$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/36b73ae4-d88b-3a8d-9c79-38203e8e9e00.roa File: 36b73ae4-d88b-3a8d-9c79-38203e8e9e00.roa (raw, json) Hash identifier: b286jaN2dLHOBfp2TbC38lSBLygZF0ZJfOlfhggteFo= Subject key identifier: 9F:71:8F:E7:8D:64:C0:07:31:4B:05:74:58:C4:69:1E:18:13:CF:72 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F43285847E35F6BAF77CC2F1914425180 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/36b73ae4-d88b-3a8d-9c79-38203e8e9e00.roa Signing time: Fri 15 Nov 2024 14:00:39 +0000 ROA not before: Fri 15 Nov 2024 14:00:39 +0000 ROA not after: Thu 13 Feb 2025 14:00:39 +0000 asID: 212384 IP address blocks: 65.110.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e3:5f:6b:af:77:cc:2f:19:14:42:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Nov 15 14:00:39 2024 GMT Not After : Feb 13 14:00:39 2025 GMT Subject: CN=32a84e39-e4f6-46a1-b608-7a7e2ed418de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:df:14:4d:2a:1f:77:42:80:68:68:81:07:fb: 4c:ef:e9:ec:d8:d3:56:7b:80:6d:49:01:78:82:9e: ae:60:95:15:b2:ab:45:3e:5b:fd:be:4d:85:96:f0: fe:c5:12:5c:86:bf:8d:d9:c7:b2:ce:0c:b3:1f:6d: ab:21:78:5c:d7:a5:ef:99:ce:25:2c:22:ff:9d:d7: b1:c6:20:4e:8e:e9:e1:f7:e7:e6:3a:1a:4d:d8:32: ee:49:fc:35:a0:e4:28:68:17:b9:43:7a:01:db:60: c2:fc:69:e9:07:18:b4:3c:4e:38:42:ea:c5:aa:f8: 91:1f:76:14:32:e6:60:c2:62:40:cc:db:61:fd:f1: 20:34:cc:87:f5:ef:21:98:b5:00:21:1b:0e:3a:de: 29:42:5e:81:ce:ea:48:01:e8:d0:69:b6:5b:ef:08: 95:6c:57:5e:21:58:0a:5f:63:3a:e3:80:b8:a4:e3: b8:28:6b:dc:aa:46:c0:7b:5b:08:38:a7:9b:b5:7f: 37:a8:a1:cc:bc:47:8c:0d:b8:f0:78:05:fa:0d:90: 2a:53:cf:7a:c2:18:ad:c7:72:13:da:ad:9e:f7:d7: a4:b1:d5:c4:04:6b:bb:c0:64:61:d7:7e:92:f4:35: ea:37:eb:c0:09:08:72:b8:ca:07:e5:59:8e:fb:c3: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:71:8F:E7:8D:64:C0:07:31:4B:05:74:58:C4:69:1E:18:13:CF:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/36b73ae4-d88b-3a8d-9c79-38203e8e9e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 65.110.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:50:e5:19:26:0b:a2:cc:2c:2a:97:0f:ab:5f:2c:1e:54:6b: c2:34:2b:57:13:a0:cd:8e:3e:5d:b0:ac:3f:9e:b4:e2:85:69: b1:ba:c0:84:af:bc:c3:c6:e7:1d:62:11:27:f5:e9:0b:a4:65: 8a:cb:eb:4e:b2:1d:5f:38:be:67:80:b0:eb:dc:3b:21:6e:d9: 02:aa:90:07:c1:9d:c8:55:24:60:19:df:0f:02:29:3b:04:84: 65:b8:8a:68:14:8c:c6:fa:ce:fd:d2:ca:1f:d0:96:55:93:6b: 5e:b5:c0:d2:7a:de:a0:17:7c:5c:06:fe:8e:ef:c8:69:9b:fa: 7d:13:1e:7a:92:5a:0e:23:29:27:19:00:4a:9a:73:a4:a8:ef: 73:52:3f:84:93:f8:61:2c:c3:7a:65:df:4a:4e:56:ab:73:d0: a8:b6:f9:26:de:7e:d9:2b:0c:b2:8d:59:3b:6d:bf:ed:46:48: f4:ff:9f:92:97:66:84:77:d1:2c:e3:1e:64:0d:e5:38:a0:16: f6:7a:e5:e2:07:3e:b6:26:5d:00:c9:64:e3:41:5a:cb:01:de: 7d:a7:f2:6a:59:98:0a:41:59:d5:2f:92:18:fe:68:f1:97:73: d6:e8:62:da:53:38:e1:77:ce:48:39:d0:15:8f:06:80:0a:e1: a3:e1:2d:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjX2uvd8wvGRRCUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk MzJhODRlMzktZTRmNi00NmExLWI2MDgtN2E3ZTJlZDQxOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7t8UTSofd0KAaGiBB/tM7+ns2NNWe4BtSQF4 gp6uYJUVsqtFPlv9vk2FlvD+xRJchr+N2ceyzgyzH22rIXhc16Xvmc4lLCL/ndex xiBOjunh9+fmOhpN2DLuSfw1oOQoaBe5Q3oB22DC/GnpBxi0PE44QurFqviRH3YU MuZgwmJAzNth/fEgNMyH9e8hmLUAIRsOOt4pQl6BzupIAejQabZb7wiVbFdeIVgK X2M644C4pOO4KGvcqkbAe1sIOKebtX83qKHMvEeMDbjweAX6DZAqU896whitx3IT 2q2e99eksdXEBGu7wGRh136S9DXqN+vACQhyuMoH5VmO+8PO0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9xj+eNZMAHMUsFdFjEaR4YE89yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvMzZiNzNhZTQtZDg4Yi0z YThkLTljNzktMzgyMDNlOGU5ZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZQ5RkmC6LMLCqXD6tfLB5Ua8I0K1cToM2OPl2wrD+etOKFabG6wISv vMPG5x1iESf16QukZYrL606yHV84vmeAsOvcOyFu2QKqkAfBnchVJGAZ3w8CKTsE hGW4imgUjMb6zv3Syh/QllWTa161wNJ63qAXfFwG/o7vyGmb+n0THnqSWg4jKScZ AEqac6So73NSP4ST+GEsw3pl30pOVqtz0Ki2+SbeftkrDLKNWTttv+1GSPT/n5KX ZoR30SzjHmQN5TigFvZ65eIHPrYmXQDJZONBWssB3n2n8mpZmApBWdUvkhj+aPGX c9boYtpTOOF3zkg50BWPBoAK4aPhLTE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:27 2024 by rpki-client on console-ams.rpki-client.org