$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa File: 20885ce4-5a76-39c3-86d6-c90d2b265830.roa (raw, json) Hash identifier: GfmiQgQ2kGRDRXEbfx/4D8nfqMpMqOIv8uxOeI/usWk= Subject key identifier: C6:EA:18:AC:8A:63:FE:69:E8:20:7D:5C:58:15:35:CE:D9:90:F6:65 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F432858478CB6903AF7387B2E369B8100 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 394285 IP address blocks: 174.137.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:90:3a:f7:38:7b:2e:36:9b:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=d565fca7-a92e-45f8-b462-e3e1789fa39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:b0:79:e6:98:1f:d4:04:41:03:f1:a9:5f: ac:80:a2:55:1c:b1:93:c9:92:64:b0:fc:71:71:9e: 00:8d:00:32:ff:72:ae:8d:59:ba:2c:93:e5:00:29: a5:fb:3c:d8:9b:a7:9d:cf:1a:5e:df:d6:2f:89:ca: 9c:7e:b8:05:5e:45:a1:62:ca:ea:5b:94:aa:01:2f: 8d:39:bc:11:fe:58:9c:00:ef:17:7f:6c:e1:60:7a: 77:84:e9:5e:47:da:8c:ef:4e:e3:e2:7b:07:4a:d3: 9f:a6:dd:cc:a2:84:b9:d3:87:05:52:41:9b:b8:a2: c1:3d:66:f8:c5:d0:b5:2b:47:33:7a:7a:a3:38:1f: 50:68:30:be:45:55:62:da:b5:84:a0:a5:0a:01:b0: 24:5b:f5:ae:7a:66:b7:67:1b:89:a1:14:6a:f8:29: 07:0f:dd:ad:15:17:d5:aa:05:68:aa:62:9f:f6:7d: 76:35:e2:14:54:7d:53:70:75:be:b2:48:e8:37:96: 0f:bf:2a:16:7d:89:7a:21:f6:9f:45:66:bf:fb:80: 8e:27:34:b7:01:87:d1:db:47:f5:55:84:bd:95:19: 76:76:5e:19:c9:92:f9:04:3d:72:26:b9:9c:c0:6c: 35:8c:98:ba:f9:c8:1c:f3:93:53:09:0d:dd:27:14: c9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EA:18:AC:8A:63:FE:69:E8:20:7D:5C:58:15:35:CE:D9:90:F6:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f8:f3:0c:f6:be:3c:c7:d2:37:dc:03:8a:e1:f3:bc:e5:0f: 1b:51:6f:52:4d:06:5a:ab:bd:ea:61:34:7d:3f:fd:8f:0b:18: af:92:d6:9e:63:90:39:9c:b6:3f:49:df:a6:8c:c5:06:16:34: 33:cf:7e:90:3a:c8:56:a9:a4:00:fb:51:bb:df:19:f7:d5:08: a1:3a:93:54:8a:61:cf:8f:c2:86:51:a5:a5:35:21:cb:06:2b: eb:6e:26:ee:47:4b:ae:dc:19:43:ec:b4:67:f9:c4:17:25:32: a4:cc:44:b7:e7:4c:b0:96:7e:65:8f:76:53:51:38:a4:5f:1b: 27:d7:df:74:74:22:7a:06:b8:f6:c1:b2:38:2e:9a:12:e4:a4: 71:58:3a:2e:ee:0c:3e:9b:c1:91:ae:3f:5b:d9:89:e8:4c:bb: 43:c7:ac:23:ea:1d:2b:a0:50:cf:78:45:d3:af:22:cc:4e:b7: ff:26:dc:c7:20:e4:f0:d6:e6:65:0a:dc:73:2a:36:c5:84:90: 9b:c0:5b:96:60:3e:9b:01:8a:ab:22:20:ce:7c:32:82:8c:20: 67:e7:e6:83:f0:45:51:c1:39:7c:77:40:c5:0c:fe:c5:d2:fa: 84:f1:5c:ce:2c:ae:55:c8:b7:24:e2:9b:e3:62:fb:51:8b:96: c6:d9:ad:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtpA69zh7LjabgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk ZDU2NWZjYTctYTkyZS00NWY4LWI0NjItZTNlMTc4OWZhMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+uweeaYH9QEQQPxqV+sgKJVHLGTyZJksPxx cZ4AjQAy/3KujVm6LJPlACml+zzYm6edzxpe39YvicqcfrgFXkWhYsrqW5SqAS+N ObwR/licAO8Xf2zhYHp3hOleR9qM707j4nsHStOfpt3MooS504cFUkGbuKLBPWb4 xdC1K0czenqjOB9QaDC+RVVi2rWEoKUKAbAkW/Wuema3ZxuJoRRq+CkHD92tFRfV qgVoqmKf9n12NeIUVH1TcHW+skjoN5YPvyoWfYl6IfafRWa/+4COJzS3AYfR20f1 VYS9lRl2dl4ZyZL5BD1yJrmcwGw1jJi6+cgc85NTCQ3dJxTJrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbqGKyKY/5p6CB9XFgVNc7ZkPZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMjA4ODVjZTQtNWE3Ni0z OWMzLTg2ZDYtYzkwZDJiMjY1ODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArolkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH48wz2vjzH0jfcA4rh87zlDxtRb1JNBlqrvephNH0//Y8LGK+S1p5j kDmctj9J36aMxQYWNDPPfpA6yFappAD7UbvfGffVCKE6k1SKYc+PwoZRpaU1IcsG K+tuJu5HS67cGUPstGf5xBclMqTMRLfnTLCWfmWPdlNROKRfGyfX33R0InoGuPbB sjgumhLkpHFYOi7uDD6bwZGuP1vZiehMu0PHrCPqHSugUM94RdOvIsxOt/8m3Mcg 5PDW5mUK3HMqNsWEkJvAW5ZgPpsBiqsiIM58MoKMIGfn5oPwRVHBOXx3QMUM/sXS +oTxXM4srlXItyTim+Ni+1GLlsbZrfc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:34 2024 by rpki-client on console-ams.rpki-client.org