$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0011c66e-a3a4-39de-b7ba-a4e9a03d5f3b.roa File: 0011c66e-a3a4-39de-b7ba-a4e9a03d5f3b.roa (raw, json) Hash identifier: SUyynEg8SEcF/RW2jYm/D3a8JjMQ8cKqQ80mZjGNy7I= Subject key identifier: AA:30:E2:AF:40:7E:B2:33:B3:7C:3F:07:4D:66:B7:8C:83:72:9D:F6 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285847C34494E0813C09B93E973C80 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0011c66e-a3a4-39de-b7ba-a4e9a03d5f3b.roa Signing time: Mon 04 Nov 2024 02:00:36 +0000 ROA not before: Mon 04 Nov 2024 02:00:36 +0000 ROA not after: Sun 02 Feb 2025 02:00:36 +0000 asID: 398478 IP address blocks: 107.148.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:44:94:e0:81:3c:09:b9:3e:97:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Nov 4 02:00:36 2024 GMT Not After : Feb 2 02:00:36 2025 GMT Subject: CN=47624e3e-3c74-4491-af97-20e82d4d4ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a6:d0:eb:89:7f:ff:78:80:d6:e9:3c:67:2e: aa:49:15:2a:51:d9:e0:5f:43:04:e0:48:45:7f:8e: 6a:e2:1b:5c:20:09:93:18:7f:f9:14:41:70:3e:94: cf:33:bc:fd:05:04:85:28:22:78:fc:95:42:93:7b: 5e:9a:20:ff:98:c8:e4:7f:36:35:fb:b2:eb:33:c5: ce:66:f7:a9:c3:6e:f6:f5:5e:ea:e9:27:1c:49:8c: f6:0f:06:60:59:6d:e8:6b:0b:db:55:52:ed:1d:95: 32:03:11:b7:bf:17:5c:de:7a:62:8b:ff:fc:50:c5: 0e:8c:9b:ab:51:15:db:de:33:14:2d:cc:f5:a1:ba: 6b:6d:8b:ca:b0:90:64:93:06:b5:0c:c0:44:5b:1d: 86:24:df:bc:67:92:ce:c8:9d:5f:0c:a6:c8:06:4a: c6:ad:de:e3:51:65:65:a5:6c:cf:b5:5c:13:f3:df: a5:e7:b7:da:3a:b6:99:99:17:a4:ff:6e:2e:44:e9: 78:45:36:34:83:53:60:df:78:40:ce:12:e1:ad:04: bf:8f:7c:62:82:2e:04:cc:55:57:33:3e:5c:55:fd: 7b:9b:60:47:ae:fd:ca:06:53:2c:50:fd:1e:f2:fc: d7:97:2d:88:c8:60:ab:7e:74:59:60:7f:fa:60:23: 61:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:30:E2:AF:40:7E:B2:33:B3:7C:3F:07:4D:66:B7:8C:83:72:9D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0011c66e-a3a4-39de-b7ba-a4e9a03d5f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:df:f9:5b:c2:ec:d4:13:dd:22:c1:44:87:5c:11:96:4c:cf: cb:7e:99:c7:1e:d6:37:ff:59:bf:f1:e3:50:bf:09:12:18:fc: aa:49:09:3a:33:72:02:c0:b2:43:35:41:4e:be:88:86:15:59: fb:89:19:1e:32:c1:7e:32:ee:ce:6b:a6:af:15:8c:14:f3:ea: 41:10:bd:1e:80:d5:35:55:3a:d4:ae:1d:8c:e0:33:9e:7f:d2: ab:f9:f8:f1:f7:e3:3e:08:30:b1:2a:f7:69:33:a0:36:75:7e: 60:9c:bc:59:49:d7:49:99:81:91:58:b0:33:67:d8:c7:c7:5a: 04:0a:85:2b:af:57:c6:93:77:ef:bf:ad:a5:0c:4c:4d:ca:6a: 55:5f:3b:8e:a8:c9:0f:06:e0:87:57:a3:14:59:18:12:34:0f: 47:8e:0c:d7:f2:68:15:fb:c0:6c:ba:45:7b:44:d5:7e:e9:9a: 7f:9c:47:da:d4:be:56:b7:b4:42:85:60:e5:dc:b6:9c:fa:a6: 8f:39:c2:22:a7:6e:f2:7c:ef:a4:38:02:82:42:6f:55:55:8f: 7a:c3:07:d8:62:7c:c9:fa:e6:8c:23:9e:9c:14:c0:bc:66:cd: f1:e4:4f:f4:bb:76:7a:50:82:b3:e7:be:68:7a:82:a6:b5:c8: e2:db:fb:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfDRJTggTwJuT6XPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk NDc2MjRlM2UtM2M3NC00NDkxLWFmOTctMjBlODJkNGQ0ZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKbQ64l//3iA1uk8Zy6qSRUqUdngX0ME4EhF f45q4htcIAmTGH/5FEFwPpTPM7z9BQSFKCJ4/JVCk3temiD/mMjkfzY1+7LrM8XO Zvepw2729V7q6SccSYz2DwZgWW3oawvbVVLtHZUyAxG3vxdc3npii//8UMUOjJur URXb3jMULcz1obprbYvKsJBkkwa1DMBEWx2GJN+8Z5LOyJ1fDKbIBkrGrd7jUWVl pWzPtVwT89+l57faOraZmRek/24uROl4RTY0g1Ng33hAzhLhrQS/j3xigi4EzFVX Mz5cVf17m2BHrv3KBlMsUP0e8vzXly2IyGCrfnRZYH/6YCNh8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKow4q9AfrIzs3w/B01mt4yDcp32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMDAxMWM2NmUtYTNhNC0z OWRlLWI3YmEtYTRlOWEwM2Q1ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjf+VvC7NQT3SLBRIdcEZZMz8t+mcce1jf/Wb/x41C/CRIY/KpJCToz cgLAskM1QU6+iIYVWfuJGR4ywX4y7s5rpq8VjBTz6kEQvR6A1TVVOtSuHYzgM55/ 0qv5+PH34z4IMLEq92kzoDZ1fmCcvFlJ10mZgZFYsDNn2MfHWgQKhSuvV8aTd++/ raUMTE3KalVfO46oyQ8G4IdXoxRZGBI0D0eODNfyaBX7wGy6RXtE1X7pmn+cR9rU vla3tEKFYOXctpz6po85wiKnbvJ876Q4AoJCb1VVj3rDB9hifMn65owjnpwUwLxm zfHkT/S7dnpQgrPnvmh6gqa1yOLb+/I= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:21 2024 by rpki-client on console-ams.rpki-client.org