$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa File: de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa (raw, json) Hash identifier: ONo9AYT1orploLBgS+TKSJTvboVcOkOgUW6lAadXym8= Subject key identifier: C0:A0:CD:25:B0:BF:56:2F:E8:53:41:2D:07:33:56:06:EA:5A:40:55 Certificate issuer: /CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Certificate serial: 010D0C9F43285847B5314E263810AFACBB0D6200 Authority key identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 6939 IP address blocks: 74.121.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:4e:26:38:10:af:ac:bb:0d:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=689eb3a9-a222-4027-8a9c-138377286c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:6a:3b:87:6e:8a:0b:20:d8:d5:e2:36:90: e4:3e:27:a6:64:a3:7b:ff:5c:aa:53:83:c9:ad:e2: 17:6b:69:1f:db:b3:e3:b1:af:ee:4b:78:dd:25:8a: 13:55:8a:d4:8c:1f:2e:5c:07:0e:c5:2c:11:c1:fd: 34:f9:16:b7:31:3b:84:af:01:dd:03:20:73:b8:db: 1b:59:1c:1d:54:16:ab:e7:32:74:62:1f:f4:ec:5f: 12:05:3e:a2:d6:6f:e7:98:c4:9a:ca:9f:04:f7:eb: 49:40:c4:f6:33:ce:77:6c:fc:e6:6d:b7:c1:7e:03: 47:e2:7c:8f:98:6e:7f:13:2a:d8:b6:31:4b:3f:ad: 8f:88:71:93:15:38:86:25:56:ce:7c:3f:84:5c:7d: 45:80:62:23:9e:69:7e:ea:f5:98:1c:73:3d:4b:d0: 7a:57:48:57:8d:1c:17:70:2c:fd:1c:a4:a4:4f:75: 15:74:59:18:60:24:de:1f:03:8e:da:de:f9:9c:94: 96:2f:cb:f2:05:8f:c8:c2:46:fd:b2:9d:f8:20:76: ba:db:b6:a1:fe:ca:6e:83:67:f1:4c:10:39:d0:c2: 5f:80:9f:66:b4:f9:e1:89:be:67:84:1b:46:59:c2: 26:64:fe:74:17:5f:12:67:18:07:88:c3:b9:4c:d9: 7d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A0:CD:25:B0:BF:56:2F:E8:53:41:2D:07:33:56:06:EA:5A:40:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl X509v3 Authority Key Identifier: keyid:55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer sbgp-ipAddrBlock: critical IPv4: 74.121.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4d:87:e8:b5:a1:f3:69:2e:c5:8d:ba:4b:ba:63:d5:65:0f: fe:1c:0b:53:e3:71:8d:42:ac:8b:92:83:08:2b:a4:33:09:46: 1f:86:59:13:02:55:56:7f:2b:6c:98:d5:91:32:9e:ad:03:76: 8d:d5:c9:d2:73:ad:ab:fb:4a:66:ef:f7:b7:3e:31:f6:a0:3a: 3b:09:21:e6:6f:b9:91:90:ac:e6:98:5d:4f:bc:e2:06:63:9c: d7:cd:27:7e:e6:b2:51:2d:7e:d4:f7:71:20:c2:86:f0:15:f2: f2:a7:9e:5a:a5:e7:60:22:45:22:de:32:ef:ea:da:3f:e5:44: 0a:91:97:3e:f4:a8:82:b6:55:7c:2b:fd:60:e7:2c:51:39:82: 8f:23:bb:ea:f9:ef:ad:70:e8:40:ff:2e:db:41:c7:cb:0a:f1: 3c:a8:01:3f:7f:05:7b:4d:84:dc:6b:99:39:91:c7:52:96:1f: e8:ad:2a:71:8a:43:32:fd:b3:80:af:04:3c:1c:11:af:97:bb: 59:81:ea:df:cb:92:d3:d2:e1:d4:22:e1:e4:3d:e0:db:a1:1e: 89:81:40:f8:53:24:6e:e7:04:68:84:11:f9:40:b5:05:74:7d: 96:24:b6:6e:a2:3a:8e:12:c6:a7:3f:16:12:5d:d6:ca:f0:2d: 17:b4:f4:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MU4mOBCvrLsNYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRiZTNjYTItNDliZC00NzU4LTgwNTQtNWQxNTU1YTkw YTExMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk Njg5ZWIzYTktYTIyMi00MDI3LThhOWMtMTM4Mzc3Mjg2YzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjJqO4duigsg2NXiNpDkPiemZKN7/1yqU4PJ reIXa2kf27Pjsa/uS3jdJYoTVYrUjB8uXAcOxSwRwf00+Ra3MTuErwHdAyBzuNsb WRwdVBar5zJ0Yh/07F8SBT6i1m/nmMSayp8E9+tJQMT2M853bPzmbbfBfgNH4nyP mG5/EyrYtjFLP62PiHGTFTiGJVbOfD+EXH1FgGIjnml+6vWYHHM9S9B6V0hXjRwX cCz9HKSkT3UVdFkYYCTeHwOO2t75nJSWL8vyBY/Iwkb9sp34IHa627ah/spug2fx TBA50MJfgJ9mtPnhib5nhBtGWcImZP50F18SZxgHiMO5TNl99QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCgzSWwv1Yv6FNBLQczVgbqWkBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJl M2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1NTVhOTBhMTEvZGU3MTU0YjEtNzY4YS0z YzJhLWIzY2QtZTc0NzkzYTBkOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGRiZTNjYTItNDliZC00NzU4LTgw NTQtNWQxNTU1YTkwYTExLzRkYmUzY2EyLTQ5YmQtNDc1OC04MDU0LTVkMTU1NWE5 MGExMS5jcmwwHwYDVR0jBBgwFoAUVc0hzFNA4wPm0ZYQxx0PiWBnDuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJlM2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1 NTVhOTBhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnkKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5Nh+i1ofNpLsWNuku6Y9VlD/4cC1PjcY1CrIuSgwgrpDMJRh+GWRMC VVZ/K2yY1ZEynq0Ddo3VydJzrav7Smbv97c+MfagOjsJIeZvuZGQrOaYXU+84gZj nNfNJ37mslEtftT3cSDChvAV8vKnnlql52AiRSLeMu/q2j/lRAqRlz70qIK2VXwr /WDnLFE5go8ju+r5761w6ED/LttBx8sK8TyoAT9/BXtNhNxrmTmRx1KWH+itKnGK QzL9s4CvBDwcEa+Xu1mB6t/LktPS4dQi4eQ94NuhHomBQPhTJG7nBGiEEflAtQV0 fZYktm6iOo4Sxqc/FhJd1srwLRe09Ik= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:05 2024 by rpki-client on console-ams.rpki-client.org