$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa File: 255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa (raw, json) Hash identifier: ue+XL7JopeoOw8l7z7lxb2/1xXAF3D2ICvGTObFf1MY= Subject key identifier: B2:0C:BF:14:F2:C4:E8:91:50:48:0F:3A:9E:9C:E6:30:1C:40:A4:B6 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F43285847CFD4CB26C008408B3F6A83E0 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa Signing time: Fri 08 Nov 2024 14:00:39 +0000 ROA not before: Fri 08 Nov 2024 14:00:39 +0000 ROA not after: Thu 06 Feb 2025 14:00:39 +0000 asID: 396185 IP address blocks: 74.127.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:d4:cb:26:c0:08:40:8b:3f:6a:83:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Nov 8 14:00:39 2024 GMT Not After : Feb 6 14:00:39 2025 GMT Subject: CN=a75b468e-ec1a-4b68-850b-7b78fe33a47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:d1:e1:6e:e7:d8:dd:a0:96:9d:d6:b2:44: 76:50:b6:28:75:48:ea:7a:99:81:16:1d:1e:b0:4f: 34:3a:d2:d6:88:37:42:40:bf:30:80:f7:58:79:dc: fe:82:ed:f2:73:d9:e8:43:52:09:bc:1c:eb:8c:05: 53:84:20:4c:ec:5f:d0:49:0e:71:70:80:c0:41:bc: 1e:c7:48:0c:89:ae:26:3e:be:59:57:01:c2:59:72: a7:9f:18:be:0a:99:2e:84:c7:b2:3c:4c:08:c8:fe: cc:90:ce:23:80:bb:78:9c:ef:1a:de:7b:76:cc:93: b7:2b:1c:e6:fa:63:69:85:4d:c2:80:6c:c7:35:3c: 73:58:1d:3d:65:c1:b4:be:28:6f:b9:94:67:a9:0b: 1e:fe:6d:fe:f8:29:a8:49:7f:53:71:32:50:3e:99: ea:2c:db:13:ca:cf:9b:b6:a2:44:f3:c4:5e:3e:b5: ef:29:8c:71:b1:d8:16:09:9b:1b:41:a2:d0:86:30: 1d:15:31:8b:c0:f0:d0:bd:98:46:94:f2:62:a5:d9: 42:92:2a:51:04:38:0d:39:e8:46:30:ad:a6:83:89: 9e:b6:71:35:93:e4:1d:46:35:1f:5c:a0:e3:ae:82: 3d:6f:db:57:ca:b2:d1:7d:b7:cd:18:5b:c2:38:29: 0b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0C:BF:14:F2:C4:E8:91:50:48:0F:3A:9E:9C:E6:30:1C:40:A4:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 74.127.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:85:ee:31:07:38:7b:8d:90:9b:f8:55:a2:b3:87:5b:56:de: 92:71:55:bf:c4:43:b4:fa:2a:ac:41:f5:f7:93:2a:b2:46:91: c8:ee:27:f4:e6:ac:28:06:be:b2:48:99:d9:d6:a8:18:52:f9: c8:04:d2:25:5d:b3:89:81:4e:8c:7b:8f:fe:f9:f2:d7:4a:ac: d0:34:27:2e:93:5f:7f:44:8e:b1:47:47:25:b5:a4:64:e4:0b: b7:83:16:56:00:be:f0:0d:3e:a8:15:43:3f:01:c7:05:23:05: a4:46:7f:65:fb:e5:19:73:9e:b3:c1:96:7c:70:71:f6:a5:04: d7:40:70:41:84:a7:93:f4:55:09:21:63:c5:64:f2:7d:f5:b8: ae:b7:13:e0:f8:0a:c5:31:3e:7f:96:ea:9a:c0:6d:a8:23:62: b3:3f:70:da:43:b2:0b:b7:66:51:16:70:49:a3:20:c3:cd:89: b0:e5:fd:57:97:56:58:80:49:fe:bb:10:6d:29:07:a6:83:8a: 98:df:f6:ea:52:09:64:6d:49:82:74:96:cd:93:0a:a1:03:4a: 78:e7:70:66:bd:df:e6:6a:e3:89:00:25:eb:44:9c:25:8c:10: 07:80:9a:d4:a7:fb:cf:d0:13:fa:19:38:c8:e1:64:fc:82:9d: 59:08:ae:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1MsmwAhAiz9qg+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk YTc1YjQ2OGUtZWMxYS00YjY4LTg1MGItN2I3OGZlMzNhNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMDR4W7n2N2glp3WskR2ULYodUjqepmBFh0e sE80OtLWiDdCQL8wgPdYedz+gu3yc9noQ1IJvBzrjAVThCBM7F/QSQ5xcIDAQbwe x0gMia4mPr5ZVwHCWXKnnxi+CpkuhMeyPEwIyP7MkM4jgLt4nO8a3nt2zJO3Kxzm +mNphU3CgGzHNTxzWB09ZcG0vihvuZRnqQse/m3++CmoSX9TcTJQPpnqLNsTys+b tqJE88RePrXvKYxxsdgWCZsbQaLQhjAdFTGLwPDQvZhGlPJipdlCkipRBDgNOehG MK2mg4metnE1k+QdRjUfXKDjroI9b9tXyrLRfbfNGFvCOCkLvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIMvxTyxOiRUEgPOp6c5jAcQKS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMjU1ZmIzZTItNjZiMS0z YzJhLTgwZDgtZjg4MDYzNDhjNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn9ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiF7jEHOHuNkJv4VaKzh1tW3pJxVb/EQ7T6KqxB9feTKrJGkcjuJ/Tm rCgGvrJImdnWqBhS+cgE0iVds4mBTox7j/758tdKrNA0Jy6TX39EjrFHRyW1pGTk C7eDFlYAvvANPqgVQz8BxwUjBaRGf2X75RlznrPBlnxwcfalBNdAcEGEp5P0VQkh Y8Vk8n31uK63E+D4CsUxPn+W6prAbagjYrM/cNpDsgu3ZlEWcEmjIMPNibDl/VeX VliASf67EG0pB6aDipjf9upSCWRtSYJ0ls2TCqEDSnjncGa93+Zq44kAJetEnCWM EAeAmtSn+8/QE/oZOMjhZPyCnVkIrvw= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:04 2024 by rpki-client on console-ams.rpki-client.org