVfNRFuwrV1Ei0r4zNnCEtRBTI GBUNDZ3LBqmsvDyAHEtKF37+VLWF0JbPNDRtgPZKOBlIeGgDrJgjtO9GSkhG11AF fCNYL9UE+IhmhQLxvwN9R5OpOacs7SvqrWi13zINM9i7el4dsOhnoJdI3pse24cm d80wd1Qm2776zSYoU33ziIK9xN9d5ucGcKqpOqkUXPrzHm8HBvm+N3+A4JqX20Cr w3E19vvYVk6570gKDAQ2cgL7dFeZ7p8= -----END CERTIFICATE-----Generated at Thu Nov 21 17:29:40 2024 by rpki-client on console-fra.rpki-client.org