$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2b2681df-c6c5-3cf8-b2fa-c5e90358ea9a.roa File: 2b2681df-c6c5-3cf8-b2fa-c5e90358ea9a.roa (raw, json) Hash identifier: G3UQm5EvKo+BXVNeCciXV1h4bg61vv2ACs3qCdcikEA= Subject key identifier: F3:F2:47:F9:0E:29:C7:5D:ED:01:45:38:D1:39:4C:F1:C3:B5:84:CC Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847BAC6A371B9344ECC98E45F80 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2b2681df-c6c5-3cf8-b2fa-c5e90358ea9a.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 398420 IP address blocks: 74.126.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a3:71:b9:34:4e:cc:98:e4:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=aa6f843a-9e73-4f51-abaf-e81834ff4be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:43:29:e5:77:91:16:d9:ca:5a:36:98:72: 43:0f:17:77:63:f3:2e:1e:d3:11:b8:3a:a4:fa:69: 22:b7:d5:23:27:e7:07:5b:11:57:c0:99:45:e8:aa: 57:03:2d:6d:4f:bd:11:14:3f:d3:71:8b:86:ef:33: 5f:65:bb:c7:1f:35:23:30:b7:8e:42:9b:4e:60:79: 45:6b:2b:cc:de:b1:db:20:81:ff:c0:2b:6a:5d:34: 91:e7:e4:df:3b:23:6f:52:33:a1:39:e7:4c:6c:3e: 90:ee:d2:54:20:bf:b0:80:d8:80:ce:46:4e:81:ae: 53:b7:d6:57:a4:a8:f3:ee:80:c4:48:eb:86:6d:91: 97:17:dc:80:0d:9e:62:8e:88:9e:22:29:c8:c5:7e: fb:99:3f:0a:cf:1e:8c:02:70:f1:58:3d:56:de:f7: 97:48:0d:62:77:4c:17:50:77:46:60:b5:d4:57:a1: 90:95:42:da:50:e0:11:80:67:46:43:1d:5c:72:94: 45:35:8c:ef:35:f7:9c:75:75:c6:3c:52:a8:17:ac: 34:9e:88:73:43:8a:95:bc:09:2f:30:fc:25:b7:b3: d8:f1:9d:3b:c8:79:c3:99:98:a8:bb:ec:06:cf:e3: b6:00:ea:8e:e4:2a:15:83:38:a3:5e:96:3e:ff:6d: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:47:F9:0E:29:C7:5D:ED:01:45:38:D1:39:4C:F1:C3:B5:84:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2b2681df-c6c5-3cf8-b2fa-c5e90358ea9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f5:f4:77:62:ef:bf:dd:c1:6d:ff:5d:2c:29:66:1c:17:c5: 22:b8:c6:c6:35:e6:e4:ec:ea:49:9b:fd:1c:c1:ab:c9:34:e3: 0a:7d:2a:43:74:30:b0:d5:01:32:ef:d1:95:5b:87:4d:c4:42: 4c:df:32:25:e8:f6:9c:40:34:4e:08:9c:55:21:d0:0d:13:71: a5:3d:02:1d:94:c5:2f:11:83:ab:81:43:81:7b:ac:9f:3e:19: f3:88:00:09:79:89:a4:e9:bc:07:f6:d3:28:3a:37:2a:3d:b6: 21:f9:fd:5d:57:fa:11:b9:f4:15:0f:89:21:a7:be:01:14:23: ed:9b:0f:8d:5e:8e:84:0f:66:b7:ed:df:3b:3c:75:04:77:45: 74:49:4d:08:4e:cb:93:87:db:c1:67:bc:f9:16:a7:71:54:9e: df:3b:5b:59:f1:95:d0:38:cc:3a:99:01:34:6a:9e:7b:84:d5: f7:70:1a:86:4d:ca:fb:10:32:10:11:9d:e0:df:a4:b1:15:fc: 5a:6a:a6:43:82:33:9f:7f:34:be:ea:9a:f3:a2:4e:56:01:89: 5e:86:9d:04:5c:1a:2d:10:d2:a5:85:15:9e:4b:c8:3e:05:08: 43:fe:26:f9:d3:bf:a2:aa:4b:ff:b4:a6:c7:db:dd:bc:15:ca: a7:14:fc:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqNxuTROzJjkX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk YWE2Zjg0M2EtOWU3My00ZjUxLWFiYWYtZTgxODM0ZmY0YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwdDKeV3kRbZylo2mHJDDxd3Y/MuHtMRuDqk +mkit9UjJ+cHWxFXwJlF6KpXAy1tT70RFD/TcYuG7zNfZbvHHzUjMLeOQptOYHlF ayvM3rHbIIH/wCtqXTSR5+TfOyNvUjOhOedMbD6Q7tJUIL+wgNiAzkZOga5Tt9ZX pKjz7oDESOuGbZGXF9yADZ5ijoieIinIxX77mT8Kzx6MAnDxWD1W3veXSA1id0wX UHdGYLXUV6GQlULaUOARgGdGQx1ccpRFNYzvNfecdXXGPFKoF6w0nohzQ4qVvAkv MPwlt7PY8Z07yHnDmZiou+wGz+O2AOqO5CoVgzijXpY+/21QKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPyR/kOKcdd7QFFONE5TPHDtYTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMmIyNjgxZGYtYzZjNS0z Y2Y4LWIyZmEtYzVlOTAzNThlYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf19Hdi77/dwW3/XSwpZhwXxSK4xsY15uTs6kmb/RzBq8k04wp9KkN0 MLDVATLv0ZVbh03EQkzfMiXo9pxANE4InFUh0A0TcaU9Ah2UxS8Rg6uBQ4F7rJ8+ GfOIAAl5iaTpvAf20yg6Nyo9tiH5/V1X+hG59BUPiSGnvgEUI+2bD41ejoQPZrft 3zs8dQR3RXRJTQhOy5OH28FnvPkWp3FUnt87W1nxldA4zDqZATRqnnuE1fdwGoZN yvsQMhARneDfpLEV/FpqpkOCM59/NL7qmvOiTlYBiV6GnQRcGi0Q0qWFFZ5LyD4F CEP+JvnTv6KqS/+0psfb3bwVyqcU/I0= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org