$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d496bf54-ff2f-3588-af59-de7d639e9932.roa File: d496bf54-ff2f-3588-af59-de7d639e9932.roa (raw, json) Hash identifier: mnn6jCYJGs4kZ9xVZN5D8LI2EyIfkLiXY45zp3FHVv0= Subject key identifier: 33:67:E1:AD:BD:A0:E1:78:11:8B:4C:F8:8E:5C:C3:45:E3:2D:22:37 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F43285847EBBF76AC0ADD904C6A192B00 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d496bf54-ff2f-3588-af59-de7d639e9932.roa Signing time: Mon 18 Nov 2024 14:00:40 +0000 ROA not before: Mon 18 Nov 2024 14:00:40 +0000 ROA not after: Sun 16 Feb 2025 14:00:40 +0000 asID: 397373 IP address blocks: 168.91.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:bf:76:ac:0a:dd:90:4c:6a:19:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Nov 18 14:00:40 2024 GMT Not After : Feb 16 14:00:40 2025 GMT Subject: CN=0a6fd0d0-de8f-48fc-99f8-f6a368a801f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bc:fb:82:ce:72:27:e1:9b:b9:f1:30:15:6f: fa:c6:59:c2:80:54:6a:fe:c7:93:ea:4b:56:26:25: 76:64:18:bd:6c:6b:88:88:df:f8:f8:1b:3f:d8:37: 03:e1:35:f4:d0:88:5d:5a:14:38:39:69:80:f4:92: b8:3b:33:d4:81:48:9f:49:b9:c8:2b:b0:d6:d1:6d: 1e:37:23:6b:a8:2b:7b:6c:84:8c:8f:ea:25:3e:6e: ef:9e:9f:9d:db:ff:3b:05:66:88:4d:23:2a:30:4f: 0e:19:b0:07:31:0d:da:b7:33:ec:08:71:de:2b:7a: 0d:23:b5:d7:dd:d8:0a:3a:b6:ab:0b:07:04:b1:af: 6f:32:6f:d8:dd:95:f5:a6:ff:11:36:48:79:3e:cb: 7d:0b:77:da:73:93:b1:29:42:07:11:11:4d:b9:50: 59:0b:62:43:fc:51:d5:1a:be:51:5d:47:63:08:99: 17:fb:9d:c9:e9:0f:fb:64:fb:ae:9b:d6:9c:36:b7: 39:8d:52:6f:11:d1:4d:70:da:9c:09:af:05:ae:6a: c3:80:74:24:3e:69:0f:49:39:b1:19:a1:a5:66:ad: 3f:0b:31:4b:e9:d5:d5:19:64:0d:a9:1d:b0:fb:2d: 89:25:54:06:d2:21:8d:b4:a8:4e:01:54:2c:db:44: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:67:E1:AD:BD:A0:E1:78:11:8B:4C:F8:8E:5C:C3:45:E3:2D:22:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d496bf54-ff2f-3588-af59-de7d639e9932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f1:8c:b3:15:d7:be:1e:c3:e3:72:0b:4d:af:3e:8a:20:8f:a7: d9:48:4a:76:b0:62:e7:d1:ee:be:4d:54:ae:f7:d0:07:eb:ae: a7:3a:0b:82:0e:d5:38:d1:23:ab:c2:08:e5:2d:13:df:cc:70: 7f:08:99:07:a5:08:ba:13:7b:c5:f3:a1:43:a8:72:fa:4a:3c: 3e:ef:75:42:e7:e9:54:fa:91:dc:23:8c:a5:c4:0a:e8:9a:0c: 20:4e:bc:ae:66:95:ad:38:2f:39:3f:1d:71:0d:db:1d:03:e3: d2:91:72:10:8f:69:e7:33:4c:a1:a4:25:e8:7c:bc:70:84:20: e9:5d:f8:a7:4e:c6:f9:e1:b8:42:29:98:96:94:86:d0:22:cf: 55:99:77:d8:fc:e5:38:12:2f:2a:16:47:5f:1a:cc:06:71:80: cc:eb:09:bd:8e:9a:6b:d1:12:dc:c8:99:07:0b:a7:6d:26:4c: f6:23:78:a3:34:f6:52:d0:8e:aa:58:8d:3f:85:aa:c9:09:fc: 0b:4c:a1:00:56:09:4f:1c:13:d3:0a:54:22:cb:00:b3:80:d1: 8d:d1:4e:0e:43:4f:81:ea:a1:c6:9d:ba:ff:08:81:a2:38:61: 31:41:4e:72:69:14:1d:42:12:80:50:95:12:e8:dd:d8:9b:ab: a0:03:e7:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv3asCt2QTGoZKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk MGE2ZmQwZDAtZGU4Zi00OGZjLTk5ZjgtZjZhMzY4YTgwMWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLz7gs5yJ+GbufEwFW/6xlnCgFRq/seT6ktW JiV2ZBi9bGuIiN/4+Bs/2DcD4TX00IhdWhQ4OWmA9JK4OzPUgUifSbnIK7DW0W0e NyNrqCt7bISMj+olPm7vnp+d2/87BWaITSMqME8OGbAHMQ3atzPsCHHeK3oNI7XX 3dgKOrarCwcEsa9vMm/Y3ZX1pv8RNkh5Pst9C3fac5OxKUIHERFNuVBZC2JD/FHV Gr5RXUdjCJkX+53J6Q/7ZPuum9acNrc5jVJvEdFNcNqcCa8FrmrDgHQkPmkPSTmx GaGlZq0/CzFL6dXVGWQNqR2w+y2JJVQG0iGNtKhOAVQs20R9OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNn4a29oOF4EYtM+I5cw0XjLSI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZDQ5NmJmNTQtZmYyZi0z NTg4LWFmNTktZGU3ZDYzOWU5OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFtKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPGMsxXXvh7D43ILTa8+iiCPp9lISnawYufR7r5NVK730Afrrqc6C4IO 1TjRI6vCCOUtE9/McH8ImQelCLoTe8XzoUOocvpKPD7vdULn6VT6kdwjjKXECuia DCBOvK5mla04Lzk/HXEN2x0D49KRchCPaeczTKGkJeh8vHCEIOld+KdOxvnhuEIp mJaUhtAiz1WZd9j85TgSLyoWR18azAZxgMzrCb2OmmvREtzImQcLp20mTPYjeKM0 9lLQjqpYjT+FqskJ/AtMoQBWCU8cE9MKVCLLALOA0Y3RTg5DT4Hqocaduv8IgaI4 YTFBTnJpFB1CEoBQlRLo3dibq6AD594= -----END CERTIFICATE-----Generated at Fri Nov 22 04:28:19 2024 by rpki-client on console-fra.rpki-client.org