$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa File: eb6bc177-0801-37e2-977d-c23f6a5ca132.roa (raw, json) Hash identifier: jHzZaNjsIz5Ap61Uwvs9og3/tJuzjLTz+pvhl+89mY8= Subject key identifier: 75:29:19:E1:50:F8:BA:DF:2E:93:F8:A2:85:DF:20:8B:C0:1E:0B:21 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584776815A11E12D705DCC6CD600 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa Signing time: Mon 07 Oct 2024 14:05:58 +0000 ROA not before: Mon 07 Oct 2024 14:05:58 +0000 ROA not after: Sun 05 Jan 2025 15:05:58 +0000 asID: 398210 IP address blocks: 168.220.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:81:5a:11:e1:2d:70:5d:cc:6c:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 14:05:58 2024 GMT Not After : Jan 5 15:05:58 2025 GMT Subject: CN=179b3fa6-9e22-424c-bab7-628e071abf48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ab:21:7a:28:0c:4d:7b:88:73:ee:0f:e7:04: 32:0b:93:e1:2f:7c:2b:06:c3:69:77:c7:11:dc:46: f8:01:26:29:9b:84:c0:b7:61:fa:b9:c3:03:72:ee: bc:d9:fa:e7:b6:e9:a0:c1:95:ea:97:dc:a5:ee:53: d1:15:23:69:c2:a9:53:14:db:30:54:f5:30:62:73: 70:0c:05:a5:70:2b:81:45:31:28:d0:60:a4:d3:25: 91:ab:5c:67:c8:c2:e4:29:83:33:e3:df:d0:07:9f: f5:25:b7:fe:49:c9:7f:a6:e2:e1:b5:2d:96:bc:59: a1:e0:52:31:bd:0d:76:91:3e:ec:cd:f0:65:7f:3b: 2c:f4:61:74:5d:76:cb:ca:0e:a3:ef:7b:6a:20:76: 1a:06:7b:76:20:61:97:d0:43:d3:3c:67:9a:69:a4: eb:42:f4:b9:51:2a:7d:66:ac:bb:dd:4c:18:fc:57: ba:95:6a:af:51:10:04:a8:70:28:d5:31:48:69:f5: 6a:76:69:a2:a4:af:af:bd:64:c9:c2:ca:b9:57:b3: 12:04:6b:0f:c1:1d:bf:c3:b5:d8:e8:ff:87:55:bb: b5:18:e8:11:8c:85:09:e3:dc:cc:2f:aa:c6:4b:db: 04:2f:39:7e:5e:7b:b3:ae:72:e6:dc:b4:80:b4:2c: 8d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:29:19:E1:50:F8:BA:DF:2E:93:F8:A2:85:DF:20:8B:C0:1E:0B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:7c:e7:1f:6c:df:e6:d8:63:cf:b2:78:3e:1e:52:5f:66:69: c6:b0:04:97:c1:97:ff:09:5e:6a:7d:68:a5:d2:27:4f:36:43: 0d:4b:39:84:b2:eb:a9:96:32:ec:4d:19:c0:49:08:ec:cb:53: 25:d3:56:57:fe:f8:a8:7d:76:ce:2e:40:50:a8:32:e0:24:23: 95:89:4c:8d:1a:ea:0b:27:72:93:f5:06:fd:ea:54:96:98:ac: d9:de:e6:ee:29:88:4c:3d:a3:cf:68:08:6b:43:9e:a1:f2:65: d2:79:99:d5:14:a6:e4:e6:0e:22:b0:96:1f:22:bf:ca:2f:85: 33:ed:47:c1:0a:44:ae:24:04:21:ba:f8:d8:41:c5:83:ea:59: d1:95:58:9d:bd:03:80:af:b6:79:26:38:c1:2c:51:76:5c:61: d8:0d:50:14:b8:d1:2b:4c:86:23:2f:c6:d7:09:66:0f:af:1b: 9e:36:b2:e2:0e:38:18:b6:ab:0a:cc:6e:01:1f:66:76:68:5d: 6b:28:29:b5:8d:03:f1:59:88:c9:56:9b:8f:c8:5d:1c:af:38: bc:fa:91:ae:f2:a7:c0:92:c2:0f:93:9c:84:b1:b5:17:53:d4: b1:a3:9c:1a:29:0d:d0:59:fc:99:c5:4c:06:6f:a2:b9:84:5d: 58:81:20:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2gVoR4S1wXcxs1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzE0MDU1OFoXDTI1MDEwNTE1MDU1OFowLzEtMCsGA1UEAxMk MTc5YjNmYTYtOWUyMi00MjRjLWJhYjctNjI4ZTA3MWFiZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmasheigMTXuIc+4P5wQyC5PhL3wrBsNpd8cR 3Eb4ASYpm4TAt2H6ucMDcu682frntumgwZXql9yl7lPRFSNpwqlTFNswVPUwYnNw DAWlcCuBRTEo0GCk0yWRq1xnyMLkKYMz49/QB5/1Jbf+Scl/puLhtS2WvFmh4FIx vQ12kT7szfBlfzss9GF0XXbLyg6j73tqIHYaBnt2IGGX0EPTPGeaaaTrQvS5USp9 Zqy73UwY/Fe6lWqvURAEqHAo1TFIafVqdmmipK+vvWTJwsq5V7MSBGsPwR2/w7XY 6P+HVbu1GOgRjIUJ49zML6rGS9sELzl+XnuzrnLm3LSAtCyNwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUpGeFQ+LrfLpP4ooXfIIvAHgshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZWI2YmMxNzctMDgwMS0z N2UyLTk3N2QtYzIzZjZhNWNhMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB85x9s3+bYY8+yeD4eUl9macawBJfBl/8JXmp9aKXSJ082Qw1LOYSy 66mWMuxNGcBJCOzLUyXTVlf++Kh9ds4uQFCoMuAkI5WJTI0a6gsncpP1Bv3qVJaY rNne5u4piEw9o89oCGtDnqHyZdJ5mdUUpuTmDiKwlh8iv8ovhTPtR8EKRK4kBCG6 +NhBxYPqWdGVWJ29A4CvtnkmOMEsUXZcYdgNUBS40StMhiMvxtcJZg+vG542suIO OBi2qwrMbgEfZnZoXWsoKbWNA/FZiMlWm4/IXRyvOLz6ka7yp8CSwg+TnISxtRdT 1LGjnBopDdBZ/JnFTAZvormEXViBIIg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org