$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ae09800e-8132-3049-9920-56dcaa8f3da3.roa File: ae09800e-8132-3049-9920-56dcaa8f3da3.roa (raw, json) Hash identifier: G0GzvhnQkVxHbwTI4r0GNrMIFXqebFqiE/VDKQ/kfeI= Subject key identifier: 43:1C:DE:D3:6D:46:3B:7D:77:A4:11:8C:E2:09:5C:F7:D9:C3:78:FB Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285847792BAD55DE2769302CE64C60 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ae09800e-8132-3049-9920-56dcaa8f3da3.roa Signing time: Tue 08 Oct 2024 13:00:40 +0000 ROA not before: Tue 08 Oct 2024 13:00:40 +0000 ROA not after: Mon 06 Jan 2025 14:00:40 +0000 asID: 18594 IP address blocks: 74.120.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:2b:ad:55:de:27:69:30:2c:e6:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Oct 8 13:00:40 2024 GMT Not After : Jan 6 14:00:40 2025 GMT Subject: CN=a4c3bccc-1be4-4e86-bcba-782cb60550aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:d1:f4:02:79:7c:1f:83:89:a6:44:66:f6: eb:fd:33:23:aa:46:5e:56:cb:33:a4:58:5b:10:40: 53:9e:78:99:3d:ef:5e:8a:27:8d:bd:97:93:70:a1: 99:13:13:08:10:6d:e0:c1:06:17:4d:53:e6:7c:d6: 93:7f:dc:60:db:f3:94:7d:df:38:ba:17:0b:e3:eb: c7:3b:46:a1:82:e2:8a:f2:d1:b5:fe:d7:ce:7c:24: 92:9e:6f:15:9d:c2:1e:a9:4e:6d:06:1a:68:88:3c: 2d:d6:93:a5:69:44:4c:be:df:e6:f1:5d:14:8e:d8: 39:36:d7:b1:c2:d9:a5:ef:8a:5c:48:94:1e:5d:d6: eb:cc:aa:4d:2a:7b:3b:b3:16:ba:bc:c2:f8:91:01: c3:f0:a2:d6:dd:99:8c:9e:c3:a2:21:f0:3c:92:ae: be:c3:ee:5d:84:d3:3d:72:ec:d2:ad:aa:dd:b7:36: 14:2a:7c:4f:a4:e5:6c:40:1e:ec:ba:36:e6:b7:21: cc:d1:b4:6c:dd:6c:a1:79:44:2f:e2:e3:12:c4:24: 7e:ff:d6:7d:f9:72:7e:ba:29:79:84:e7:08:40:2e: 18:e3:10:df:91:d4:0d:00:42:73:36:c7:14:88:d5: 4d:e9:0d:b9:00:6c:3b:96:15:4e:8c:e4:b3:ee:64: f5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1C:DE:D3:6D:46:3B:7D:77:A4:11:8C:E2:09:5C:F7:D9:C3:78:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ae09800e-8132-3049-9920-56dcaa8f3da3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 74.120.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:4c:ff:f0:cd:e6:96:23:6b:23:73:7c:6f:5e:15:ca:70:4e: 92:17:0e:ef:8d:2e:47:67:e3:65:53:aa:d0:f7:5d:eb:b8:1a: b1:b6:99:f5:5b:2d:15:9b:e7:70:17:cc:c0:22:9b:fe:9f:04: 4a:f0:ab:83:12:a0:fa:0c:b2:10:b6:ea:52:84:63:0d:31:44: 04:2b:1e:b7:c0:18:90:67:d9:81:fe:d7:51:88:4f:a3:0d:eb: f7:35:87:8f:1d:0f:a1:a3:98:c2:a6:50:84:fd:87:56:26:13: 37:7e:af:79:a8:3d:ed:e4:49:21:d9:84:78:f2:41:79:1b:06: 2d:b4:36:fd:bf:35:e2:a4:f3:10:cf:a9:20:be:1a:b9:e1:4b: 60:38:3c:3b:ff:3d:cf:8b:0e:e8:e1:fa:32:2e:56:53:94:ec: ec:63:d0:78:a9:a9:d3:82:44:7a:69:44:85:a2:a2:e5:0b:a8: b5:02:d3:d6:6a:e1:a3:5e:5e:4b:9c:42:a2:20:77:9f:c6:9e: 23:1e:48:c4:24:10:26:97:d8:cc:01:81:43:b3:1c:15:f0:f4: 44:b1:ba:a7:0d:cc:5c:b8:5e:33:25:dc:df:e1:b0:eb:58:c1: 24:c6:c0:51:33:15:14:04:cf:db:85:e3:78:a4:03:35:b3:d0: 88:a4:cc:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5K61V3idpMCzmTGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YTRjM2JjY2MtMWJlNC00ZTg2LWJjYmEtNzgyY2I2MDU1MGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6vR9AJ5fB+DiaZEZvbr/TMjqkZeVsszpFhb EEBTnniZPe9eiieNvZeTcKGZExMIEG3gwQYXTVPmfNaTf9xg2/OUfd84uhcL4+vH O0ahguKK8tG1/tfOfCSSnm8VncIeqU5tBhpoiDwt1pOlaURMvt/m8V0Ujtg5Ntex wtml74pcSJQeXdbrzKpNKns7sxa6vML4kQHD8KLW3ZmMnsOiIfA8kq6+w+5dhNM9 cuzSrardtzYUKnxPpOVsQB7sujbmtyHM0bRs3WyheUQv4uMSxCR+/9Z9+XJ+uil5 hOcIQC4Y4xDfkdQNAEJzNscUiNVN6Q25AGw7lhVOjOSz7mT15QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMc3tNtRjt9d6QRjOIJXPfZw3j7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvYWUwOTgwMGUtODEzMi0z MDQ5LTk5MjAtNTZkY2FhOGYzZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVM//DN5pYjayNzfG9eFcpwTpIXDu+NLkdn42VTqtD3Xeu4GrG2mfVb LRWb53AXzMAim/6fBErwq4MSoPoMshC26lKEYw0xRAQrHrfAGJBn2YH+11GIT6MN 6/c1h48dD6GjmMKmUIT9h1YmEzd+r3moPe3kSSHZhHjyQXkbBi20Nv2/NeKk8xDP qSC+GrnhS2A4PDv/Pc+LDujh+jIuVlOU7Oxj0HipqdOCRHppRIWiouULqLUC09Zq 4aNeXkucQqIgd5/GniMeSMQkECaX2MwBgUOzHBXw9ESxuqcNzFy4XjMl3N/hsOtY wSTGwFEzFRQEz9uF43ikAzWz0IikzJ4= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:20 2024 by rpki-client on console-ams.rpki-client.org