$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/c97c8948-f084-367f-b3b8-16806edb7459.roa File: c97c8948-f084-367f-b3b8-16806edb7459.roa (raw, json) Hash identifier: tRpFcaS3NJqZcAg6X5WkamhBguxji7CucCtm/j6NnM4= Subject key identifier: 98:A2:E7:C6:78:A5:9B:C7:9D:F7:FB:A8:F0:87:33:C5:8A:F9:5C:38 Certificate issuer: /CN=000bd43e-168e-4afa-8dc5-47948687933d Certificate serial: 010D0C9F43285847F2BA2E684D38C3767D9F7260 Authority key identifier: 89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/c97c8948-f084-367f-b3b8-16806edb7459.roa Signing time: Thu 21 Nov 2024 02:00:38 +0000 ROA not before: Thu 21 Nov 2024 02:00:38 +0000 ROA not after: Wed 19 Feb 2025 02:00:38 +0000 asID: 14618 IP address blocks: 69.52.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f2:ba:2e:68:4d:38:c3:76:7d:9f:72:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000bd43e-168e-4afa-8dc5-47948687933d Validity Not Before: Nov 21 02:00:38 2024 GMT Not After : Feb 19 02:00:38 2025 GMT Subject: CN=5aaa5455-4bc0-4a8d-b725-510995732e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:67:05:48:e8:ee:eb:7e:8d:ca:e8:a2:1d:6c: a7:78:43:57:2f:c8:42:9d:ca:8b:ac:e3:1c:e9:e5: aa:0c:0f:10:3d:93:4c:38:7b:10:80:db:32:ce:65: f4:56:e6:3b:3d:29:2f:e1:52:5b:6a:c3:dc:2d:5d: 2d:d1:d1:5f:8b:c0:01:47:03:8a:05:2b:1d:5c:2b: be:51:96:bf:0d:c2:74:7b:07:6f:bb:ab:af:91:83: b1:cf:13:6c:81:de:7e:a1:aa:f9:df:44:5e:ae:fc: 0b:e6:d1:ac:40:38:1b:0d:ef:40:4f:02:14:c7:2c: 7c:92:31:c9:28:39:06:ab:a4:b0:62:aa:91:7b:17: 58:9d:ef:5b:70:c6:97:51:f1:6f:b3:80:d1:7e:9c: 42:d4:a3:4f:0c:bf:fe:6d:02:57:11:16:91:18:66: 74:51:51:2c:95:de:f7:6e:83:53:a6:d8:4c:75:76: 82:27:fe:5e:73:fc:88:ae:b5:a3:1c:59:69:81:ca: ee:03:41:bd:7d:b9:35:dd:f4:6f:40:a5:6c:2d:9a: fb:25:2e:f5:8f:f8:9e:f6:aa:83:50:b4:a0:46:1d: 2b:ac:f2:33:cd:72:fe:4c:91:35:12:d7:8d:45:e4: a2:2f:10:d5:73:4b:7a:00:26:25:b4:10:44:25:98: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A2:E7:C6:78:A5:9B:C7:9D:F7:FB:A8:F0:87:33:C5:8A:F9:5C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/c97c8948-f084-367f-b3b8-16806edb7459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl X509v3 Authority Key Identifier: keyid:89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer sbgp-ipAddrBlock: critical IPv4: 69.52.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0b:98:9a:4c:43:a9:89:97:f7:83:64:60:94:17:74:b7:55: a8:fd:98:2f:3c:cf:d7:9f:58:4a:d7:de:18:9c:8c:65:12:50: 8e:f8:8f:40:0b:7b:9c:81:0a:10:ef:90:c9:2a:b4:2b:2d:84: 44:ec:45:8a:83:94:71:44:46:57:46:23:09:6b:31:c9:48:c5: 15:84:53:5a:1c:f6:cb:7f:3a:93:08:06:7e:ac:af:c5:e3:2e: f2:36:bd:e9:ea:b2:a3:ae:83:e7:c3:ff:8c:c5:59:1b:c5:bb: 75:92:34:7b:83:0d:b3:48:63:e2:1c:f8:97:ea:ca:ef:ed:5c: aa:bf:bd:45:95:7e:6d:26:1b:36:bd:0a:90:8e:4e:68:ea:df: 8a:50:76:88:96:ee:9e:1f:5c:7a:89:bf:18:81:1e:c7:9f:06: 46:74:47:28:6d:a2:e1:d8:28:ba:16:95:1f:e1:34:fd:85:4d: 28:65:ea:90:c5:71:10:a0:4c:4b:d1:fb:28:8e:21:dc:94:b6: ae:bd:35:d4:50:35:6f:f5:a0:66:27:90:e8:37:58:ba:d7:02: 4e:36:af:bb:b8:b7:15:6b:95:a8:e9:30:0f:d8:4a:9c:06:a8: 56:31:52:fb:bf:cf:90:c3:2f:fd:4c:f8:e3:51:51:81:b1:16: b7:99:29:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyui5oTTjDdn2fcmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDAwYmQ0M2UtMTY4ZS00YWZhLThkYzUtNDc5NDg2ODc5 MzNkMB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk NWFhYTU0NTUtNGJjMC00YThkLWI3MjUtNTEwOTk1NzMyZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mcFSOju636NyuiiHWyneENXL8hCncqLrOMc 6eWqDA8QPZNMOHsQgNsyzmX0VuY7PSkv4VJbasPcLV0t0dFfi8ABRwOKBSsdXCu+ UZa/DcJ0ewdvu6uvkYOxzxNsgd5+oar530RervwL5tGsQDgbDe9ATwIUxyx8kjHJ KDkGq6SwYqqRexdYne9bcMaXUfFvs4DRfpxC1KNPDL/+bQJXERaRGGZ0UVEsld73 boNTpthMdXaCJ/5ec/yIrrWjHFlpgcruA0G9fbk13fRvQKVsLZr7JS71j/ie9qqD ULSgRh0rrPIzzXL+TJE1EteNReSiLxDVc0t6ACYltBBEJZgR+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJii58Z4pZvHnff7qPCHM8WK+Vw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMDBi ZDQzZS0xNjhlLTRhZmEtOGRjNS00Nzk0ODY4NzkzM2QvYzk3Yzg5NDgtZjA4NC0z NjdmLWIzYjgtMTY4MDZlZGI3NDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDAwYmQ0M2UtMTY4ZS00YWZhLThk YzUtNDc5NDg2ODc5MzNkLzAwMGJkNDNlLTE2OGUtNGFmYS04ZGM1LTQ3OTQ4Njg3 OTMzZC5jcmwwHwYDVR0jBBgwFoAUiagPt6elyYgQiGSpSHJaWrotZAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wMDBiZDQzZS0xNjhlLTRhZmEtOGRjNS00Nzk0 ODY4NzkzM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4LmJpMQ6mJl/eDZGCUF3S3Vaj9mC88z9efWErX3hicjGUSUI74j0AL e5yBChDvkMkqtCsthETsRYqDlHFERldGIwlrMclIxRWEU1oc9st/OpMIBn6sr8Xj LvI2venqsqOug+fD/4zFWRvFu3WSNHuDDbNIY+Ic+Jfqyu/tXKq/vUWVfm0mGza9 CpCOTmjq34pQdoiW7p4fXHqJvxiBHsefBkZ0RyhtouHYKLoWlR/hNP2FTShl6pDF cRCgTEvR+yiOIdyUtq69NdRQNW/1oGYnkOg3WLrXAk42r7u4txVrlajpMA/YSpwG qFYxUvu/z5DDL/1M+ONRUYGxFreZKWg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:23 2024 by rpki-client on console-ams.rpki-client.org