$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa File: 84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa (raw, json) Hash identifier: zDY2rl2Qe9U6YVy/p+c3k7QacAnJpNPE0FQFB0pS1C8= Subject key identifier: EE:6C:72:A8:37:E3:73:70:72:C7:6F:5E:9A:17:21:98:75:3E:D9:1C Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847BAC6A3101D14C582C0F97400 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 398420 IP address blocks: 74.126.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a3:10:1d:14:c5:82:c0:f9:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=5eaee222-147d-4eed-8f38-b82b5706993b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:a3:c0:e8:14:43:d6:ac:bc:ef:e3:9b:b5: 7a:be:53:ce:60:5b:82:a8:03:85:9c:0c:6f:95:80: a0:f4:47:f3:8e:52:e9:84:a7:a0:d6:09:49:7f:d7: 7e:98:b4:fb:ce:21:e3:ab:2e:10:77:90:7d:4f:4b: 55:bb:96:cd:4a:e1:c6:70:12:85:ce:5f:f2:67:53: 53:8c:c5:10:be:f7:5c:ff:74:93:6a:b1:a2:aa:c5: 26:49:b0:82:c5:13:f4:e0:b7:b7:9b:9d:46:7b:80: 12:14:de:66:66:c7:55:65:60:e6:2a:cb:48:7e:77: b7:05:2f:b1:72:87:d6:63:4a:43:c9:4c:cc:39:fb: bc:86:68:ab:5a:71:da:bb:53:c6:6b:6f:08:59:dc: a5:8b:90:51:0c:58:d7:7b:b1:0b:50:d8:b4:11:04: 83:96:d8:19:38:1c:fc:3b:b7:f2:53:fd:04:f5:a7: 89:f1:ad:cd:73:7a:a4:92:c0:6d:9a:2b:4d:90:60: 7b:32:29:37:d4:cd:9a:d6:6f:80:b3:92:77:6a:a7: c7:27:ad:d1:8e:96:ff:6f:82:81:d7:b1:38:a8:b0: de:82:54:73:9e:4f:a4:88:16:7b:33:71:ac:d6:50: c3:8d:2c:e2:ab:31:39:51:56:73:42:2e:40:b7:db: 28:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6C:72:A8:37:E3:73:70:72:C7:6F:5E:9A:17:21:98:75:3E:D9:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:13:99:1d:d2:67:0c:4f:71:3f:4f:52:4e:f4:aa:96:4d:1f: 08:16:f9:d8:04:ff:6d:55:a1:27:24:ac:df:02:95:39:3d:78: 7f:1f:8e:61:fe:d1:be:e7:fc:56:15:a3:52:c3:68:32:8e:88: 0d:c2:50:ba:c5:6b:f4:aa:10:90:64:16:80:0e:c6:83:39:8a: 55:42:74:fb:d3:cf:82:e3:ad:ee:69:cd:f9:73:b0:1d:00:5b: 37:59:d6:5f:00:38:ba:26:56:9a:bf:dc:7d:0e:a9:3d:46:2d: 5d:29:6c:6a:b0:68:90:04:cb:e1:fe:f2:6f:07:6a:a4:a7:f6: 3f:a8:21:5d:27:d6:d8:0d:63:72:fe:b3:36:36:3f:53:a2:b6: 0f:60:d7:1e:63:76:c8:af:4e:a3:a5:71:4d:e3:02:80:d3:12: 2d:69:a3:87:e5:37:6c:2d:5d:ba:2a:49:3a:35:22:d5:e2:68: fe:76:96:a8:26:3e:57:a3:74:c3:8b:4c:3f:cd:5d:63:89:0d: 73:a7:61:7d:6f:84:52:38:4c:a6:f6:8a:a6:75:10:82:49:f8: 41:b0:c4:af:bd:55:0e:d0:37:9e:73:74:0b:56:06:60:9b:55: dc:23:15:06:b3:d3:09:e1:f2:ca:0f:27:b5:88:52:6a:50:f9: 6a:49:cb:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqMQHRTFgsD5dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NWVhZWUyMjItMTQ3ZC00ZWVkLThmMzgtYjgyYjU3MDY5OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQKjwOgUQ9asvO/jm7V6vlPOYFuCqAOFnAxv lYCg9EfzjlLphKeg1glJf9d+mLT7ziHjqy4Qd5B9T0tVu5bNSuHGcBKFzl/yZ1NT jMUQvvdc/3STarGiqsUmSbCCxRP04Le3m51Ge4ASFN5mZsdVZWDmKstIfne3BS+x cofWY0pDyUzMOfu8hmirWnHau1PGa28IWdyli5BRDFjXe7ELUNi0EQSDltgZOBz8 O7fyU/0E9aeJ8a3Nc3qkksBtmitNkGB7Mik31M2a1m+As5J3aqfHJ63Rjpb/b4KB 17E4qLDeglRznk+kiBZ7M3Gs1lDDjSziqzE5UVZzQi5At9so7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5scqg343NwcsdvXpoXIZh1PtkcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvODRlNWU3ZmUtYmYxZi0z MWQ1LTkzODYtNGJjYWNmNWMyMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcTmR3SZwxPcT9PUk70qpZNHwgW+dgE/21VoSckrN8ClTk9eH8fjmH+ 0b7n/FYVo1LDaDKOiA3CULrFa/SqEJBkFoAOxoM5ilVCdPvTz4Ljre5pzflzsB0A WzdZ1l8AOLomVpq/3H0OqT1GLV0pbGqwaJAEy+H+8m8HaqSn9j+oIV0n1tgNY3L+ szY2P1Oitg9g1x5jdsivTqOlcU3jAoDTEi1po4flN2wtXboqSTo1ItXiaP52lqgm PlejdMOLTD/NXWOJDXOnYX1vhFI4TKb2iqZ1EIJJ+EGwxK+9VQ7QN55zdAtWBmCb VdwjFQaz0wnh8soPJ7WIUmpQ+WpJy9k= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org