$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa File: 87fd4b0d-6f9b-3caf-ad67-299517a44066.roa (raw, json) Hash identifier: GuvIG4KExZx1lJD/v9nkc/EVcvjX+R0Gtt5Ge8sc5Xw= Subject key identifier: 90:3A:08:F5:75:EC:45:8F:18:70:CD:E9:EF:04:C4:8A:67:93:A7:E6 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F43285847A5D6B05497078ACFD5370C00 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 174 IP address blocks: 65.110.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:b0:54:97:07:8a:cf:d5:37:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=c921794b-be40-449f-a72e-cd370ac2b3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:9f:1a:48:ca:94:b3:57:42:8f:d4:2c:ce: c4:d1:1f:83:89:16:c9:49:bd:07:9a:30:eb:08:48: 49:15:8d:38:a4:8e:03:23:77:05:33:df:2d:e2:fa: 2a:6e:09:a2:27:5c:cd:e9:66:07:e4:c1:c2:86:d1: d6:20:02:bc:ed:8a:07:5e:af:b6:2f:24:bb:e5:d6: 01:77:c0:b6:16:7c:0b:42:4d:95:92:03:33:10:53: e6:53:ff:3a:c3:aa:7f:2d:f0:d7:70:b7:35:e2:47: b9:ea:3e:45:75:bd:91:25:12:d2:8b:38:ad:75:90: 68:6f:cc:4d:be:23:9b:62:db:bf:12:03:17:f7:51: c5:3b:94:53:64:69:5c:a0:66:f0:76:1f:81:9f:45: a2:e8:9f:c2:66:08:ee:57:62:4c:a3:c2:60:df:eb: 9a:ff:9e:28:cf:c4:09:75:91:89:8e:9b:84:30:2b: 68:10:2c:c1:1f:5e:f9:93:5e:f9:82:cf:56:f6:b3: 17:d2:e2:f7:3b:1d:6d:5b:ab:e0:9c:0c:1a:2c:f1: 0f:1a:2b:8e:d3:cd:c5:da:5a:c0:81:a7:c6:25:01: 29:06:ae:55:1a:28:f8:64:9c:02:b1:13:8b:0b:92: 39:a9:7d:2e:f2:b1:d7:cd:79:98:5e:e7:67:16:68: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3A:08:F5:75:EC:45:8F:18:70:CD:E9:EF:04:C4:8A:67:93:A7:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 65.110.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9f:16:6e:46:be:bb:eb:84:af:9a:7c:01:f6:1c:32:e1:83: 0a:8e:e1:0c:93:8a:3f:72:7c:22:f7:76:83:b9:e9:a2:df:2c: 39:19:57:49:24:e0:aa:a9:9e:51:5e:ba:86:5f:f4:15:b8:66: c8:73:83:7a:cb:c9:ad:95:c0:25:6b:a4:da:0d:42:3e:d1:cc: f1:04:eb:c9:78:c0:e2:fc:79:0e:e0:46:01:4f:11:ec:41:a9: 6e:60:a5:cb:5f:69:02:27:8d:0a:7c:08:5c:91:2e:2f:15:f6: 4e:e4:80:24:79:14:9e:0c:50:bb:10:39:77:96:59:c7:cc:dd: e7:a4:ec:da:b3:69:84:3a:75:00:be:bb:c3:46:34:c1:ea:8b: 6f:3d:7c:67:6e:c4:19:e9:9f:30:d1:df:10:8b:86:de:04:31: e1:eb:8c:73:7e:da:61:76:a5:77:95:d2:9c:80:f2:fc:2b:92: 78:0d:9b:68:19:b1:8e:99:43:f4:de:0f:ac:2e:02:5e:02:b3: 7a:ae:6d:ed:4d:3a:38:2b:53:3d:88:b0:12:14:8a:69:73:03: 45:c8:a1:36:72:fb:2e:dd:99:7c:86:ec:b6:bc:09:ca:72:7c: 46:37:52:84:11:2e:74:94:60:b4:11:50:1a:46:0a:ba:4b:df: cb:28:b7:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1rBUlweKz9U3DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YzkyMTc5NGItYmU0MC00NDlmLWE3MmUtY2QzNzBhYzJiM2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+yfGkjKlLNXQo/ULM7E0R+DiRbJSb0HmjDr CEhJFY04pI4DI3cFM98t4voqbgmiJ1zN6WYH5MHChtHWIAK87YoHXq+2LyS75dYB d8C2FnwLQk2VkgMzEFPmU/86w6p/LfDXcLc14ke56j5Fdb2RJRLSizitdZBob8xN viObYtu/EgMX91HFO5RTZGlcoGbwdh+Bn0Wi6J/CZgjuV2JMo8Jg3+ua/54oz8QJ dZGJjpuEMCtoECzBH175k175gs9W9rMX0uL3Ox1tW6vgnAwaLPEPGiuO083F2lrA gafGJQEpBq5VGij4ZJwCsROLC5I5qX0u8rHXzXmYXudnFmjBEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJA6CPV17EWPGHDN6e8ExIpnk6fmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvODdmZDRiMGQtNmY5Yi0z Y2FmLWFkNjctMjk5NTE3YTQ0MDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSfFm5GvrvrhK+afAH2HDLhgwqO4QyTij9yfCL3doO56aLfLDkZV0kk 4KqpnlFeuoZf9BW4Zshzg3rLya2VwCVrpNoNQj7RzPEE68l4wOL8eQ7gRgFPEexB qW5gpctfaQInjQp8CFyRLi8V9k7kgCR5FJ4MULsQOXeWWcfM3eek7NqzaYQ6dQC+ u8NGNMHqi289fGduxBnpnzDR3xCLht4EMeHrjHN+2mF2pXeV0pyA8vwrkngNm2gZ sY6ZQ/TeD6wuAl4Cs3qube1NOjgrUz2IsBIUimlzA0XIoTZy+y7dmXyG7La8Ccpy fEY3UoQRLnSUYLQRUBpGCrpL38sotwE= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:23 2024 by rpki-client on console-ams.rpki-client.org