$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa File: 7942817f-a176-37e5-8911-6f29c62a1537.roa (raw, json) Hash identifier: hDSczQO0tKBOsW0X1ng7J5ui9OAS04U8v7GRdmaBtmo= Subject key identifier: 22:AA:0C:D1:FF:82:B7:30:5E:77:6B:B8:71:64:84:47:1A:43:69:27 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584789EBFC6C953360CDF9876300 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa Signing time: Mon 14 Oct 2024 13:00:47 +0000 ROA not before: Mon 14 Oct 2024 13:00:47 +0000 ROA not after: Sun 12 Jan 2025 14:00:47 +0000 asID: 393885 IP address blocks: 64.71.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:89:eb:fc:6c:95:33:60:cd:f9:87:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Oct 14 13:00:47 2024 GMT Not After : Jan 12 14:00:47 2025 GMT Subject: CN=e4322a90-469c-4da4-953c-59d261c41617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:44:14:8c:01:3e:94:7a:b5:d9:c3:3a:5a:bd: c3:a2:a9:10:25:d1:17:f5:64:e9:69:99:52:e3:0c: d2:69:51:a3:02:39:bd:b9:7d:96:da:13:c1:31:f1: 0c:39:b0:f2:5e:3e:e7:63:6f:f8:50:8b:1c:b6:97: 6e:96:16:1f:83:b6:aa:89:04:d6:9b:89:c1:d4:b2: 70:b9:5c:be:f9:aa:5c:4f:12:7e:96:36:53:31:ca: 8e:c8:45:14:80:33:da:e7:09:65:e5:e8:50:96:ee: 92:45:c9:d5:4e:b8:7d:0c:da:9a:ab:07:f8:c2:db: cb:92:f9:a8:5e:da:7d:b6:b5:ae:16:ef:a5:93:bf: c6:e7:cd:2e:c8:86:b5:4a:fc:43:e7:6d:3b:53:97: 88:18:04:eb:b4:a0:c9:cd:60:46:18:b5:41:ba:f2: ba:61:1e:a2:32:5d:b6:c3:c6:1f:f3:89:cc:dd:c9: 70:5d:9b:f9:0d:0d:5a:ae:d8:1a:ca:89:b5:b3:c2: a8:7e:9e:39:fb:83:57:59:2a:2d:90:25:d1:be:d9: 67:08:14:e0:8a:1d:a1:2a:36:da:0b:4c:cb:b0:47: de:9d:e2:4e:25:be:25:41:f6:14:91:0d:89:84:59: d6:9e:4a:08:db:36:9e:8b:4f:bc:24:77:87:3c:91: fb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AA:0C:D1:FF:82:B7:30:5E:77:6B:B8:71:64:84:47:1A:43:69:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv4: 64.71.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:90:ff:5b:d1:66:86:a0:71:00:8d:72:30:24:3f:d0:dd:8f: 38:43:83:2a:95:aa:bc:90:cb:50:6b:df:07:c8:60:8f:0a:c5: 5e:26:6f:c6:84:f7:68:c9:e9:a7:d8:d4:f9:d6:3f:d2:db:b9: c4:95:5f:8b:53:cc:3b:39:01:40:d6:ef:94:12:7c:c1:aa:2c: c8:bd:41:23:81:20:2e:d4:96:e2:32:ab:e2:fa:54:f2:67:59: 88:76:aa:72:07:98:05:07:79:ec:da:14:7b:7c:e1:e4:c4:d5: b1:24:b8:c4:f9:63:81:db:13:44:04:74:f9:eb:da:5b:06:9c: 81:98:93:e1:2f:fa:37:93:1c:9f:38:21:6b:09:79:d1:95:d5: f9:95:76:34:63:e6:ac:55:4b:ad:28:6e:b0:d8:6a:7a:6a:a6: 37:36:2c:94:97:10:da:74:77:f5:a3:0f:d6:ad:45:21:dd:1e: ce:71:9d:53:45:d2:7d:35:6c:70:d2:48:a4:a0:5a:93:e0:eb: 5e:5a:01:99:c8:78:81:fa:11:03:6b:7b:4c:ca:0d:9b:1e:3b: 31:5f:70:9a:e6:74:3f:d0:50:97:ef:df:f5:03:2e:85:a8:b1: 25:d0:5e:ce:c5:7f:99:f7:6c:9a:6c:01:08:8e:6c:95:ee:b3: 9c:e9:21:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeJ6/xslTNgzfmHYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk ZTQzMjJhOTAtNDY5Yy00ZGE0LTk1M2MtNTlkMjYxYzQxNjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0QUjAE+lHq12cM6Wr3DoqkQJdEX9WTpaZlS 4wzSaVGjAjm9uX2W2hPBMfEMObDyXj7nY2/4UIsctpdulhYfg7aqiQTWm4nB1LJw uVy++apcTxJ+ljZTMcqOyEUUgDPa5wll5ehQlu6SRcnVTrh9DNqaqwf4wtvLkvmo Xtp9trWuFu+lk7/G580uyIa1SvxD5207U5eIGATrtKDJzWBGGLVBuvK6YR6iMl22 w8Yf84nM3clwXZv5DQ1artgayom1s8Kofp45+4NXWSotkCXRvtlnCBTgih2hKjba C0zLsEfeneJOJb4lQfYUkQ2JhFnWnkoI2zaei0+8JHeHPJH7NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKqDNH/grcwXndruHFkhEcaQ2knMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvNzk0MjgxN2YtYTE3Ni0z N2U1LTg5MTEtNmYyOWM2MmExNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQEfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyQ/1vRZoagcQCNcjAkP9DdjzhDgyqVqryQy1Br3wfIYI8KxV4mb8aE 92jJ6afY1PnWP9LbucSVX4tTzDs5AUDW75QSfMGqLMi9QSOBIC7UluIyq+L6VPJn WYh2qnIHmAUHeezaFHt84eTE1bEkuMT5Y4HbE0QEdPnr2lsGnIGYk+Ev+jeTHJ84 IWsJedGV1fmVdjRj5qxVS60obrDYanpqpjc2LJSXENp0d/WjD9atRSHdHs5xnVNF 0n01bHDSSKSgWpPg615aAZnIeIH6EQNre0zKDZseOzFfcJrmdD/QUJfv3/UDLoWo sSXQXs7Ff5n3bJpsAQiObJXus5zpIVA= -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org