$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa File: 2153d3a6-ecc9-349e-a08d-595348d99222.roa (raw, json) Hash identifier: Jm0POtK/wTiZtlfIUvgCcbhvX05xsZT2mTVImjOVpzk= Subject key identifier: D6:C6:1A:13:20:E3:F1:25:A4:AA:3E:26:77:F6:9A:7A:61:A5:67:23 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847A4712E66B6EED758FF862390 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa Signing time: Thu 24 Oct 2024 01:00:32 +0000 ROA not before: Thu 24 Oct 2024 01:00:32 +0000 ROA not after: Wed 22 Jan 2025 02:00:32 +0000 asID: 202 IP address blocks: 170.30.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a4:71:2e:66:b6:ee:d7:58:ff:86:23:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 01:00:32 2024 GMT Not After : Jan 22 02:00:32 2025 GMT Subject: CN=dbb68b2a-19ae-4015-a156-339136d8b1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:23:da:22:9c:b3:24:c4:0a:92:4b:45:b2:4b: 81:f6:1c:dd:29:54:6b:96:d2:11:22:24:4b:1d:f4: 0c:35:ed:59:f8:a0:a5:04:3d:ce:4b:bb:4f:9f:9f: 46:53:4b:01:f4:c6:73:62:39:f8:17:e4:a6:97:6f: 0c:33:f2:65:0d:77:f5:89:5d:c8:8e:a0:da:4a:94: 15:9a:14:33:74:66:1e:1b:ab:dd:8d:73:55:eb:bd: 55:5b:96:20:24:68:d8:ea:e9:f5:08:8b:8b:e5:e9: ed:f0:fc:a3:ac:4c:5e:02:51:d0:25:9f:6e:c1:78: 11:c1:20:03:f2:66:30:bb:33:e6:23:91:2d:61:70: 78:0f:ac:75:c7:68:d0:3a:0a:81:bb:d1:e2:b0:fd: ef:be:33:ff:d2:bd:95:45:e3:04:be:ee:46:07:70: 90:b9:e2:51:4c:a6:bd:0d:d7:69:15:05:aa:0a:96: 48:88:ce:e4:c1:65:f2:cd:e5:33:e5:88:cb:e3:78: 24:82:e5:a8:83:a9:5b:ec:ac:53:50:9e:42:b4:f9: 2e:99:2e:f5:34:fe:91:c1:31:24:5b:d0:db:25:a8: 20:29:fe:e9:93:d0:01:97:66:b8:27:b5:bb:13:42: 47:ba:07:54:9c:81:6e:aa:6a:72:a2:ca:9d:c4:c7: aa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C6:1A:13:20:E3:F1:25:A4:AA:3E:26:77:F6:9A:7A:61:A5:67:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:00:93:2a:30:15:1a:4c:6c:f0:42:22:70:b7:a4:f7:c7:a8: 01:d0:ae:5a:13:07:7d:36:84:e8:42:50:18:14:68:c2:ed:c2: ca:21:5d:55:78:69:1b:b7:61:64:77:fe:c5:5d:5f:99:df:8c: 6b:e1:96:0d:9c:0a:52:e5:18:58:73:08:87:1a:93:f0:46:ca: 3a:53:d5:6b:65:fc:8a:93:35:78:78:6e:f9:d6:27:59:cc:0d: ef:cb:fc:39:99:33:ad:6f:c7:d5:9f:b1:5f:06:46:05:35:52: 13:09:28:29:56:a4:e7:9c:ae:39:51:ca:0f:6d:2a:c4:49:5d: 12:c4:bb:a6:09:6a:a2:83:8f:6f:62:ae:b2:20:00:c2:06:0a: 85:8b:be:f4:c4:9d:4b:5a:82:e8:eb:b2:da:6f:81:d6:9a:a4: 3d:b5:0b:e1:66:a0:40:1f:b2:0e:a8:79:81:40:0e:e4:3e:bd: 17:d5:ac:a1:9e:90:e6:c2:b9:fa:32:98:5b:5b:8b:a9:7c:fd: 5d:b0:8d:3b:80:dc:ad:0d:99:61:a3:8a:20:80:e8:54:84:c3: 78:9c:72:03:0c:ae:47:de:d9:93:f0:05:54:90:48:fc:05:51: 0b:fe:1e:93:08:42:10:40:33:33:28:57:3a:74:1e:f0:47:b0: 0f:99:eb:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEekcS5mtu7XWP+GI5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTAyNDAxMDAzMloXDTI1MDEyMjAyMDAzMlowLzEtMCsGA1UEAxMk ZGJiNjhiMmEtMTlhZS00MDE1LWExNTYtMzM5MTM2ZDhiMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiPaIpyzJMQKkktFskuB9hzdKVRrltIRIiRL HfQMNe1Z+KClBD3OS7tPn59GU0sB9MZzYjn4F+Sml28MM/JlDXf1iV3IjqDaSpQV mhQzdGYeG6vdjXNV671VW5YgJGjY6un1CIuL5ent8PyjrExeAlHQJZ9uwXgRwSAD 8mYwuzPmI5EtYXB4D6x1x2jQOgqBu9HisP3vvjP/0r2VReMEvu5GB3CQueJRTKa9 DddpFQWqCpZIiM7kwWXyzeUz5YjL43gkguWog6lb7KxTUJ5CtPkumS71NP6RwTEk W9DbJaggKf7pk9ABl2a4J7W7E0JHugdUnIFuqmpyosqdxMeq/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbGGhMg4/ElpKo+Jnf2mnphpWcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjE1M2QzYTYtZWNjOS0z NDllLWEwOGQtNTk1MzQ4ZDk5MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQAkyowFRpMbPBCInC3pPfHqAHQrloTB302hOhCUBgUaMLtwsohXVV4 aRu3YWR3/sVdX5nfjGvhlg2cClLlGFhzCIcak/BGyjpT1Wtl/IqTNXh4bvnWJ1nM De/L/DmZM61vx9WfsV8GRgU1UhMJKClWpOecrjlRyg9tKsRJXRLEu6YJaqKDj29i rrIgAMIGCoWLvvTEnUtagujrstpvgdaapD21C+FmoEAfsg6oeYFADuQ+vRfVrKGe kObCufoymFtbi6l8/V2wjTuA3K0NmWGjiiCA6FSEw3iccgMMrkfe2ZPwBVSQSPwF UQv+HpMIQhBAMzMoVzp0HvBHsA+Z6+M= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:33 2024 by rpki-client on console-ams.rpki-client.org