$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/d63709ba-efc4-3caf-83fd-1de3e9f77899.roa File: d63709ba-efc4-3caf-83fd-1de3e9f77899.roa (raw, json) Hash identifier: tUaD/jHZdwAIjAO8GjpkLNU5vffhARCddhgoo8i8azI= Subject key identifier: 1D:7C:FB:0E:8E:C6:A4:C8:88:B4:FA:32:B6:D4:5B:0F:13:60:7C:40 Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F4328584803650D6565D8177BCC64DD00 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/d63709ba-efc4-3caf-83fd-1de3e9f77899.roa Signing time: Wed 27 Nov 2024 01:17:55 +0000 ROA not before: Wed 27 Nov 2024 01:17:55 +0000 ROA not after: Tue 25 Feb 2025 01:17:55 +0000 asID: 22418 IP address blocks: 70.34.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:03:65:0d:65:65:d8:17:7b:cc:64:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Nov 27 01:17:55 2024 GMT Not After : Feb 25 01:17:55 2025 GMT Subject: CN=11ccc281-eaed-4456-bc10-fb815e901099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:68:0e:9c:05:93:e0:d5:a7:40:f2:20:a7: 9d:e5:05:1d:ec:08:5b:17:f5:0d:f5:f9:bd:bf:99: 20:97:e1:57:07:1c:f9:24:e6:6b:81:c1:25:1b:3a: a3:8f:9e:04:d6:99:40:69:5a:f8:c0:f3:19:f3:d1: 94:14:15:74:c7:6b:2c:5a:63:a4:dd:ed:e3:15:71: 3f:cb:f2:49:8d:df:fb:18:01:16:17:83:d3:55:dd: c1:94:64:bf:37:87:be:3a:95:d5:7d:50:ca:e1:48: 16:a3:a5:55:f2:75:52:82:77:1c:3b:ed:d5:21:d0: 9b:ba:1c:d0:1b:9f:78:3e:b8:07:8b:5e:ad:bc:5c: db:d1:20:56:8c:e6:e4:73:fb:24:2a:c4:98:74:69: 33:03:70:3d:c7:87:86:96:79:07:67:64:30:77:eb: 75:3a:46:7c:9f:b5:8f:97:f9:1d:66:52:6b:3f:a8: 54:4b:8b:30:3b:0b:09:56:99:08:8f:5f:88:6e:e0: 60:30:f5:0b:45:0f:9f:c5:0b:d3:a2:7e:15:80:04: 9a:93:b6:f9:7c:76:ad:02:2b:17:6e:92:37:57:b5: c2:43:d7:32:87:af:40:3a:75:92:0e:31:75:5c:ef: 8e:5c:c9:cb:5e:c1:b4:5e:30:40:f0:8c:1d:ef:64: 68:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7C:FB:0E:8E:C6:A4:C8:88:B4:FA:32:B6:D4:5B:0F:13:60:7C:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/d63709ba-efc4-3caf-83fd-1de3e9f77899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 70.34.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:d2:6e:55:ed:f8:43:7f:a2:bf:d0:3a:91:20:ef:d2:69:24: aa:2b:c2:ba:05:08:db:da:76:3a:c0:1d:dc:e4:28:b8:89:2c: ca:f8:39:72:af:50:d5:7e:a5:6f:2c:24:b4:71:da:bc:fb:91: 6a:a2:0c:cc:ef:67:61:a5:18:95:9d:13:85:fd:e3:a6:d2:62: dc:11:ae:23:8f:f5:db:18:1f:58:c2:92:52:e3:49:95:92:94: ba:a4:13:b3:55:c4:e9:aa:b0:aa:1a:52:e1:7d:96:34:1d:d2: d4:80:aa:a1:db:72:1f:74:54:05:4d:ff:80:51:bd:eb:02:e0: 03:16:21:d1:48:da:d4:df:8c:13:40:3f:d9:a1:69:be:9f:24: 26:6d:e8:34:d2:25:86:9e:3e:c3:4e:fb:c3:a6:1b:cc:8d:2f: 06:50:01:1b:ad:c8:18:7b:90:65:70:8e:5e:0f:29:1e:b0:fc: c2:d0:f0:be:98:e5:e2:c9:f1:10:48:90:22:20:b0:5b:6c:8a: 73:fd:1e:28:cc:f0:f9:12:01:48:f8:75:05:4a:4b:4f:d3:38: 14:71:48:8e:15:28:00:7d:69:7c:a3:95:f6:ad:22:6c:3b:6b: 60:b1:bd:b2:35:ce:26:c5:c6:91:52:c6:b1:b2:5d:34:05:ad: 8b:92:a9:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDZQ1lZdgXe8xk3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI0MTEyNzAxMTc1NVoXDTI1MDIyNTAxMTc1NVowLzEtMCsGA1UEAxMk MTFjY2MyODEtZWFlZC00NDU2LWJjMTAtZmI4MTVlOTAxMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeBoDpwFk+DVp0DyIKed5QUd7AhbF/UN9fm9 v5kgl+FXBxz5JOZrgcElGzqjj54E1plAaVr4wPMZ89GUFBV0x2ssWmOk3e3jFXE/ y/JJjd/7GAEWF4PTVd3BlGS/N4e+OpXVfVDK4UgWo6VV8nVSgnccO+3VIdCbuhzQ G594PrgHi16tvFzb0SBWjObkc/skKsSYdGkzA3A9x4eGlnkHZ2Qwd+t1OkZ8n7WP l/kdZlJrP6hUS4swOwsJVpkIj1+IbuBgMPULRQ+fxQvTon4VgASak7b5fHatAisX bpI3V7XCQ9cyh69AOnWSDjF1XO+OXMnLXsG0XjBA8Iwd72RoAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB18+w6OxqTIiLT6MrbUWw8TYHxAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvZDYzNzA5YmEtZWZjNC0z Y2FmLTgzZmQtMWRlM2U5Zjc3ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHSblXt+EN/or/QOpEg79JpJKorwroFCNvadjrAHdzkKLiJLMr4OXKv UNV+pW8sJLRx2rz7kWqiDMzvZ2GlGJWdE4X946bSYtwRriOP9dsYH1jCklLjSZWS lLqkE7NVxOmqsKoaUuF9ljQd0tSAqqHbch90VAVN/4BRvesC4AMWIdFI2tTfjBNA P9mhab6fJCZt6DTSJYaePsNO+8OmG8yNLwZQARutyBh7kGVwjl4PKR6w/MLQ8L6Y 5eLJ8RBIkCIgsFtsinP9HijM8PkSAUj4dQVKS0/TOBRxSI4VKAB9aXyjlfatImw7 a2CxvbI1zibFxpFSxrGyXTQFrYuSqUA= -----END CERTIFICATE-----Generated at Sat Dec 28 06:11:45 2024 by rpki-client on console-ams.rpki-client.org