$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/f9e93ac4-55c4-3f6f-b80e-21f6b8bfcc42.roa File: f9e93ac4-55c4-3f6f-b80e-21f6b8bfcc42.roa (raw, json) Hash identifier: FqxthoCKhknh5VLkkksktCpAd/cFK0APMA85g9ul3ZU= Subject key identifier: BE:59:2D:79:90:92:1E:D4:02:86:BA:E5:2B:1B:5D:E5:40:0C:3B:3D Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285847C0B5A5AC8EB4D1EFD7296D00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/f9e93ac4-55c4-3f6f-b80e-21f6b8bfcc42.roa Signing time: Sun 03 Nov 2024 04:01:09 +0000 ROA not before: Sun 03 Nov 2024 04:01:09 +0000 ROA not after: Sat 01 Feb 2025 05:01:09 +0000 asID: 18779 IP address blocks: 96.43.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c0:b5:a5:ac:8e:b4:d1:ef:d7:29:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Nov 3 04:01:09 2024 GMT Not After : Feb 1 05:01:09 2025 GMT Subject: CN=8c71fad3-b887-4f70-a8be-39bb24ca6dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:0e:fe:82:0d:2d:23:9f:3b:1a:81:34:f0: 43:0f:3b:69:f9:a7:7d:b1:5a:b0:f8:d2:ab:89:d0: cc:51:83:22:fc:1f:ac:53:92:5c:83:88:5d:7c:2e: 07:68:92:26:c7:50:e3:48:05:f0:58:31:8b:ed:6b: 73:c8:2f:5f:93:11:2f:9e:37:89:32:a9:64:f8:62: 3c:6f:6a:01:fc:bc:25:a5:a0:41:81:a7:6a:f1:be: 64:f5:c8:43:e3:45:33:02:86:cc:7a:ed:af:03:51: 94:98:35:21:6d:99:ba:57:f3:fa:bd:91:25:8d:d3: 7d:6e:7e:33:3c:a8:75:89:5e:89:24:aa:ba:fe:48: 0e:d1:3e:14:b0:52:db:d8:ef:b8:c9:8a:8a:d0:c6: 04:6b:1f:f0:9d:3d:d4:b1:be:07:7d:bb:a7:8c:8a: 6e:9d:46:42:40:f8:c8:00:89:f5:36:8d:1e:24:9d: f9:36:0e:15:29:b4:1e:0c:fc:55:d4:a1:81:2c:7d: 08:bc:c4:2a:b8:08:d4:36:c6:cf:7c:3a:da:d3:2a: 0e:40:0f:8c:3d:8a:cb:7a:5d:3c:4a:55:d2:d3:33: e7:a6:8f:6d:9c:08:21:ff:5f:42:42:c4:07:0f:8e: 7d:a8:9b:e7:94:3c:08:9f:e5:e4:da:ec:dd:b9:35: b5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:59:2D:79:90:92:1E:D4:02:86:BA:E5:2B:1B:5D:E5:40:0C:3B:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/f9e93ac4-55c4-3f6f-b80e-21f6b8bfcc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:28:e9:90:77:d1:68:45:52:dd:79:1f:23:a7:0a:aa:c9:02: 1b:fa:94:4a:12:a5:05:b9:9c:d8:ae:d6:ae:1a:ec:01:f0:94: be:8d:03:6e:7b:c6:7a:f0:6b:e3:8b:e8:2c:76:82:c3:6c:41: 45:06:f5:be:1a:d7:fc:af:53:fa:bb:0d:1a:82:40:fb:01:d6: 1f:b9:6e:bc:f2:d1:b3:b1:63:35:bc:0a:26:46:18:5e:94:52: a0:c4:6b:23:27:55:e5:e2:b1:f2:c7:32:f9:cf:1a:e6:25:b5: e9:09:0c:06:bc:37:13:fa:80:f2:be:17:98:26:dd:e3:31:05: 37:ef:c0:c4:7d:a6:f4:15:15:eb:00:86:7b:21:5b:da:79:94: b1:94:9a:d1:c0:83:38:7d:57:85:23:27:98:ad:b7:75:60:73: 1e:b6:48:d7:2b:3d:f6:c8:a4:b5:dc:c0:f3:b8:c6:99:88:75: 22:5e:02:13:21:e1:0d:e3:a8:d6:0c:57:c2:62:36:3b:c2:19: 57:05:c6:b4:e3:e5:d9:c1:a5:4c:30:54:3c:4f:ae:c4:f4:7f: 61:ad:c6:16:8d:48:8e:6e:11:ef:56:fa:0d:4d:44:85:ec:27: e4:ba:f3:19:ab:2f:1b:a3:a8:f8:15:d8:8b:57:59:ea:27:91: 7b:c6:08:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfAtaWsjrTR79cpbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI0MTEwMzA0MDEwOVoXDTI1MDIwMTA1MDEwOVowLzEtMCsGA1UEAxMk OGM3MWZhZDMtYjg4Ny00ZjcwLWE4YmUtMzliYjI0Y2E2ZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzAO/oINLSOfOxqBNPBDDztp+ad9sVqw+NKr idDMUYMi/B+sU5Jcg4hdfC4HaJImx1DjSAXwWDGL7WtzyC9fkxEvnjeJMqlk+GI8 b2oB/LwlpaBBgadq8b5k9chD40UzAobMeu2vA1GUmDUhbZm6V/P6vZEljdN9bn4z PKh1iV6JJKq6/kgO0T4UsFLb2O+4yYqK0MYEax/wnT3Usb4HfbunjIpunUZCQPjI AIn1No0eJJ35Ng4VKbQeDPxV1KGBLH0IvMQquAjUNsbPfDra0yoOQA+MPYrLel08 SlXS0zPnpo9tnAgh/19CQsQHD459qJvnlDwIn+Xk2uzduTW1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5ZLXmQkh7UAoa65SsbXeVADDs9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZjllOTNhYzQtNTVjNC0z ZjZmLWI4MGUtMjFmNmI4YmZjYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMo6ZB30WhFUt15HyOnCqrJAhv6lEoSpQW5nNiu1q4a7AHwlL6NA257 xnrwa+OL6Cx2gsNsQUUG9b4a1/yvU/q7DRqCQPsB1h+5brzy0bOxYzW8CiZGGF6U UqDEayMnVeXisfLHMvnPGuYltekJDAa8NxP6gPK+F5gm3eMxBTfvwMR9pvQVFesA hnshW9p5lLGUmtHAgzh9V4UjJ5itt3Vgcx62SNcrPfbIpLXcwPO4xpmIdSJeAhMh 4Q3jqNYMV8JiNjvCGVcFxrTj5dnBpUwwVDxPrsT0f2GtxhaNSI5uEe9W+g1NRIXs J+S68xmrLxujqPgV2ItXWeonkXvGCEc= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:18 2024 by rpki-client on console-ams.rpki-client.org