$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa File: 7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa (raw, json) Hash identifier: Cchf7blCxlcYq3kMGUs0nBNwXTfgDm3UkISYMkcm4a8= Subject key identifier: 72:D2:B3:39:44:50:6E:F0:28:36:3D:08:F4:B9:BB:D3:21:A7:CB:F0 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847BAC6A3453DA623E6804D0260 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 398420 IP address blocks: 74.126.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a3:45:3d:a6:23:e6:80:4d:02:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=da2f8459-d6fd-4ff9-a020-eeb1213bde8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9b:54:bb:98:82:ea:23:bb:3e:32:a9:46:72: 22:e0:61:14:e0:56:87:1a:d2:f4:7c:5f:81:43:e1: 3b:f2:5f:c3:21:48:b9:54:d8:d3:05:7e:3f:c8:74: c9:77:30:dc:fd:d6:a2:9c:23:f7:1e:c5:32:a0:ab: 68:c4:56:f5:17:db:d8:24:47:9f:ef:d7:18:2c:ea: cd:49:7f:64:96:1a:e8:76:95:af:ae:8c:fe:21:f7: 1a:bb:40:05:f8:db:eb:83:b0:d9:ff:b2:ee:de:18: 16:57:c9:23:3a:fa:ef:c5:c3:a3:b3:a6:f9:01:e5: 3d:ff:f0:92:60:2b:10:94:d9:b6:4f:bd:8b:1d:ec: 25:d8:36:41:d3:f7:eb:7a:c1:26:cf:a2:5a:73:03: 0c:7d:5a:7c:bf:20:38:79:63:44:e7:e9:0d:0e:c4: 82:d6:fc:19:13:da:92:a2:55:cc:fd:e7:57:3a:ea: 2c:fe:c7:64:86:77:7f:3b:b6:15:16:5f:ac:5f:e6: 5e:9d:01:12:6e:0e:02:32:7c:24:fb:95:ad:76:ab: 12:6e:64:31:f6:6c:6d:b4:78:0e:98:d7:60:11:34: 7c:24:09:26:51:32:bb:79:80:8c:92:cb:87:4a:0f: 69:c0:15:46:2b:78:bd:43:4e:b1:46:dd:38:ee:a1: 78:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D2:B3:39:44:50:6E:F0:28:36:3D:08:F4:B9:BB:D3:21:A7:CB:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:11:0d:25:22:d8:b2:29:7d:2a:1e:2b:b6:98:5c:42:65:d4: c6:85:14:6a:ef:c0:24:49:e5:a8:8c:b7:8c:c3:b6:bb:54:99: 9c:88:2a:fe:23:55:c4:e4:a1:81:be:5f:59:61:31:76:15:5e: 06:e2:4a:e3:4c:b3:79:eb:46:d5:58:03:a1:94:64:15:60:9d: 08:e0:02:d8:09:24:d8:ca:8d:98:08:ee:d5:fe:01:bc:f1:11: d7:79:1a:4a:d5:17:a4:a4:c9:06:e5:19:b4:22:68:fe:3b:4f: 54:d9:19:e3:07:9d:a7:b1:a3:95:d1:43:9f:bd:fe:f9:32:0b: 7b:0b:3a:8e:9b:6f:43:5e:d6:7b:0c:d2:fa:a3:85:55:df:90: 35:82:13:7d:3c:5e:c2:41:8a:ab:ff:ba:ed:0d:7f:1b:62:19: f6:ef:a7:71:f5:44:ef:d2:5a:79:a9:40:d1:b8:da:84:f4:50: a2:76:bb:41:98:d1:26:14:fc:f7:92:f1:a5:b7:22:44:dc:b8: 85:86:e6:7e:05:12:77:a7:0b:2e:d8:e5:ec:ae:01:20:2d:9e: b3:f7:25:3c:a5:86:a7:32:b5:40:70:30:4a:ff:46:91:c1:32: 9b:bf:88:fe:d4:1b:69:59:8f:39:25:c2:d2:ef:2e:97:e8:8c: 97:56:76:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqNFPaYj5oBNAmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZGEyZjg0NTktZDZmZC00ZmY5LWEwMjAtZWViMTIxM2JkZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnptUu5iC6iO7PjKpRnIi4GEU4FaHGtL0fF+B Q+E78l/DIUi5VNjTBX4/yHTJdzDc/dainCP3HsUyoKtoxFb1F9vYJEef79cYLOrN SX9klhrodpWvroz+Ifcau0AF+Nvrg7DZ/7Lu3hgWV8kjOvrvxcOjs6b5AeU9//CS YCsQlNm2T72LHewl2DZB0/fresEmz6JacwMMfVp8vyA4eWNE5+kNDsSC1vwZE9qS olXM/edXOuos/sdkhnd/O7YVFl+sX+ZenQESbg4CMnwk+5WtdqsSbmQx9mxttHgO mNdgETR8JAkmUTK7eYCMksuHSg9pwBVGK3i9Q06xRt047qF4gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLSszlEUG7wKDY9CPS5u9Mhp8vwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvN2U1YmVhNjgtMDNmMS0z NjNiLWIxN2EtYWVmZWJkYzI5ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8RDSUi2LIpfSoeK7aYXEJl1MaFFGrvwCRJ5aiMt4zDtrtUmZyIKv4j VcTkoYG+X1lhMXYVXgbiSuNMs3nrRtVYA6GUZBVgnQjgAtgJJNjKjZgI7tX+Abzx Edd5GkrVF6SkyQblGbQiaP47T1TZGeMHnaexo5XRQ5+9/vkyC3sLOo6bb0Ne1nsM 0vqjhVXfkDWCE308XsJBiqv/uu0NfxtiGfbvp3H1RO/SWnmpQNG42oT0UKJ2u0GY 0SYU/PeS8aW3IkTcuIWG5n4FEnenCy7Y5eyuASAtnrP3JTylhqcytUBwMEr/RpHB Mpu/iP7UG2lZjzklwtLvLpfojJdWdss= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org