$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa File: fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa (raw, json) Hash identifier: opnV+m1a3whp5D36cUtM4giSqc9fjsV2lLTr0UyHWWU= Subject key identifier: 9D:F2:71:7D:42:86:EA:A6:A8:83:2D:79:4E:AF:28:D3:BE:75:D0:EB Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584742BB4AA810C6C9B598FCCA88 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa Signing time: Thu 19 Sep 2024 01:00:31 +0000 ROA not before: Thu 19 Sep 2024 01:00:31 +0000 ROA not after: Wed 18 Dec 2024 02:00:31 +0000 asID: 11260 IP address blocks: 173.237.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:42:bb:4a:a8:10:c6:c9:b5:98:fc:ca:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Sep 19 01:00:31 2024 GMT Not After : Dec 18 02:00:31 2024 GMT Subject: CN=86e01bf1-a185-44e0-889d-6b7c52cf9355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:8f:8f:08:76:51:d8:b2:9c:f9:d9:c6:73: 60:a5:d7:ad:87:89:41:e7:7a:5a:34:43:53:88:30: ea:1b:8b:56:4e:66:c4:99:a2:a7:c6:39:27:87:a0: 7b:99:f0:87:48:84:61:3c:04:49:02:8f:2d:79:53: 31:33:15:1e:30:9c:ae:19:36:e5:77:24:72:0d:9d: 9b:95:46:8f:46:da:45:15:8d:4c:6e:0d:3f:4b:e2: 72:f9:4a:d7:d5:24:94:d4:c2:ea:05:87:f1:03:57: 2d:92:9d:06:e0:0b:9d:ba:b1:14:c2:99:d5:98:a3: 11:b5:75:03:97:cd:3e:b4:25:a0:38:6e:70:59:7f: a2:88:00:bc:b5:9a:c7:d2:5b:bc:d2:5e:30:6b:a4: ad:25:af:1a:49:36:15:3d:b4:04:92:46:28:18:2b: 20:49:d5:e7:fe:1c:8d:db:b2:c8:2e:d8:63:c4:6e: cd:30:a2:20:e6:e5:16:81:fe:87:e2:66:2e:79:16: 08:d8:85:26:a2:37:28:4a:86:99:d7:b4:ca:78:51: 5c:a1:15:94:2b:6a:a3:84:bc:b0:5f:9f:33:b2:46: 14:f1:71:2e:c1:8f:4d:16:d5:13:dd:9a:71:9c:4c: d9:cd:5b:a7:e0:06:ce:e9:97:31:95:4c:2b:8d:b0: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F2:71:7D:42:86:EA:A6:A8:83:2D:79:4E:AF:28:D3:BE:75:D0:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 173.237.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6e:f5:74:53:d4:b0:95:c7:cb:bd:67:8e:a6:27:bd:a6:38: 5b:c4:be:6c:ae:f2:12:99:e7:99:9f:58:45:3c:2c:9a:fa:d0: 5f:59:5a:6a:b5:12:04:70:cd:d3:c7:8c:34:8f:d9:25:65:2d: 0a:12:9d:8a:b8:41:99:59:8d:d1:20:3c:53:ec:ea:c4:21:e4: eb:1c:1a:50:d0:a3:a1:2b:6a:48:a0:2e:73:21:ba:26:da:9a: 22:54:c3:4c:24:23:df:50:e4:d8:89:65:33:e0:7c:34:cb:78: 59:e6:19:d0:88:05:38:be:24:f7:10:2f:5b:96:a6:fd:89:a3: 62:3f:7a:3c:72:ab:72:89:bf:ed:75:7f:dd:5d:4b:b0:d8:a2: b5:4a:4f:d2:a2:3f:1b:e7:b6:21:84:e3:bc:91:53:d7:3d:4a: 92:e7:b9:40:d5:f2:7b:6d:a3:9d:8f:94:f4:ae:16:2b:35:a3: 6e:dc:d6:e5:6c:1e:15:31:58:db:60:08:85:ea:75:c8:6f:ab: 35:b6:15:89:ab:3c:b7:1b:c7:4b:de:43:a7:09:e1:bd:1c:67: b2:b8:7b:df:3e:31:43:55:65:66:a4:b0:26:bd:83:2d:7c:f6: 5d:41:e0:26:52:4d:1b:22:ba:80:d9:5d:9f:e4:af:e7:24:21: b2:cc:c5:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu0qoEMbJtZj8yogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk ODZlMDFiZjEtYTE4NS00NGUwLTg4OWQtNmI3YzUyY2Y5MzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmKPjwh2UdiynPnZxnNgpdeth4lB53paNENT iDDqG4tWTmbEmaKnxjknh6B7mfCHSIRhPARJAo8teVMxMxUeMJyuGTbldyRyDZ2b lUaPRtpFFY1Mbg0/S+Jy+UrX1SSU1MLqBYfxA1ctkp0G4AudurEUwpnVmKMRtXUD l80+tCWgOG5wWX+iiAC8tZrH0lu80l4wa6StJa8aSTYVPbQEkkYoGCsgSdXn/hyN 27LILthjxG7NMKIg5uUWgf6H4mYueRYI2IUmojcoSoaZ17TKeFFcoRWUK2qjhLyw X58zskYU8XEuwY9NFtUT3ZpxnEzZzVun4AbO6ZcxlUwrjbAo3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3ycX1ChuqmqIMteU6vKNO+ddDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvZmQ3NWIzZDgtM2U1ZS0z YTAyLTk3Y2UtM2ExYTljNDExNzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFre1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlu9XRT1LCVx8u9Z46mJ72mOFvEvmyu8hKZ55mfWEU8LJr60F9ZWmq1 EgRwzdPHjDSP2SVlLQoSnYq4QZlZjdEgPFPs6sQh5OscGlDQo6ErakigLnMhuiba miJUw0wkI99Q5NiJZTPgfDTLeFnmGdCIBTi+JPcQL1uWpv2Jo2I/ejxyq3KJv+11 f91dS7DYorVKT9KiPxvntiGE47yRU9c9SpLnuUDV8ntto52PlPSuFis1o27c1uVs HhUxWNtgCIXqdchvqzW2FYmrPLcbx0veQ6cJ4b0cZ7K4e98+MUNVZWaksCa9gy18 9l1B4CZSTRsiuoDZXZ/kr+ckIbLMxbE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:39 2024 by rpki-client on console-ams.rpki-client.org