$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52fd0d0b-65ba-321c-8779-22e25b08722a.roa File: 52fd0d0b-65ba-321c-8779-22e25b08722a.roa (raw, json) Hash identifier: jbhAiFrfxulBSMsAN9fsQHAMO9+yNpEJ2l4rpXVlPW8= Subject key identifier: 55:A0:C8:53:0B:4C:3B:34:29:20:86:12:9D:7E:48:D9:87:FD:C2:37 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858474DE60C536D28D823E9D7EFE0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52fd0d0b-65ba-321c-8779-22e25b08722a.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 62957 IP address blocks: 70.165.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e6:0c:53:6d:28:d8:23:e9:d7:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=f3a2996f-1881-4d03-8b69-788ffd575acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:1e:9f:61:2a:70:7e:20:6c:58:56:20:39: f1:15:23:c4:d1:12:6d:f0:7c:81:e3:79:94:a3:62: 9b:c2:dc:74:8a:29:82:2b:2e:f7:7f:4a:29:bd:bb: 36:a9:23:7b:86:58:af:3c:49:50:8d:ae:6d:65:3c: b1:0c:31:81:c1:b2:8d:39:ae:15:33:05:e2:55:68: 0f:95:7f:09:f7:37:a1:cf:42:95:4b:42:de:aa:ec: 5f:5d:4b:e9:0c:e4:c8:9b:c9:fb:d0:64:b9:0d:f6: 8a:41:a8:71:53:4a:08:cc:5c:13:c5:6f:07:66:27: 22:2d:84:5f:ea:48:61:ea:76:36:ef:64:d8:eb:38: ef:ed:f3:3b:44:a1:70:f7:25:e8:6d:08:35:0e:49: fd:84:bb:54:00:f0:b8:63:35:c6:11:a6:f0:27:d2: 8a:6b:f7:b8:2d:1f:c9:67:9e:fc:90:55:86:95:a1: 7f:b4:71:99:8f:d2:31:eb:1f:ef:2d:e6:46:56:fd: ce:60:19:f2:41:57:ec:3e:73:dc:14:fb:07:cc:a6: 6f:a9:29:90:f6:b2:93:1c:0f:14:d8:be:4c:46:d2: ba:cd:d9:48:a0:be:a7:c2:60:bb:e5:99:ea:4c:6e: 5d:f2:c8:18:04:ca:36:37:7b:f1:cf:ef:85:e2:18: ad:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A0:C8:53:0B:4C:3B:34:29:20:86:12:9D:7E:48:D9:87:FD:C2:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52fd0d0b-65ba-321c-8779-22e25b08722a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:17:54:7b:2f:2f:12:dd:4d:0f:c2:64:f8:4e:23:24:b2:d4: 17:6a:31:e6:a0:e0:2b:35:a0:b9:00:fa:0d:cf:9c:58:45:48: 83:76:e9:85:00:8b:34:10:98:55:45:23:c3:34:40:73:4e:02: 4e:36:8b:bc:5c:35:4e:48:2d:eb:b8:a6:5c:95:50:13:da:5c: 7e:18:9f:bd:02:c7:42:9f:6a:8b:43:c7:9e:3b:1e:2e:7d:25: 0c:cf:2b:b2:b9:d5:b5:6f:65:f9:48:72:ac:3b:c1:5d:f3:73: bc:e8:d5:30:e5:d2:52:eb:e6:54:62:59:31:c3:54:4a:86:21: 19:c3:27:bb:18:7f:09:50:51:62:31:46:a1:dd:fc:e1:4e:38: ec:a9:bc:b9:e1:c7:e7:d4:a3:4f:0c:be:c6:dd:28:57:09:90: b3:61:e9:5d:bb:c7:03:7d:79:bd:b1:2f:03:cb:4d:36:83:ad: 5e:ac:90:da:8d:66:ba:25:26:76:bd:cd:70:00:cf:d4:03:3b: be:10:3e:a2:e5:53:47:4c:d2:0e:fd:0b:71:a6:07:ec:3e:04: d5:5f:a3:e2:da:f6:9c:04:7c:f3:1a:2e:d7:94:42:2e:0a:e5: eb:8a:9f:57:60:bd:30:63:40:d2:23:e8:18:7c:cf:82:54:d4: c6:58:97:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5gxTbSjYI+nX7+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjNhMjk5NmYtMTg4MS00ZDAzLThiNjktNzg4ZmZkNTc1YWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy0en2EqcH4gbFhWIDnxFSPE0RJt8HyB43mU o2Kbwtx0iimCKy73f0opvbs2qSN7hlivPElQja5tZTyxDDGBwbKNOa4VMwXiVWgP lX8J9zehz0KVS0LequxfXUvpDOTIm8n70GS5DfaKQahxU0oIzFwTxW8HZiciLYRf 6khh6nY272TY6zjv7fM7RKFw9yXobQg1Dkn9hLtUAPC4YzXGEabwJ9KKa/e4LR/J Z578kFWGlaF/tHGZj9Ix6x/vLeZGVv3OYBnyQVfsPnPcFPsHzKZvqSmQ9rKTHA8U 2L5MRtK6zdlIoL6nwmC75ZnqTG5d8sgYBMo2N3vxz++F4hitSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWgyFMLTDs0KSCGEp1+SNmH/cI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTJmZDBkMGItNjViYS0z MjFjLTg3NzktMjJlMjViMDg3MjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqWTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsXVHsvLxLdTQ/CZPhOIySy1BdqMeag4Cs1oLkA+g3PnFhFSIN26YUA izQQmFVFI8M0QHNOAk42i7xcNU5ILeu4plyVUBPaXH4Yn70Cx0KfaotDx547Hi59 JQzPK7K51bVvZflIcqw7wV3zc7zo1TDl0lLr5lRiWTHDVEqGIRnDJ7sYfwlQUWIx RqHd/OFOOOypvLnhx+fUo08MvsbdKFcJkLNh6V27xwN9eb2xLwPLTTaDrV6skNqN ZrolJna9zXAAz9QDO74QPqLlU0dM0g79C3GmB+w+BNVfo+La9pwEfPMaLteUQi4K 5euKn1dgvTBjQNIj6Bh8z4JU1MZYl/g= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:30 2024 by rpki-client on console-fra.rpki-client.org