$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f25b49c9-5690-3892-8366-7d916842509c.roa File: f25b49c9-5690-3892-8366-7d916842509c.roa (raw, json) Hash identifier: 66rwFkznjqqrp/fD6+NxLFWr3+GQiKMpoJdiyim+xQ0= Subject key identifier: DD:72:1B:E8:23:45:83:A1:2A:9F:C8:E9:0E:A3:48:37:8E:28:5E:39 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847BAC6A321789CC6CA07AA1400 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f25b49c9-5690-3892-8366-7d916842509c.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 398420 IP address blocks: 74.126.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a3:21:78:9c:c6:ca:07:aa:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=618991d5-613e-4508-b1e7-2f339afd8787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0b:55:24:12:f0:60:46:86:56:05:99:29:93: c7:82:fd:cc:fc:15:5b:97:32:ab:95:3c:28:16:97: 3f:ec:22:4b:0f:14:a3:b8:f8:52:2b:3c:7e:36:7a: 67:da:9d:95:22:25:c8:71:c8:62:22:0b:d5:16:4c: b2:a5:ab:7a:c1:d5:18:9c:46:02:3f:cd:62:8e:3a: 40:72:7f:8b:07:69:95:32:54:68:9f:12:3b:6e:b4: d8:7b:8c:36:0f:2e:f7:f8:06:a3:ba:84:a5:8e:35: 41:79:d4:4a:46:46:90:f8:d8:b8:6f:25:48:80:19: 5a:2a:da:76:7d:7e:54:0e:3d:46:13:e5:79:81:f5: 90:37:4a:32:48:90:41:27:36:22:f8:0c:1b:9f:5d: 08:84:f2:4f:60:db:65:64:bc:97:4c:d1:03:00:4d: eb:78:6b:c3:35:c5:9a:bc:07:f8:4c:e4:91:4b:67: 20:b1:e6:ce:68:75:61:e1:76:d4:ae:d3:69:18:7b: 84:83:90:e5:a8:70:c8:be:01:af:e3:00:a7:6c:91: 90:a8:12:6a:a7:0e:c4:77:1d:78:f7:3c:47:44:65: 7c:40:96:e8:82:33:ed:9f:01:57:59:80:8c:23:c5: fc:42:88:3d:5e:36:95:e8:44:e9:99:33:28:01:78: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:72:1B:E8:23:45:83:A1:2A:9F:C8:E9:0E:A3:48:37:8E:28:5E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f25b49c9-5690-3892-8366-7d916842509c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:37:8f:31:98:28:07:c0:74:fd:5f:33:39:55:bb:c8:82:6b: 09:4c:ea:ee:16:8c:b4:2e:73:7e:3b:27:8d:9a:f5:11:0d:b3: 37:28:e1:4c:b9:5e:8c:fc:f3:5e:e5:b1:4f:33:7d:25:b0:42: 43:94:87:3a:53:2c:05:cf:7d:2d:04:2d:45:6d:de:59:3e:92: 72:17:58:60:d1:6b:c5:bc:19:a2:9b:1b:7b:51:4e:93:d7:f1: 1e:bb:df:eb:68:59:54:82:b6:6d:bf:5e:09:7f:70:08:ca:df: 2d:49:fd:e4:14:2a:65:39:58:6e:92:c8:0c:52:b5:f2:d6:38: 10:f7:24:fb:7e:37:f1:d4:10:d0:ea:ee:e4:8b:c1:f6:d3:14: d0:fd:67:a6:80:52:cb:eb:b2:1b:db:3d:d6:94:1d:04:ed:db: 3f:e9:b2:d8:c6:c6:dd:e9:ca:45:83:91:9b:0b:3a:51:5e:2e: c9:dc:de:95:21:c1:40:bb:42:b9:52:5b:a6:18:75:3f:b1:b4: 05:81:ad:30:51:28:bb:fd:05:4c:60:51:ab:b2:fe:e6:17:82: 52:87:1c:17:d6:e9:8d:cc:63:3f:49:bd:e9:a4:cf:e0:2c:7d: 0f:c8:49:6c:9e:cf:2c:af:8c:a0:e1:fc:cc:b8:19:d5:16:ce: 0e:c5:b1:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqMheJzGygeqFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NjE4OTkxZDUtNjEzZS00NTA4LWIxZTctMmYzMzlhZmQ4Nzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwtVJBLwYEaGVgWZKZPHgv3M/BVblzKrlTwo Fpc/7CJLDxSjuPhSKzx+Nnpn2p2VIiXIcchiIgvVFkyypat6wdUYnEYCP81ijjpA cn+LB2mVMlRonxI7brTYe4w2Dy73+AajuoSljjVBedRKRkaQ+Ni4byVIgBlaKtp2 fX5UDj1GE+V5gfWQN0oySJBBJzYi+Awbn10IhPJPYNtlZLyXTNEDAE3reGvDNcWa vAf4TOSRS2cgsebOaHVh4XbUrtNpGHuEg5DlqHDIvgGv4wCnbJGQqBJqpw7Edx14 9zxHRGV8QJbogjPtnwFXWYCMI8X8Qog9XjaV6ETpmTMoAXjxNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1yG+gjRYOhKp/I6Q6jSDeOKF45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZjI1YjQ5YzktNTY5MC0z ODkyLTgzNjYtN2Q5MTY4NDI1MDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU3jzGYKAfAdP1fMzlVu8iCawlM6u4WjLQuc347J42a9RENszco4Uy5 Xoz8817lsU8zfSWwQkOUhzpTLAXPfS0ELUVt3lk+knIXWGDRa8W8GaKbG3tRTpPX 8R673+toWVSCtm2/Xgl/cAjK3y1J/eQUKmU5WG6SyAxStfLWOBD3JPt+N/HUENDq 7uSLwfbTFND9Z6aAUsvrshvbPdaUHQTt2z/pstjGxt3pykWDkZsLOlFeLsnc3pUh wUC7QrlSW6YYdT+xtAWBrTBRKLv9BUxgUauy/uYXglKHHBfW6Y3MYz9Jvemkz+As fQ/ISWyezyyvjKDh/My4GdUWzg7FsQw= -----END CERTIFICATE-----Generated at Mon Nov 25 15:57:17 2024 by rpki-client on console-fra.rpki-client.org