$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa File: 8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa (raw, json) Hash identifier: ZqNVioJ4a4Zcvg5L2V/GmSP2+EEscf2ywpXiCf9Yt2s= Subject key identifier: 5E:5B:D0:E0:4D:5E:46:AB:DC:27:40:FD:20:55:F0:B0:BA:28:AD:E0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847A471322DD4E7D03F64C02000 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa Signing time: Thu 24 Oct 2024 01:00:32 +0000 ROA not before: Thu 24 Oct 2024 01:00:32 +0000 ROA not after: Wed 22 Jan 2025 02:00:32 +0000 asID: 203 IP address blocks: 170.30.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a4:71:32:2d:d4:e7:d0:3f:64:c0:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 01:00:32 2024 GMT Not After : Jan 22 02:00:32 2025 GMT Subject: CN=2e6625f6-7fd7-4ffd-871d-1a4ed9a32f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:ad:b9:77:0b:74:43:01:12:92:32:75:29: 34:69:16:31:c4:fa:11:c3:b2:a4:cf:13:3a:9d:86: 74:61:b1:6e:9b:f9:58:dc:bc:70:cd:0b:55:68:14: 75:9a:eb:dd:af:8a:6a:4b:af:e1:d7:6e:2f:21:38: d5:50:e0:c9:9a:e0:38:6a:e4:d4:6f:56:1c:1b:9b: 51:58:22:05:c4:55:29:01:74:73:82:66:d0:22:1c: 58:0d:b3:86:4a:e0:3c:9a:af:5a:b0:e7:84:1f:49: ce:b4:e9:5d:c7:05:d7:4f:33:8b:9a:aa:fc:90:f9: 76:26:a0:6b:89:dd:05:3d:e3:b5:2c:43:a8:11:e4: 6d:8a:34:c6:90:9a:8c:2d:43:ef:ba:2a:36:98:ae: 2d:74:ba:51:a1:af:62:ab:90:33:cb:66:eb:f4:38: 0f:03:5c:4d:e9:f1:62:25:56:fd:cf:91:5b:20:15: 6b:75:de:a1:e9:4f:d8:58:fc:9f:15:58:a2:8c:2e: 86:9d:57:c7:d4:7b:af:5f:76:6a:eb:91:d1:12:ad: f4:c2:30:ac:26:d9:ef:c9:f7:e7:b9:38:76:e2:33: e4:05:bc:ef:bc:cf:6d:a0:4c:2c:72:90:14:a8:c0: 68:21:0a:7c:8b:06:9f:25:2d:cc:ef:bd:8e:2e:fc: 3e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5B:D0:E0:4D:5E:46:AB:DC:27:40:FD:20:55:F0:B0:BA:28:AD:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c1:16:7b:78:61:84:c6:0d:33:13:f5:92:9e:73:74:73:a4: e8:90:f0:0e:42:36:05:d1:e8:49:20:4f:4f:9a:5c:fa:49:56: 6b:58:be:5d:8d:78:7b:cb:32:b7:44:9f:c5:9a:e2:06:b3:80: b9:df:31:52:ea:e4:44:10:55:a1:82:30:fd:83:5c:ae:68:68: 9d:db:98:e5:47:e2:d7:ab:6f:cc:e6:f5:11:cb:65:99:fb:0e: e0:19:30:3f:2e:42:8e:e8:ef:fd:fc:0f:6a:69:9e:aa:cf:96: 33:a2:c2:58:61:45:85:4f:e3:bb:ba:7f:79:57:ef:b6:a3:14: df:76:63:45:a1:1b:6b:c6:04:b3:c9:0b:4c:43:6e:53:ac:2a: 08:6f:a1:7b:8b:58:5f:50:0e:b9:12:f8:23:1f:18:3c:4c:26: b0:e0:e6:92:dc:4d:08:17:04:47:1a:b3:03:ad:04:d2:92:7a: 1d:31:58:2b:e3:97:a9:98:a8:db:a0:35:f9:76:22:16:b6:80: f5:88:1f:7d:0b:84:fa:5e:6e:27:02:5e:fc:44:a4:88:8f:6c: 54:85:fc:17:3f:7d:03:c8:29:6c:1b:fd:ec:e5:13:d9:47:3a: 83:b1:a8:28:65:e6:ab:a7:fe:6d:27:bd:3c:dd:5d:3c:9c:09: 29:1a:fe:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEekcTIt1OfQP2TAIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTAyNDAxMDAzMloXDTI1MDEyMjAyMDAzMlowLzEtMCsGA1UEAxMk MmU2NjI1ZjYtN2ZkNy00ZmZkLTg3MWQtMWE0ZWQ5YTMyZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTetuXcLdEMBEpIydSk0aRYxxPoRw7KkzxM6 nYZ0YbFum/lY3LxwzQtVaBR1muvdr4pqS6/h124vITjVUODJmuA4auTUb1YcG5tR WCIFxFUpAXRzgmbQIhxYDbOGSuA8mq9asOeEH0nOtOldxwXXTzOLmqr8kPl2JqBr id0FPeO1LEOoEeRtijTGkJqMLUPvuio2mK4tdLpRoa9iq5Azy2br9DgPA1xN6fFi JVb9z5FbIBVrdd6h6U/YWPyfFViijC6GnVfH1HuvX3Zq65HREq30wjCsJtnvyffn uTh24jPkBbzvvM9toEwscpAUqMBoIQp8iwafJS3M772OLvw+IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5b0OBNXkar3CdA/SBV8LC6KK3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGQxN2ZiZTEtMGQxZS0z MDc5LTlhN2YtNjQ5OTMyYmY5YzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqh7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXBFnt4YYTGDTMT9ZKec3RzpOiQ8A5CNgXR6EkgT0+aXPpJVmtYvl2N eHvLMrdEn8Wa4gazgLnfMVLq5EQQVaGCMP2DXK5oaJ3bmOVH4terb8zm9RHLZZn7 DuAZMD8uQo7o7/38D2ppnqrPljOiwlhhRYVP47u6f3lX77ajFN92Y0WhG2vGBLPJ C0xDblOsKghvoXuLWF9QDrkS+CMfGDxMJrDg5pLcTQgXBEcaswOtBNKSeh0xWCvj l6mYqNugNfl2Iha2gPWIH30LhPpebicCXvxEpIiPbFSF/Bc/fQPIKWwb/ezlE9lH OoOxqChl5qun/m0nvTzdXTycCSka/ow= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:48 2024 by rpki-client on console-ams.rpki-client.org