$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa File: ce7c6a93-090d-3601-ac47-5724324b5304.roa (raw, json) Hash identifier: 90udQHny9dY0KBn4g+N/cnZ2lR3adEaSIOYSz/L4+eM= Subject key identifier: A2:23:16:F9:00:CC:AD:FE:CC:F9:06:4F:39:A0:9F:C9:D8:53:1C:3F Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858477EC10A1252A9D508914BEF40 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 21949 IP address blocks: 74.213.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:0a:12:52:a9:d5:08:91:4b:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=40af902d-2645-4b4d-a263-2da29e91ae14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c8:56:0d:0d:4b:34:36:d3:e7:27:e9:48:f3: 83:b4:9f:7d:d7:b3:bb:df:65:d0:3b:94:7d:6c:f0: 2c:5b:58:c8:f1:5d:e0:00:13:2a:e7:2f:54:da:a6: 9c:ff:7f:95:40:f7:5c:17:d3:09:24:7c:69:d6:bd: 1b:bf:be:f2:d7:fc:9a:48:a8:9a:22:8b:64:9f:54: 24:4b:4f:ea:94:94:6c:58:73:a4:63:a6:5a:96:92: 70:bd:c8:2d:71:a1:4d:ae:36:90:95:5c:87:13:bb: 95:69:d7:0c:fe:d0:2e:69:62:08:22:d2:85:ab:5e: 25:5a:19:8a:c8:f6:9e:69:77:c8:ec:98:5a:3d:36: bb:d7:c8:8c:61:95:be:a1:96:13:04:f8:33:2c:f1: a7:e3:68:7f:47:55:a9:ca:fa:1a:ae:6d:47:b2:eb: b9:93:07:ab:7c:d0:86:75:0f:73:0f:87:5c:07:09: bf:b0:f1:59:01:10:21:84:f4:bd:ad:d6:2e:64:d7: 14:c1:ba:4f:aa:1f:48:e5:5c:eb:23:0f:c7:c7:42: ab:99:b1:bb:f0:f3:92:66:55:03:22:20:b9:13:45: 79:b2:ae:e4:a7:22:6d:09:8b:12:d6:f8:54:9c:f9: c6:a8:b0:08:a5:a1:bf:49:b6:4e:d4:41:71:84:32: 90:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:23:16:F9:00:CC:AD:FE:CC:F9:06:4F:39:A0:9F:C9:D8:53:1C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 74.213.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:07:9f:03:cc:71:9e:d7:b3:92:a7:cd:1a:ac:ba:9f:3c:46: e8:4a:70:40:9d:25:50:9b:e4:59:1c:e0:2c:68:5e:8d:11:de: 15:0e:e1:15:f5:b4:6b:71:a5:ac:7f:ca:dd:d8:9c:fa:13:58: 0e:bd:83:93:b3:99:04:09:4f:65:9d:2b:2f:62:50:e5:d6:77: 7a:98:39:85:3f:1a:37:34:af:41:8a:ac:1f:1f:23:6c:76:4b: e0:cd:c3:01:5e:84:a6:8b:96:36:1a:71:df:9e:8c:10:29:68: 8e:cb:5d:98:66:79:24:77:75:e6:f1:f1:d5:a7:17:04:69:d1: ce:d5:cc:49:5e:9a:e9:6a:6e:ae:38:54:1e:da:a4:fe:b3:83: 01:eb:97:3d:43:8b:de:74:2e:41:ce:f4:bf:b4:21:16:55:13: 93:eb:7e:8e:9b:bf:1e:ba:65:e4:9d:0d:7e:52:80:a1:ca:98: c1:f3:68:a8:e5:c5:92:97:73:f5:01:74:4e:94:d6:7b:a1:2f: de:f2:ce:a9:36:88:e3:a5:b4:92:69:86:08:aa:d8:c4:14:1a: bb:49:20:e9:c2:c1:7c:1a:13:81:28:54:e1:1f:5c:e4:84:0c: 8c:7e:ff:ba:2c:26:fb:91:ba:fe:55:36:79:24:41:08:87:f0: 26:96:20:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wQoSUqnVCJFL70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk NDBhZjkwMmQtMjY0NS00YjRkLWEyNjMtMmRhMjllOTFhZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMhWDQ1LNDbT5yfpSPODtJ9917O732XQO5R9 bPAsW1jI8V3gABMq5y9U2qac/3+VQPdcF9MJJHxp1r0bv77y1/yaSKiaIotkn1Qk S0/qlJRsWHOkY6ZalpJwvcgtcaFNrjaQlVyHE7uVadcM/tAuaWIIItKFq14lWhmK yPaeaXfI7JhaPTa718iMYZW+oZYTBPgzLPGn42h/R1Wpyvoarm1Hsuu5kwerfNCG dQ9zD4dcBwm/sPFZARAhhPS9rdYuZNcUwbpPqh9I5VzrIw/Hx0KrmbG78POSZlUD IiC5E0V5sq7kpyJtCYsS1vhUnPnGqLAIpaG/SbZO1EFxhDKQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIjFvkAzK3+zPkGTzmgn8nYUxw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2U3YzZhOTMtMDkwZC0z NjAxLWFjNDctNTcyNDMyNGI1MzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCStWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYHnwPMcZ7Xs5KnzRqsup88RuhKcECdJVCb5Fkc4CxoXo0R3hUO4RX1 tGtxpax/yt3YnPoTWA69g5OzmQQJT2WdKy9iUOXWd3qYOYU/Gjc0r0GKrB8fI2x2 S+DNwwFehKaLljYacd+ejBApaI7LXZhmeSR3debx8dWnFwRp0c7VzElemulqbq44 VB7apP6zgwHrlz1Di950LkHO9L+0IRZVE5Prfo6bvx66ZeSdDX5SgKHKmMHzaKjl xZKXc/UBdE6U1nuhL97yzqk2iOOltJJphgiq2MQUGrtJIOnCwXwaE4EoVOEfXOSE DIx+/7osJvuRuv5VNnkkQQiH8CaWIB4= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:23 2024 by rpki-client on console-ams.rpki-client.org