$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa File: f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa (raw, json) Hash identifier: xW/1JkBFwDxhB4IGVCjPvAV6GmyMtfjRlFqPg8+P2hs= Subject key identifier: 75:CE:7E:FC:AA:D0:CE:39:3B:DB:94:B4:D4:94:15:CA:EA:AE:B4:D1 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584784660461330F3161A4A8F000 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa Signing time: Sat 12 Oct 2024 13:32:12 +0000 ROA not before: Sat 12 Oct 2024 13:32:12 +0000 ROA not after: Fri 10 Jan 2025 14:32:12 +0000 asID: 62563 IP address blocks: 67.220.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:66:04:61:33:0f:31:61:a4:a8:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Oct 12 13:32:12 2024 GMT Not After : Jan 10 14:32:12 2025 GMT Subject: CN=6ea1020f-12c5-4fa3-886c-a88f1b8da1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7c:c3:87:b3:ed:ac:d5:45:fc:8e:48:7d:84: fa:04:b6:29:75:2d:59:25:5b:ba:38:2a:1d:19:49: 82:cc:cb:e7:a7:77:43:a6:fd:a6:44:cb:7b:5f:07: 3b:30:3e:39:b3:80:84:92:ab:b6:d4:98:02:80:5a: b8:a0:9f:b0:d0:41:56:5b:7c:73:1a:0f:22:48:9c: e1:13:87:e5:c2:31:9b:72:73:93:60:20:8d:5f:75: c0:a4:2c:5f:66:a5:9a:54:a9:4e:a8:6f:7b:8e:f5: 25:e3:90:24:1d:45:1d:b6:59:7b:4b:2d:0d:d8:e3: 5c:60:55:c8:14:7e:a7:0c:5e:1f:d1:a0:8c:0d:e2: 52:47:72:e7:dc:cc:bc:f1:06:51:f2:5d:62:4b:6b: 04:e0:54:09:b6:12:72:7e:22:15:e1:f2:4b:2f:45: bf:2b:6f:33:23:7b:c1:c9:cb:5a:13:0e:29:36:c8: 08:0d:82:3c:f4:4d:b9:1c:6a:37:f0:06:b7:72:0f: c7:98:ce:3a:ec:4e:d8:a8:4b:3b:e7:68:07:fd:84: 2a:f3:43:c9:a0:95:77:31:90:77:f9:41:cd:9b:29: 6b:17:cc:eb:ba:d3:ab:be:6c:0c:23:2c:dd:f8:45: c0:76:84:66:0c:e8:7e:20:bc:8e:47:1e:17:80:f7: f1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CE:7E:FC:AA:D0:CE:39:3B:DB:94:B4:D4:94:15:CA:EA:AE:B4:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:33:a5:1f:2e:ef:48:69:67:70:5d:c9:2f:6c:d1:81:bb:c8: c8:9b:5a:63:37:e8:3f:cf:77:a5:8d:3e:d4:d5:e8:55:e5:3a: 24:39:b6:3b:c0:c0:57:45:64:3b:6d:09:b7:d7:53:c9:08:f0: 84:53:44:a0:26:78:6f:e8:14:5f:d8:b0:d5:0e:64:97:38:98: 5a:30:a6:12:5b:96:6f:dd:e2:15:a4:8b:19:ca:3c:ad:d8:4f: 50:c2:5e:fd:37:38:31:34:54:9f:bf:8e:eb:1e:60:cd:cf:93: 5c:b2:05:20:e9:99:e9:47:57:f2:27:f6:cd:30:20:71:c1:8f: 07:9a:ad:af:41:5b:22:a3:95:a3:9f:3e:24:ce:91:5d:77:94: fe:0b:f0:cf:ca:1e:b1:b1:00:91:c3:eb:d8:b9:84:9c:f9:68: 1e:e0:1d:00:fe:e2:81:4b:e4:df:0b:44:50:da:64:78:58:0f: bf:ce:2c:f5:3a:b5:46:64:4a:dd:7c:f5:e8:99:bf:ba:e8:bc: 12:f7:09:32:24:21:26:cd:e8:31:fc:b6:3e:0c:e0:0e:77:76: 69:c2:48:53:93:dd:bd:98:26:28:e9:e8:5a:3f:44:e8:8c:cd: 3d:4b:df:db:20:b4:e4:13:05:06:0f:bb:32:f7:0b:32:41:d0: a3:dd:07:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEZgRhMw8xYaSo8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI0MTAxMjEzMzIxMloXDTI1MDExMDE0MzIxMlowLzEtMCsGA1UEAxMk NmVhMTAyMGYtMTJjNS00ZmEzLTg4NmMtYTg4ZjFiOGRhMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3zDh7PtrNVF/I5IfYT6BLYpdS1ZJVu6OCod GUmCzMvnp3dDpv2mRMt7Xwc7MD45s4CEkqu21JgCgFq4oJ+w0EFWW3xzGg8iSJzh E4flwjGbcnOTYCCNX3XApCxfZqWaVKlOqG97jvUl45AkHUUdtll7Sy0N2ONcYFXI FH6nDF4f0aCMDeJSR3Ln3My88QZR8l1iS2sE4FQJthJyfiIV4fJLL0W/K28zI3vB yctaEw4pNsgIDYI89E25HGo38Aa3cg/HmM467E7YqEs752gH/YQq80PJoJV3MZB3 +UHNmylrF8zrutOrvmwMIyzd+EXAdoRmDOh+ILyORx4XgPfxCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXOfvyq0M45O9uUtNSUFcrqrrTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZjg1ZGNiMGEtM2Y5ZS0z YWFhLTk4MTgtZWYwY2ZmNzRiNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9xeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwzpR8u70hpZ3BdyS9s0YG7yMibWmM36D/Pd6WNPtTV6FXlOiQ5tjvA wFdFZDttCbfXU8kI8IRTRKAmeG/oFF/YsNUOZJc4mFowphJblm/d4hWkixnKPK3Y T1DCXv03ODE0VJ+/juseYM3Pk1yyBSDpmelHV/In9s0wIHHBjweara9BWyKjlaOf PiTOkV13lP4L8M/KHrGxAJHD69i5hJz5aB7gHQD+4oFL5N8LRFDaZHhYD7/OLPU6 tUZkSt189eiZv7rovBL3CTIkISbN6DH8tj4M4A53dmnCSFOT3b2YJijp6Fo/ROiM zT1L39sgtOQTBQYPuzL3CzJB0KPdB+M= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:23 2024 by rpki-client on console-ams.rpki-client.org