$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/ac745f9c-932a-36ae-b3fa-7a7a2e9a4c5b.roa File: ac745f9c-932a-36ae-b3fa-7a7a2e9a4c5b.roa (raw, json) Hash identifier: bTS7DAks01OFCJnukcM0JRvaK/2Nwi0e2yZpgywyKYc= Subject key identifier: 15:1C:73:CF:84:79:E8:1E:AC:30:44:1D:D9:79:12:E2:5D:B9:82:E9 Certificate issuer: /CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Certificate serial: 010D0C9F432858476C9DB536BB05445422F738C0 Authority key identifier: 52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/ac745f9c-932a-36ae-b3fa-7a7a2e9a4c5b.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 6528 IP address blocks: 67.14.192.0/24 maxlen: 24 67.14.193.0/24 maxlen: 24 67.14.194.0/24 maxlen: 24 67.14.195.0/24 maxlen: 24 67.14.196.0/23 maxlen: 23 67.14.198.0/23 maxlen: 23 67.14.200.0/24 maxlen: 24 67.14.201.0/24 maxlen: 24 67.14.202.0/24 maxlen: 24 67.14.203.0/24 maxlen: 24 67.14.204.0/24 maxlen: 24 67.14.205.0/24 maxlen: 24 67.14.206.0/24 maxlen: 24 67.14.207.0/24 maxlen: 24 67.14.208.0/23 maxlen: 23 67.14.210.0/24 maxlen: 24 67.14.211.0/24 maxlen: 24 67.14.212.0/24 maxlen: 24 67.14.213.0/24 maxlen: 24 67.14.214.0/24 maxlen: 24 67.14.215.0/24 maxlen: 24 67.14.216.0/24 maxlen: 24 67.14.217.0/24 maxlen: 24 67.14.218.0/24 maxlen: 24 67.14.219.0/24 maxlen: 24 67.14.220.0/23 maxlen: 23 67.14.222.0/24 maxlen: 24 67.14.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b5:36:bb:05:44:54:22:f7:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=c71a22ca-9116-4c6f-9f71-bfd8a32a81a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:3e:9c:8a:d9:91:18:cc:d0:4a:e9:64:09: 22:b0:0f:9f:2d:d9:c0:f8:13:9f:84:51:a1:94:89: a5:4f:88:03:4d:b6:67:9b:f1:d1:d3:23:db:7c:bc: 4f:8c:e9:c9:43:c7:61:a4:7f:91:85:13:83:4e:4a: 11:12:6e:a1:27:cd:a6:2f:0f:07:66:39:cd:a5:c7: a2:de:9e:fe:ed:32:1c:58:cd:5b:92:26:7f:57:f7: 83:29:c8:b7:06:0d:3d:6e:02:2c:0f:d8:de:9b:f9: c0:ec:ca:97:c1:6e:54:29:cf:24:5c:51:b8:59:17: b1:cb:de:80:e8:61:44:8b:24:27:ca:15:c4:f2:bc: b0:75:91:17:84:e5:ba:43:66:5d:58:0e:78:6e:09: 51:bd:a9:07:f5:f0:1f:55:f7:49:9a:bd:28:b5:07: 4f:20:ee:0a:47:50:c1:d7:61:81:dd:31:10:c9:02: 87:e8:52:96:c0:7c:6f:97:08:f5:32:ad:84:33:15: a2:32:02:ec:17:d9:bd:30:bc:5d:a7:a3:e5:32:e3: 28:3e:4d:1c:d8:80:20:78:7b:f9:fe:1e:fe:1d:72: f6:a9:58:1d:b9:ed:4d:d1:2f:e0:19:e3:72:f5:f7: 80:b9:8d:90:23:3d:36:6d:28:11:7a:ec:ee:9b:29: 85:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1C:73:CF:84:79:E8:1E:AC:30:44:1D:D9:79:12:E2:5D:B9:82:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/ac745f9c-932a-36ae-b3fa-7a7a2e9a4c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl X509v3 Authority Key Identifier: keyid:52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer sbgp-ipAddrBlock: critical IPv4: 67.14.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:51:5f:c3:5a:4d:09:86:a5:1f:e7:c5:c2:e4:45:e0:00:67: fa:2c:25:a2:ca:14:44:52:be:c9:c1:e0:2c:93:a6:41:9a:9e: a8:26:bc:ac:65:e4:93:6a:1c:d2:fa:88:0e:c8:67:04:04:ac: 0b:93:42:5b:48:f8:1d:2a:13:f5:e4:65:24:e4:18:b0:93:d7: 72:4c:fb:5c:b2:5d:bf:55:a5:98:b3:b1:30:56:78:09:58:c0: fa:57:0f:0e:11:11:26:78:27:4a:f4:f0:7b:97:b8:2b:c0:18: 72:6b:0e:06:d7:d4:8e:e4:03:b5:de:48:c0:0f:c6:ef:ef:44: 9a:72:50:0b:22:2c:03:3d:1e:ab:ca:59:a3:a1:e9:10:a1:43: 26:51:88:e7:e1:b8:fd:5c:05:ae:d8:37:ff:c3:50:b3:e7:62: 07:d0:2e:d1:42:15:b4:1a:a2:f2:95:4d:d1:d4:53:57:8e:4a: 71:64:2c:e1:70:a2:68:e1:0c:bc:07:9f:9e:33:8c:55:71:1f: 05:b4:0f:cf:0d:96:20:c2:51:68:33:92:9c:81:9b:4d:8e:ed: a2:41:9c:55:b6:83:ad:81:74:71:fd:95:f2:35:62:18:ee:e8: b3:23:11:94:33:87:71:ec:ee:fc:89:f1:12:1e:9d:8d:f8:29: ba:3e:11:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnbU2uwVEVCL3OMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlY2NhNmUtZTRhZi00YTU2LTg5MWQtYzJlMzA1MWEx YmMyMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk YzcxYTIyY2EtOTExNi00YzZmLTlmNzEtYmZkOGEzMmE4MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAA+nIrZkRjM0ErpZAkisA+fLdnA+BOfhFGh lImlT4gDTbZnm/HR0yPbfLxPjOnJQ8dhpH+RhRODTkoREm6hJ82mLw8HZjnNpcei 3p7+7TIcWM1bkiZ/V/eDKci3Bg09bgIsD9jem/nA7MqXwW5UKc8kXFG4WRexy96A 6GFEiyQnyhXE8rywdZEXhOW6Q2ZdWA54bglRvakH9fAfVfdJmr0otQdPIO4KR1DB 12GB3TEQyQKH6FKWwHxvlwj1Mq2EMxWiMgLsF9m9MLxdp6PlMuMoPk0c2IAgeHv5 /h7+HXL2qVgdue1N0S/gGeNy9feAuY2QIz02bSgReuzumymFqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUcc8+EeegerDBEHdl5EuJduYLpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OGVj Y2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUzMDUxYTFiYzIvYWM3NDVmOWMtOTMyYS0z NmFlLWIzZmEtN2E3YTJlOWE0YzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNThlY2NhNmUtZTRhZi00YTU2LTg5 MWQtYzJlMzA1MWExYmMyLzU4ZWNjYTZlLWU0YWYtNGE1Ni04OTFkLWMyZTMwNTFh MWJjMi5jcmwwHwYDVR0jBBgwFoAUUuGuIUtwcT5isDYp+pRXmy2QESwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OGVjY2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUz MDUxYTFiYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQw7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClRX8NaTQmGpR/nxcLkReAAZ/osJaLKFERSvsnB4CyTpkGanqgmvKxl 5JNqHNL6iA7IZwQErAuTQltI+B0qE/XkZSTkGLCT13JM+1yyXb9VpZizsTBWeAlY wPpXDw4RESZ4J0r08HuXuCvAGHJrDgbX1I7kA7XeSMAPxu/vRJpyUAsiLAM9HqvK WaOh6RChQyZRiOfhuP1cBa7YN//DULPnYgfQLtFCFbQaovKVTdHUU1eOSnFkLOFw omjhDLwHn54zjFVxHwW0D88NliDCUWgzkpyBm02O7aJBnFW2g62BdHH9lfI1Yhju 6LMjEZQzh3Hs7vyJ8RIenY34Kbo+ESk= -----END CERTIFICATE-----Generated at Fri Nov 22 09:32:29 2024 by rpki-client on console-fra.rpki-client.org