$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa File: 3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa (raw, json) Hash identifier: swYmhb6EONQmRokKDVoT+iJ2Z6SnmHr4ke4E3uIA4P4= Subject key identifier: 0F:25:0B:CD:BC:C0:3C:9A:73:C4:9A:43:C8:61:CC:B7:8D:6B:A7:69 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F43285847A30BF8703BC2A4AD1F366480 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 12083 IP address blocks: 24.214.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0b:f8:70:3b:c2:a4:ad:1f:36:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=10ec4e0b-b338-48e3-9d46-bcdc145f8964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:11:58:a8:85:0e:73:1f:53:22:22:9e:ca:33: 24:5d:02:bd:4d:82:a3:e2:c9:d4:43:6b:0e:75:78: 2a:08:d8:f3:4c:b4:69:50:09:75:d0:05:ff:9f:71: d8:85:c7:8f:17:6a:e7:90:ca:d0:f3:11:f9:02:04: 7e:e6:d0:5b:7c:ff:e3:09:d8:39:1f:53:c0:37:9a: b6:70:b0:73:46:f3:9a:11:3b:dd:45:2b:61:05:61: be:34:10:80:95:b5:21:e7:ac:4b:72:6b:29:f5:fd: 0d:49:33:53:bb:98:f5:2c:20:90:e8:0b:1a:92:72: 35:12:46:20:83:0e:8b:da:ac:15:ba:6b:0d:71:f0: ba:96:80:3b:02:22:6c:4c:e6:37:4d:57:fa:c9:ef: 6d:db:fc:6c:48:73:a2:77:6e:5c:0f:c0:00:d0:30: 44:0a:a8:36:c2:6e:83:bc:7f:d4:be:75:e2:59:85: 61:b2:6c:9f:0d:53:b1:1e:d4:8f:08:19:dc:9e:15: cc:e8:73:63:f2:69:7f:b6:03:d7:84:5b:6f:13:e1: d0:67:9f:c6:0c:51:7e:f3:a8:ed:76:04:21:24:ed: 40:2b:3f:0e:46:31:2c:37:4c:35:86:57:38:4c:3b: 31:97:66:1e:0a:d7:f7:75:21:cf:85:09:98:54:41: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:25:0B:CD:BC:C0:3C:9A:73:C4:9A:43:C8:61:CC:B7:8D:6B:A7:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.214.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:6d:4e:19:45:a2:cf:e3:29:66:42:eb:3d:83:13:61:63:55: b3:89:a5:83:3b:21:5e:a8:17:e8:1a:97:6d:45:5a:60:0c:66: 04:bc:0a:b6:c2:9b:6c:af:93:c5:2b:1e:43:64:d7:fb:17:ce: a5:e9:04:dc:7a:dc:b9:ed:f3:f8:7a:a4:ac:32:2d:b1:3f:68: 65:60:a9:f1:c2:a6:89:0e:15:f3:ce:0d:32:31:c2:a0:62:5f: 03:d2:f1:8e:c1:c3:87:36:fd:47:e2:d6:f9:a3:2c:bf:e1:6d: 5c:6e:74:0e:3c:42:e1:8a:44:86:4d:7d:eb:c2:f5:72:8e:af: 0d:c2:af:57:e7:1d:1e:67:d9:5f:42:44:a1:cb:05:27:cf:87: 90:b3:a0:3b:99:a2:2d:4f:b3:50:ba:56:54:fa:b9:90:4f:f8: 84:da:3a:8e:d8:d9:74:ed:6b:82:1b:13:a1:33:ec:c2:2e:c7: d6:9b:62:a2:17:61:fb:fc:40:c7:45:6f:3e:54:5c:84:ce:9d: 15:79:a9:66:b3:f6:dd:b8:b2:e0:b4:58:01:80:a4:1f:91:c2: 4f:69:08:b6:9c:12:31:0b:ac:40:75:38:d3:bd:3f:92:a7:a5: 81:6c:3c:6c:f0:ef:e2:c6:70:24:f7:4a:9c:76:ce:77:14:1f: aa:14:e3:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC/hwO8KkrR82ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk MTBlYzRlMGItYjMzOC00OGUzLTlkNDYtYmNkYzE0NWY4OTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixFYqIUOcx9TIiKeyjMkXQK9TYKj4snUQ2sO dXgqCNjzTLRpUAl10AX/n3HYhcePF2rnkMrQ8xH5AgR+5tBbfP/jCdg5H1PAN5q2 cLBzRvOaETvdRSthBWG+NBCAlbUh56xLcmsp9f0NSTNTu5j1LCCQ6AsaknI1EkYg gw6L2qwVumsNcfC6loA7AiJsTOY3TVf6ye9t2/xsSHOid25cD8AA0DBECqg2wm6D vH/UvnXiWYVhsmyfDVOxHtSPCBncnhXM6HNj8ml/tgPXhFtvE+HQZ5/GDFF+86jt dgQhJO1AKz8ORjEsN0w1hlc4TDsxl2YeCtf3dSHPhQmYVEGy/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8lC828wDyac8SaQ8hhzLeNa6dpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvM2Y3YWRlMmMtMmIwYy0z OTdmLThhZDEtYTZkMDliNzc0ZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGNYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFtThlFos/jKWZC6z2DE2FjVbOJpYM7IV6oF+gal21FWmAMZgS8CrbC m2yvk8UrHkNk1/sXzqXpBNx63Lnt8/h6pKwyLbE/aGVgqfHCpokOFfPODTIxwqBi XwPS8Y7Bw4c2/Ufi1vmjLL/hbVxudA48QuGKRIZNfevC9XKOrw3Cr1fnHR5n2V9C RKHLBSfPh5CzoDuZoi1Ps1C6VlT6uZBP+ITaOo7Y2XTta4IbE6Ez7MIux9abYqIX Yfv8QMdFbz5UXITOnRV5qWaz9t24suC0WAGApB+Rwk9pCLacEjELrEB1ONO9P5Kn pYFsPGzw7+LGcCT3Spx2zncUH6oU47w= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:58 2024 by rpki-client on console-ams.rpki-client.org