$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/fcbb683d-69c1-3103-ba72-9ebfb8834220.roa File: fcbb683d-69c1-3103-ba72-9ebfb8834220.roa (raw, json) Hash identifier: gyBjrHce9qC4G6lfOJCNFDSTnWMLC0MFMBe1OSZZYKs= Subject key identifier: 38:22:91:3E:1E:A3:E9:44:FB:71:CE:46:1A:DB:13:84:D7:A8:91:FF Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F432858480364E9BA4044D379FDD9E300 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/fcbb683d-69c1-3103-ba72-9ebfb8834220.roa Signing time: Wed 27 Nov 2024 01:17:38 +0000 ROA not before: Wed 27 Nov 2024 01:17:38 +0000 ROA not after: Tue 25 Feb 2025 01:17:38 +0000 asID: 22418 IP address blocks: 70.34.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:03:64:e9:ba:40:44:d3:79:fd:d9:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Nov 27 01:17:38 2024 GMT Not After : Feb 25 01:17:38 2025 GMT Subject: CN=de75ca42-a199-4167-a870-a30c6e3869b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:6e:ca:d3:18:05:cd:09:ec:28:15:76:80: 1c:5d:e3:ee:7b:ba:eb:93:4a:cb:31:c1:47:4b:95: d2:fa:dc:3d:dd:72:62:5d:a0:b9:66:ab:c1:01:12: 37:fc:d6:d1:b1:58:08:a6:2f:ec:c4:a2:48:c2:fc: dc:54:8a:11:2c:3c:0f:8d:f7:9a:3f:bd:8d:b8:33: 05:25:93:39:91:ba:cb:34:65:98:26:a9:c8:a8:44: b5:d6:a9:54:c7:58:e1:65:fe:fd:4d:6d:a3:4b:a1: ad:1e:12:0a:bd:ba:3d:02:a6:9e:66:44:0f:82:52: 32:ce:74:10:48:bd:16:73:60:d7:6f:f2:ce:35:51: 82:b5:a4:e2:0d:db:ed:f5:41:72:89:25:80:6d:ba: da:5e:c8:17:8c:d8:da:24:35:94:48:f3:1f:d1:7d: cf:74:83:6f:62:14:b0:58:af:c1:d7:e6:cd:83:08: 21:6d:ff:eb:3c:b2:e5:87:15:40:25:9b:f3:50:2b: 41:53:08:8e:d3:8e:4b:74:5b:15:54:b0:a7:6c:1b: aa:81:31:bb:f2:35:ea:5d:b2:dd:c1:4f:19:13:2a: 58:81:30:ec:3c:6a:14:d4:09:dd:91:b6:f6:3e:f1: d6:7c:b5:62:f1:34:f0:db:a5:dd:8c:23:04:54:50: bd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:22:91:3E:1E:A3:E9:44:FB:71:CE:46:1A:DB:13:84:D7:A8:91:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/fcbb683d-69c1-3103-ba72-9ebfb8834220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 70.34.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:18:44:62:07:b3:f8:40:f9:c9:4a:69:c6:8a:82:67:7f:ba: 9e:3c:9c:66:52:ec:34:09:e8:30:f8:6c:c7:14:1d:d3:1a:fa: 05:9d:b9:ae:07:9c:c9:b9:58:fc:ea:36:13:d0:42:23:41:1b: 76:87:35:c6:8b:a2:2d:30:0f:08:4d:80:74:62:a5:2b:cc:a4: 70:a7:76:e5:95:90:b7:ee:0e:28:a0:00:a5:7a:65:c8:ee:43: 26:6d:26:45:46:a9:48:55:60:b8:b2:dc:d8:86:6a:4b:13:5d: 00:0a:a2:ae:53:c7:6a:8e:d3:52:b6:9f:c2:c8:9f:6d:96:ee: 2c:e9:57:f2:84:04:0b:1a:d4:07:02:12:b0:86:18:5a:ab:58: 95:ed:91:02:08:bc:a8:2e:5f:bc:3f:84:c5:bd:47:94:14:a9: e3:11:29:17:3d:88:d2:72:d4:db:34:94:03:73:88:eb:36:58: b9:df:b7:1d:bd:78:a3:7f:23:2d:94:3f:e7:70:95:d0:f8:a2: f0:fd:04:0c:97:fe:3a:4d:44:92:3b:50:2e:ef:74:be:ab:b0: d5:3e:c5:89:d4:4d:3d:91:ce:9f:16:a9:55:8a:5a:0f:8c:1e: 67:96:f6:00:a9:25:8e:e6:28:b2:50:47:18:3b:5e:60:63:2f: 8f:20:a0:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDZOm6QETTef3Z4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI0MTEyNzAxMTczOFoXDTI1MDIyNTAxMTczOFowLzEtMCsGA1UEAxMk ZGU3NWNhNDItYTE5OS00MTY3LWE4NzAtYTMwYzZlMzg2OWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtohuytMYBc0J7CgVdoAcXePue7rrk0rLMcFH S5XS+tw93XJiXaC5ZqvBARI3/NbRsVgIpi/sxKJIwvzcVIoRLDwPjfeaP72NuDMF JZM5kbrLNGWYJqnIqES11qlUx1jhZf79TW2jS6GtHhIKvbo9AqaeZkQPglIyznQQ SL0Wc2DXb/LONVGCtaTiDdvt9UFyiSWAbbraXsgXjNjaJDWUSPMf0X3PdINvYhSw WK/B1+bNgwghbf/rPLLlhxVAJZvzUCtBUwiO045LdFsVVLCnbBuqgTG78jXqXbLd wU8ZEypYgTDsPGoU1Andkbb2PvHWfLVi8TTw26XdjCMEVFC9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgikT4eo+lE+3HORhrbE4TXqJH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvZmNiYjY4M2QtNjljMS0z MTAzLWJhNzItOWViZmI4ODM0MjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYYRGIHs/hA+clKacaKgmd/up48nGZS7DQJ6DD4bMcUHdMa+gWdua4H nMm5WPzqNhPQQiNBG3aHNcaLoi0wDwhNgHRipSvMpHCnduWVkLfuDiigAKV6Zcju QyZtJkVGqUhVYLiy3NiGaksTXQAKoq5Tx2qO01K2n8LIn22W7izpV/KEBAsa1AcC ErCGGFqrWJXtkQIIvKguX7w/hMW9R5QUqeMRKRc9iNJy1Ns0lANziOs2WLnftx29 eKN/Iy2UP+dwldD4ovD9BAyX/jpNRJI7UC7vdL6rsNU+xYnUTT2Rzp8WqVWKWg+M HmeW9gCpJY7mKLJQRxg7XmBjL48goNc= -----END CERTIFICATE-----Generated at Sat Dec 28 06:11:45 2024 by rpki-client on console-ams.rpki-client.org