$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa File: 3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa (raw, json) Hash identifier: J85n2esQRHofsR0XhXq7HIU3N9bLarmr6F7FBrHG3HU= Subject key identifier: 2C:99:89:9C:47:66:99:BF:F9:11:D0:83:1E:69:6D:3F:72:B4:E2:99 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285847F41F9C967B283915895DD71C Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa Signing time: Thu 21 Nov 2024 14:00:51 +0000 ROA not before: Thu 21 Nov 2024 14:00:51 +0000 ROA not after: Wed 19 Feb 2025 14:00:51 +0000 asID: 9009 IP address blocks: 24.235.20.0/24 maxlen: 24 24.235.21.0/24 maxlen: 24 158.115.240.0/24 maxlen: 24 158.115.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f4:1f:9c:96:7b:28:39:15:89:5d:d7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Nov 21 14:00:51 2024 GMT Not After : Feb 19 14:00:51 2025 GMT Subject: CN=7acc3c16-1472-4bff-bfa7-2507e98a801b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:79:ef:05:3a:29:06:03:83:8a:09:a3:63:31: 21:63:0d:20:9d:c3:3d:ec:54:6b:5d:15:74:1f:75: db:d9:3f:7b:af:dc:1a:86:84:86:9b:e8:dc:d0:29: 49:57:ba:70:88:1e:dc:57:d9:25:a1:8e:35:c2:f6: 50:fb:cf:e5:1e:5f:ab:60:c9:10:22:ea:05:33:49: 84:59:88:1c:01:43:f7:40:82:69:7e:9f:05:ff:b3: 0d:30:85:d7:aa:79:16:94:43:f0:12:2d:99:b9:9b: 37:91:97:78:e0:ea:6f:3d:5e:39:f1:ad:7f:2f:42: 09:7a:d8:7e:84:79:a0:b5:31:97:2a:37:e0:08:84: a7:40:b1:e5:e6:ec:23:94:9a:5a:c0:56:94:69:c2: af:89:01:31:21:f3:c3:62:c1:ad:e9:76:65:5c:84: 0f:1f:db:2c:85:a8:be:0e:8a:e8:71:94:df:15:a8: 50:6f:ac:86:0c:4b:3f:92:48:8c:95:8c:6f:27:00: a1:c7:f9:35:32:77:7e:23:42:b8:18:94:80:03:60: e6:1e:c9:6f:6b:94:98:56:f9:d6:75:5f:0d:73:92: 40:44:79:d3:2b:74:3f:e0:b7:3d:fa:df:ab:9a:36: 21:91:64:9c:2d:83:a7:2f:8f:c0:b8:fe:4e:18:47: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:99:89:9C:47:66:99:BF:F9:11:D0:83:1E:69:6D:3F:72:B4:E2:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 24.235.20.0/23 158.115.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0d:9c:56:b2:bc:84:b2:a8:27:e5:19:02:9a:f9:20:88:b4: ce:50:66:1d:0b:f0:c2:f2:d0:b9:63:ee:39:d3:b3:d4:cd:89: 3c:4a:2d:d7:fe:5e:c5:48:d1:81:1e:f8:1a:98:8c:9d:aa:9d: 8b:71:21:42:fe:15:f0:84:7a:73:6a:b4:72:0c:ec:47:61:07: 05:18:51:34:58:3c:13:62:38:98:99:a6:40:ce:66:fd:83:00: 85:d1:46:9e:f5:b9:99:5e:37:e3:ce:4d:79:98:d4:99:98:fb: 96:4e:1e:cb:9d:d9:ff:02:b2:75:0f:60:ed:e5:fb:69:ad:3a: 9a:f1:72:97:38:2f:95:66:25:63:c8:7b:6a:74:78:36:66:0b: c6:42:a6:73:57:0b:00:d0:03:ba:b5:58:50:ff:bb:a6:a3:66: 77:ce:f1:a6:5f:58:51:a1:47:93:2c:b0:c2:66:4b:b2:7d:99: 93:a7:17:82:98:b8:28:7e:a4:f5:0f:86:fc:0f:b3:f4:47:47: 69:be:d9:04:9e:64:eb:44:c9:2b:70:2d:8b:19:1d:3b:06:f6: 68:1a:ad:bf:65:9a:cb:1e:ef:00:49:31:05:85:31:1d:4a:13: 3d:eb:1f:b4:66:9a:c0:17:4f:0f:5e:b5:22:73:bf:76:4b:1b: af:5a:03:30 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEf0H5yWeyg5FYld1xwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MTEyMTE0MDA1MVoXDTI1MDIxOTE0MDA1MVowLzEtMCsGA1UEAxMk N2FjYzNjMTYtMTQ3Mi00YmZmLWJmYTctMjUwN2U5OGE4MDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3nvBTopBgODigmjYzEhYw0gncM97FRrXRV0 H3Xb2T97r9wahoSGm+jc0ClJV7pwiB7cV9kloY41wvZQ+8/lHl+rYMkQIuoFM0mE WYgcAUP3QIJpfp8F/7MNMIXXqnkWlEPwEi2ZuZs3kZd44OpvPV458a1/L0IJeth+ hHmgtTGXKjfgCISnQLHl5uwjlJpawFaUacKviQExIfPDYsGt6XZlXIQPH9sshai+ DorocZTfFahQb6yGDEs/kkiMlYxvJwChx/k1Mnd+I0K4GJSAA2DmHslva5SYVvnW dV8Nc5JARHnTK3Q/4Lc9+t+rmjYhkWScLYOnL4/AuP5OGEeGFQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCyZiZxHZpm/+RHQgx5pbT9ytOKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2FlNWFmZDEtNGIyOC0z ODU1LWFlNmItOWJhNzE5MTU4ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBGOsUAwQB nnPwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIgNnFayvISyqCflGQKa+SCItM5QZh0L8MLy0Llj7jnTs9TN iTxKLdf+XsVI0YEe+BqYjJ2qnYtxIUL+FfCEenNqtHIM7EdhBwUYUTRYPBNiOJiZ pkDOZv2DAIXRRp71uZleN+POTXmY1JmY+5ZOHsud2f8CsnUPYO3l+2mtOprxcpc4 L5VmJWPIe2p0eDZmC8ZCpnNXCwDQA7q1WFD/u6ajZnfO8aZfWFGhR5MssMJmS7J9 mZOnF4KYuCh+pPUPhvwPs/RHR2m+2QSeZOtEyStwLYsZHTsG9mgarb9lmsse7wBJ MQWFMR1KEz3rH7RmmsAXTw9etSJzv3ZLG69aAzA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org