$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a3dc9795-9236-3def-a653-ce48d2f188e3.roa File: a3dc9795-9236-3def-a653-ce48d2f188e3.roa (raw, json) Hash identifier: GSI3/jgjWCINoQab96k8dZB6VMb0HNgdnuWwiXzuKc4= Subject key identifier: 2D:F0:44:BA:46:C8:32:BB:67:4F:AF:C7:49:2C:E0:64:EB:7D:4E:BB Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F43285847A30BF952D3B4DABC40F30700 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a3dc9795-9236-3def-a653-ce48d2f188e3.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 12083 IP address blocks: 24.214.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0b:f9:52:d3:b4:da:bc:40:f3:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=bed5a982-f27f-44d3-ba5d-d7cba1d25090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:87:76:06:8c:0f:3d:7d:7a:b0:a4:39:ca:b2: 8b:0f:78:2d:f7:91:ec:95:f6:94:a0:48:ae:12:b6: d8:2a:90:02:9c:b5:a2:15:0d:49:c7:fd:b0:54:21: cf:79:e0:97:7b:52:15:27:53:d8:6d:a7:18:6b:7b: 58:d9:42:30:ff:48:11:fd:b4:97:e0:43:82:a7:df: 56:2c:50:64:d5:e8:79:86:c8:eb:04:d7:b3:84:7d: 79:da:6b:2d:76:84:28:3d:9b:66:b1:9d:e8:55:14: fb:aa:40:74:13:5f:50:d9:2a:b8:20:78:1e:bf:21: 1b:ea:60:62:74:3d:64:30:de:03:82:a1:d1:69:02: 40:2b:59:fe:99:f1:4a:4e:d2:3b:b1:84:b4:e5:8c: a8:66:cf:b1:3a:52:3c:29:12:a5:8f:c2:d9:cf:f8: 5a:75:3b:c6:6f:2b:9f:89:84:63:ef:00:5f:31:e5: b9:03:33:69:19:30:84:b4:5a:61:62:1c:ab:31:38: 0e:df:a8:d8:18:86:e8:cc:78:c7:12:9b:88:79:96: 01:43:0d:cc:2b:f6:de:f8:72:8a:b4:0a:07:1b:a3: a1:fb:7f:ad:8c:7e:02:44:4a:e0:e7:5b:8e:64:17: a3:58:e7:2e:a2:69:5f:a5:5c:0f:80:71:10:d4:3e: 9f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F0:44:BA:46:C8:32:BB:67:4F:AF:C7:49:2C:E0:64:EB:7D:4E:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a3dc9795-9236-3def-a653-ce48d2f188e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.214.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:4e:27:85:47:24:87:88:41:bb:7e:40:19:0f:cd:05:d7:32: 95:c7:e6:76:4b:a9:05:fa:c0:29:17:55:92:df:d2:5c:75:0c: 4d:f5:be:69:81:20:1e:63:48:61:92:4e:5b:08:38:02:5e:c7: 4f:e5:8a:04:67:f6:c8:5e:85:fc:ac:8a:57:52:fc:38:bd:ca: 0d:d4:44:a4:c4:bf:ae:4b:44:00:d7:a1:9f:07:b3:2b:c8:37: 81:da:54:a7:1b:1e:65:67:ad:37:0b:9d:0d:ae:3d:c1:99:1e: 0b:bf:43:ec:10:4d:c9:15:a1:3c:5b:26:31:a3:00:9a:6a:6e: 1d:af:03:02:d7:92:cf:62:35:d9:f3:49:d8:ed:83:a3:b9:60: 5e:a2:01:c9:00:c8:26:63:45:c7:e8:7a:ce:b5:15:fd:00:38: 07:77:44:f4:bd:ad:a2:fa:31:83:50:f4:26:51:e0:ea:7a:5e: 00:15:c8:9e:5a:dd:38:b1:b2:f8:8d:0c:49:c0:0a:74:6b:b5: 80:7f:29:bb:2f:07:1a:f1:eb:31:e3:5b:99:d0:f7:77:7f:1a: 31:8c:16:ba:e0:22:ef:51:ca:da:7d:de:8f:23:59:be:ae:a3: b4:a6:64:52:d9:f8:68:65:34:f6:0f:c8:ff:50:b1:21:69:f5: 6d:73:b2:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC/lS07TavEDzBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk YmVkNWE5ODItZjI3Zi00NGQzLWJhNWQtZDdjYmExZDI1MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74d2BowPPX16sKQ5yrKLD3gt95HslfaUoEiu ErbYKpACnLWiFQ1Jx/2wVCHPeeCXe1IVJ1PYbacYa3tY2UIw/0gR/bSX4EOCp99W LFBk1eh5hsjrBNezhH152mstdoQoPZtmsZ3oVRT7qkB0E19Q2Sq4IHgevyEb6mBi dD1kMN4DgqHRaQJAK1n+mfFKTtI7sYS05YyoZs+xOlI8KRKlj8LZz/hadTvGbyuf iYRj7wBfMeW5AzNpGTCEtFphYhyrMTgO36jYGIbozHjHEpuIeZYBQw3MK/be+HKK tAoHG6Oh+3+tjH4CRErg51uOZBejWOcuomlfpVwPgHEQ1D6fzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3wRLpGyDK7Z0+vx0ks4GTrfU67MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvYTNkYzk3OTUtOTIzNi0z ZGVmLWE2NTMtY2U0OGQyZjE4OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGNbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFOJ4VHJIeIQbt+QBkPzQXXMpXH5nZLqQX6wCkXVZLf0lx1DE31vmmB IB5jSGGSTlsIOAJex0/ligRn9shehfysildS/Di9yg3URKTEv65LRADXoZ8HsyvI N4HaVKcbHmVnrTcLnQ2uPcGZHgu/Q+wQTckVoTxbJjGjAJpqbh2vAwLXks9iNdnz Sdjtg6O5YF6iAckAyCZjRcfoes61Ff0AOAd3RPS9raL6MYNQ9CZR4Op6XgAVyJ5a 3TixsviNDEnACnRrtYB/KbsvBxrx6zHjW5nQ93d/GjGMFrrgIu9Rytp93o8jWb6u o7SmZFLZ+GhlNPYPyP9QsSFp9W1zsjg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:58 2024 by rpki-client on console-ams.rpki-client.org