$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa File: b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa (raw, json) Hash identifier: 8IjMhWuzCx+9x8w5JCO4BQxOn/AFfyge1+kiIj3SV70= Subject key identifier: 20:20:30:25:AF:64:1A:D1:B9:A0:DC:37:35:EC:1F:5D:5C:13:FA:7A Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847BAC6A47225C02FE1F3D20E80 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 398420 IP address blocks: 74.126.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a4:72:25:c0:2f:e1:f3:d2:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=d28b6a0e-bf4e-422f-92bd-7ee63e996544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9c:20:47:3a:9e:49:80:63:a4:c9:00:0d:89: 8a:56:33:ed:57:91:9d:aa:3a:c8:9b:ed:b1:ed:d1: 60:12:4a:38:d8:72:d6:71:06:6f:eb:a8:4a:c7:3b: 53:75:fa:1f:97:f7:2a:a9:61:d4:71:10:68:47:b1: 95:e9:9e:66:22:13:ca:3c:46:a6:a8:44:b8:d3:c0: 4b:79:a9:40:9a:3d:5d:75:8e:9d:2f:5e:fa:01:04: 23:00:8c:ab:4b:6e:4e:d9:5b:ad:1a:11:b0:d1:bf: 4c:3b:32:f1:5c:aa:44:c9:85:b8:21:37:93:4a:3f: aa:e0:aa:06:70:18:76:68:6a:34:ce:45:ea:a2:8d: d1:5e:fb:c8:36:b3:ab:99:83:99:55:47:82:bb:c9: b4:26:fd:32:05:e8:0f:6a:77:b5:60:c0:37:cc:53: 8e:e9:21:78:29:87:68:96:59:73:ec:fa:8b:1f:f1: bd:3e:c6:43:a6:47:17:78:5a:2f:30:33:bc:9a:cb: b8:0d:6e:a2:de:e1:d1:13:48:75:52:0a:58:69:68: 3f:b4:83:51:27:e1:78:4e:43:14:51:3d:06:23:9d: f3:51:26:81:eb:1f:e7:9c:79:28:f2:05:2b:89:94: 7f:53:f4:8f:9c:2b:92:ad:31:53:2f:1e:1f:a0:38: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:20:30:25:AF:64:1A:D1:B9:A0:DC:37:35:EC:1F:5D:5C:13:FA:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:2d:a0:fd:6f:4c:d8:97:1c:9c:71:26:15:76:7f:97:22:3d: 31:40:d8:0f:01:94:09:77:22:25:83:ff:ce:9a:47:e3:28:f7: 25:19:80:64:80:7a:59:a5:25:d0:f9:35:c5:87:bb:f2:a6:be: 68:e0:8a:2e:51:80:97:51:07:13:22:5e:6f:a8:7d:b5:8b:1e: 79:b1:56:cc:28:64:ab:72:80:56:1c:5e:0b:d8:05:c1:7b:ba: 95:6a:b0:28:f9:95:05:e2:80:43:14:27:cf:46:e3:1e:f5:ec: ea:75:cd:07:f7:e2:7a:fe:d2:18:eb:cd:8f:b0:fd:69:99:a7: 5f:22:74:d4:36:8c:bf:ba:4a:eb:18:75:58:f9:91:32:7f:88: bd:19:a2:dc:c5:38:b1:05:26:9d:99:e9:b9:9d:36:14:c4:0e: 67:4e:29:f2:80:cb:8a:a0:52:73:53:c0:94:e3:6b:5a:b3:11: 0f:10:56:f7:c3:e3:0a:0f:9e:f1:05:1d:96:4c:c4:1d:48:84: bf:b0:6f:7d:b4:30:ee:f0:d4:1d:a1:75:6a:15:6b:50:fc:fd: bf:aa:3d:87:b4:aa:58:28:26:01:a4:2d:5e:57:1a:a7:27:84: 36:2d:6a:23:0b:73:30:0d:4d:9e:02:98:c7:40:0a:4e:bc:cd: 5d:a5:72:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqRyJcAv4fPSDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZDI4YjZhMGUtYmY0ZS00MjJmLTkyYmQtN2VlNjNlOTk2NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45wgRzqeSYBjpMkADYmKVjPtV5GdqjrIm+2x 7dFgEko42HLWcQZv66hKxztTdfofl/cqqWHUcRBoR7GV6Z5mIhPKPEamqES408BL ealAmj1ddY6dL176AQQjAIyrS25O2VutGhGw0b9MOzLxXKpEyYW4ITeTSj+q4KoG cBh2aGo0zkXqoo3RXvvINrOrmYOZVUeCu8m0Jv0yBegPane1YMA3zFOO6SF4KYdo lllz7PqLH/G9PsZDpkcXeFovMDO8msu4DW6i3uHRE0h1UgpYaWg/tINRJ+F4TkMU UT0GI53zUSaB6x/nnHko8gUriZR/U/SPnCuSrTFTLx4foDg8aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAgMCWvZBrRuaDcNzXsH11cE/p6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYjIzZmQwYjQtYzdjOS0z M2FmLThlYmYtMDNjYmMwMjFhZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQtoP1vTNiXHJxxJhV2f5ciPTFA2A8BlAl3IiWD/86aR+Mo9yUZgGSA elmlJdD5NcWHu/Kmvmjgii5RgJdRBxMiXm+ofbWLHnmxVswoZKtygFYcXgvYBcF7 upVqsCj5lQXigEMUJ89G4x717Op1zQf34nr+0hjrzY+w/WmZp18idNQ2jL+6SusY dVj5kTJ/iL0ZotzFOLEFJp2Z6bmdNhTEDmdOKfKAy4qgUnNTwJTja1qzEQ8QVvfD 4woPnvEFHZZMxB1IhL+wb320MO7w1B2hdWoVa1D8/b+qPYe0qlgoJgGkLV5XGqcn hDYtaiMLczANTZ4CmMdACk68zV2lcmk= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org