$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e78fd51-41df-3ed9-89c3-c88a21be4d84.roa File: 7e78fd51-41df-3ed9-89c3-c88a21be4d84.roa (raw, json) Hash identifier: tTdFskFLRqNwhYhHhHxkd+t9ZcAz9AkJLrmqQ068cZE= Subject key identifier: 72:99:CC:02:44:21:BD:BE:09:A3:B3:D2:3F:13:44:4F:16:5D:40:3D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858474DE60CE99378950283C96040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e78fd51-41df-3ed9-89c3-c88a21be4d84.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 22773 IP address blocks: 70.168.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e6:0c:e9:93:78:95:02:83:c9:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=5b5c1dfc-834a-47e0-a14c-7764e4bd80a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bd:4f:de:6d:f8:f3:4b:d5:a8:cd:84:25:6f: f5:9d:fb:62:18:07:af:3a:ce:00:0a:26:79:c0:19: b1:51:33:e6:11:80:84:1a:96:b6:e4:c3:53:24:fa: 97:2e:3a:f2:55:f8:ad:26:bc:c3:c9:ae:ae:6d:9e: c4:0a:eb:01:0f:03:9b:ad:c6:58:45:10:fa:c9:f1: e4:f2:c8:2f:16:f6:2f:cb:5d:35:a0:1d:f1:5f:67: 8b:c6:5b:b5:64:e2:db:67:e3:57:b0:dc:3c:7e:37: 49:b0:8f:8c:4d:b9:50:db:83:3a:ea:3b:ba:52:de: da:4a:b3:25:b2:47:22:0e:91:74:a7:6d:2d:fb:9b: e5:88:35:e3:1a:33:4f:2b:60:c7:43:e1:74:c1:c5: a0:6d:b3:25:2e:c6:4c:54:e1:c8:32:4d:24:f7:78: f8:45:b6:8c:f5:ad:d6:a7:7f:79:ac:2b:ca:ff:de: 35:53:4d:5c:61:33:a3:e0:70:be:57:11:ce:ea:c3: 3c:53:db:54:3b:55:62:23:27:52:5e:84:56:de:59: c7:d9:e9:e4:d0:2b:b1:84:21:68:ae:60:67:1a:e2: 42:60:4c:35:ae:af:c8:17:44:8b:7a:74:35:b2:da: 47:d5:c0:04:9e:1a:fe:c2:27:53:65:1a:bc:79:56: 65:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:99:CC:02:44:21:BD:BE:09:A3:B3:D2:3F:13:44:4F:16:5D:40:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e78fd51-41df-3ed9-89c3-c88a21be4d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.168.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:2e:78:f0:b1:7a:2a:36:dd:95:68:94:7a:a1:c9:5b:ed:b4: 07:ef:e4:6f:23:f1:f2:ca:b0:23:65:6f:f2:ab:2c:c2:d9:f5: d0:d7:d4:40:d0:80:b5:43:84:da:fa:cd:fa:c7:2d:c7:a8:09: 0c:be:85:c1:76:5f:44:bd:23:1c:34:18:2b:8a:d4:d1:68:03: b7:92:4b:04:28:43:2a:f4:30:95:95:72:9c:c3:bd:6a:c0:8d: ce:fc:10:cc:b8:5c:66:b3:33:28:6b:f1:8d:e3:e3:f9:ec:fa: a6:5c:a8:1e:9a:bd:73:00:64:14:f4:e5:96:f8:fe:31:af:b3: 22:bc:f3:2b:cd:c7:e1:74:1c:6e:6f:22:ab:a0:46:0d:ad:ef: 57:22:db:77:5e:d7:7e:35:84:94:83:06:a0:70:a0:89:6f:d2: 01:9c:87:d4:63:a0:90:67:f0:93:c7:08:db:49:4e:f1:1f:48: 25:72:e6:50:16:b3:81:b2:c9:b9:ed:fe:0f:0e:d3:f3:9a:8f: f3:c8:41:93:5f:b5:0e:e6:cb:62:2a:31:88:d6:d1:98:f1:1e: e7:5d:06:4b:d3:e1:32:c6:ec:ac:fc:1a:b3:99:37:c7:59:1d: fc:7d:c3:e2:f6:49:7e:39:df:9d:dc:d4:41:ad:57:a0:d6:f7: 9a:20:92:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5gzpk3iVAoPJYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk NWI1YzFkZmMtODM0YS00N2UwLWExNGMtNzc2NGU0YmQ4MGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL1P3m3480vVqM2EJW/1nftiGAevOs4ACiZ5 wBmxUTPmEYCEGpa25MNTJPqXLjryVfitJrzDya6ubZ7ECusBDwObrcZYRRD6yfHk 8sgvFvYvy101oB3xX2eLxlu1ZOLbZ+NXsNw8fjdJsI+MTblQ24M66ju6Ut7aSrMl skciDpF0p20t+5vliDXjGjNPK2DHQ+F0wcWgbbMlLsZMVOHIMk0k93j4RbaM9a3W p395rCvK/941U01cYTOj4HC+VxHO6sM8U9tUO1ViIydSXoRW3lnH2enk0CuxhCFo rmBnGuJCYEw1rq/IF0SLenQ1stpH1cAEnhr+widTZRq8eVZlSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKZzAJEIb2+CaOz0j8TRE8WXUA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2U3OGZkNTEtNDFkZi0z ZWQ5LTg5YzMtYzg4YTIxYmU0ZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqhNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEuePCxeio23ZVolHqhyVvttAfv5G8j8fLKsCNlb/KrLMLZ9dDX1EDQ gLVDhNr6zfrHLceoCQy+hcF2X0S9Ixw0GCuK1NFoA7eSSwQoQyr0MJWVcpzDvWrA jc78EMy4XGazMyhr8Y3j4/ns+qZcqB6avXMAZBT05Zb4/jGvsyK88yvNx+F0HG5v IqugRg2t71ci23de1341hJSDBqBwoIlv0gGch9RjoJBn8JPHCNtJTvEfSCVy5lAW s4Gyybnt/g8O0/Oaj/PIQZNftQ7my2IqMYjW0ZjxHuddBkvT4TLG7Kz8GrOZN8dZ Hfx9w+L2SX45353c1EGtV6DW95ogklQ= -----END CERTIFICATE-----Generated at Sun Nov 24 21:47:43 2024 by rpki-client on console-ams.rpki-client.org