$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/148bae10-4b3a-3470-87c3-6c21a344d540.roa File: 148bae10-4b3a-3470-87c3-6c21a344d540.roa (raw, json) Hash identifier: zBErM/XYIzWu1VkrHxAa8z4uEBzUDoQyuCQsUtWbVrk= Subject key identifier: 3C:4A:69:2E:C0:6D:E9:51:AD:94:38:AA:C3:48:F8:2A:D5:41:61:16 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F43285847C905AA1A66118E9C3B774280 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/148bae10-4b3a-3470-87c3-6c21a344d540.roa Signing time: Wed 06 Nov 2024 03:28:50 +0000 ROA not before: Wed 06 Nov 2024 03:28:50 +0000 ROA not after: Tue 04 Feb 2025 03:28:50 +0000 asID: 395567 IP address blocks: 207.65.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c9:05:aa:1a:66:11:8e:9c:3b:77:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Nov 6 03:28:50 2024 GMT Not After : Feb 4 03:28:50 2025 GMT Subject: CN=5f3bb205-e474-4f96-8999-70464d3edeed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e5:50:0e:c6:20:85:57:89:c1:f7:c5:72:95: 8f:e2:5c:64:88:da:3c:61:6d:c2:7c:2c:36:d1:8c: 42:b7:f0:48:a6:28:77:cb:50:df:a2:d2:15:e6:7c: ad:85:bc:ea:22:0a:42:4b:5d:2a:4d:93:ec:13:f4: 42:b6:7a:62:3f:04:5d:e5:1e:24:30:ec:d7:3f:b5: ce:b3:7b:86:fa:d9:95:d1:db:c9:b6:68:b9:73:30: 64:0b:67:72:53:86:bf:83:8e:38:52:9e:83:5e:09: 31:10:91:37:2d:84:2a:85:56:d0:1c:18:88:22:8c: e3:a3:c5:94:c3:fe:da:c0:83:b4:77:36:56:93:bc: 4a:01:17:76:bc:3b:69:de:08:40:eb:45:eb:6b:09: ce:88:b5:df:67:ae:6f:40:0f:a5:06:e2:6a:66:1f: 36:b7:cb:c0:18:c9:37:de:01:f5:46:64:7a:6b:ce: 84:3f:21:26:99:54:ef:8d:74:6a:95:90:53:aa:b0: 08:83:b5:3d:95:61:b0:8b:d1:18:8c:d2:7f:02:9e: f3:85:56:60:eb:64:3b:fe:0e:10:93:66:67:cc:24: f6:07:fe:38:29:0e:70:75:56:79:b0:bc:70:02:12: 75:35:27:88:9d:4d:7b:da:1a:91:2a:3c:92:a0:52: 74:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4A:69:2E:C0:6D:E9:51:AD:94:38:AA:C3:48:F8:2A:D5:41:61:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/148bae10-4b3a-3470-87c3-6c21a344d540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 207.65.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cd:76:a0:ba:8b:28:58:6f:0c:a9:62:b2:5e:af:48:1d:0a: 91:6d:35:1a:2d:51:3e:bb:55:ca:90:52:54:11:d5:4c:2e:b3: b5:8b:f5:e4:31:9e:be:8c:41:13:86:de:11:6c:a0:28:30:38: cd:f6:c4:d9:e4:80:d3:82:bc:b1:7b:75:31:6e:76:37:67:4c: 53:82:04:33:52:ab:1b:12:3d:10:9a:22:89:ed:46:61:7a:29: aa:70:86:55:2c:c0:a1:0e:0a:a7:97:df:ec:7a:5c:3e:b6:84: 7d:40:29:94:5a:30:48:2d:2e:84:f6:71:90:77:cc:07:4e:f0: 3b:a3:48:dd:74:d2:f8:4d:6c:e3:70:fc:b7:9a:51:8c:1b:e3: 5b:54:a8:85:1a:7d:f5:36:02:97:8f:07:e3:6f:b6:31:4c:33: 65:aa:f1:0e:a4:40:c7:05:1a:58:a5:c5:47:f0:f9:47:94:db: 35:ba:43:9a:59:5f:4b:63:97:60:56:54:55:08:50:82:e4:99: 95:0d:f5:76:64:d7:81:3a:5b:1e:8d:ab:cf:48:92:c6:01:10: e9:10:8d:1d:de:f1:21:ae:92:8c:10:13:d6:53:a7:f2:4a:c0: 16:61:dd:76:f3:2f:a7:76:27:a7:59:98:2b:4a:16:87:9a:08: 00:8c:da:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfJBaoaZhGOnDt3QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI0MTEwNjAzMjg1MFoXDTI1MDIwNDAzMjg1MFowLzEtMCsGA1UEAxMk NWYzYmIyMDUtZTQ3NC00Zjk2LTg5OTktNzA0NjRkM2VkZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluVQDsYghVeJwffFcpWP4lxkiNo8YW3CfCw2 0YxCt/BIpih3y1DfotIV5nythbzqIgpCS10qTZPsE/RCtnpiPwRd5R4kMOzXP7XO s3uG+tmV0dvJtmi5czBkC2dyU4a/g444Up6DXgkxEJE3LYQqhVbQHBiIIozjo8WU w/7awIO0dzZWk7xKARd2vDtp3ghA60XrawnOiLXfZ65vQA+lBuJqZh82t8vAGMk3 3gH1RmR6a86EPyEmmVTvjXRqlZBTqrAIg7U9lWGwi9EYjNJ/Ap7zhVZg62Q7/g4Q k2ZnzCT2B/44KQ5wdVZ5sLxwAhJ1NSeInU172hqRKjySoFJ0CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxKaS7AbelRrZQ4qsNI+CrVQWEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMTQ4YmFlMTAtNGIzYS0z NDcwLTg3YzMtNmMyMWEzNDRkNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz0EqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3NdqC6iyhYbwypYrJer0gdCpFtNRotUT67VcqQUlQR1Uwus7WL9eQx nr6MQROG3hFsoCgwOM32xNnkgNOCvLF7dTFudjdnTFOCBDNSqxsSPRCaIontRmF6 KapwhlUswKEOCqeX3+x6XD62hH1AKZRaMEgtLoT2cZB3zAdO8DujSN100vhNbONw /LeaUYwb41tUqIUaffU2ApePB+NvtjFMM2Wq8Q6kQMcFGlilxUfw+UeU2zW6Q5pZ X0tjl2BWVFUIUILkmZUN9XZk14E6Wx6Nq89IksYBEOkQjR3e8SGukowQE9ZTp/JK wBZh3XbzL6d2J6dZmCtKFoeaCACM2oo= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:24 2024 by rpki-client on console-ams.rpki-client.org