$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0426cb98-746d-3839-bac8-901e588c81ba.roa File: 0426cb98-746d-3839-bac8-901e588c81ba.roa (raw, json) Hash identifier: SGYo3rbd84i+erm9FQkwKqGiSGxmJ/01XUpxt6TdWRo= Subject key identifier: 21:CA:94:43:58:1A:A5:5A:7A:92:C3:2B:85:0C:95:72:39:4D:9E:DE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E8F54474EF943039470402C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0426cb98-746d-3839-bac8-901e588c81ba.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 70.32.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:44:74:ef:94:30:39:47:04:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=2598d37e-2a2a-4d28-9d9b-72c2f798b577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bf:91:df:77:83:4c:db:4a:88:69:52:a7:20: 09:e7:32:4b:cd:a3:f1:d7:a5:47:fe:a5:aa:6b:c3: 3c:b0:a5:8c:ff:25:68:c4:53:8a:a8:22:d0:dc:0c: 89:92:13:f6:5e:77:0a:69:24:3f:2e:e5:50:94:a8: 02:76:9d:74:6e:e6:a8:17:a3:39:97:0d:c6:0a:48: 74:37:1d:1c:c7:02:d7:6f:69:af:86:a5:23:b8:ff: 1b:90:09:20:49:b7:fc:af:63:d6:6c:70:79:d8:bd: 02:62:ee:44:79:9f:f5:03:97:de:47:12:b8:be:52: a4:55:e9:bb:c9:ff:21:70:c8:45:9c:77:c9:2a:96: cd:c7:73:ff:6c:c3:f6:84:85:96:49:3a:72:29:cb: 71:bf:a4:04:4f:33:ec:c4:77:fc:3f:42:b0:7f:53: 0e:12:22:4a:2e:f8:14:8a:3a:2d:ce:69:0a:c8:af: 69:78:b5:9e:2e:e3:78:ad:d3:f8:55:29:a8:e7:09: dc:5f:b4:98:56:c2:38:33:4d:de:fd:af:0b:b5:09: 2e:73:06:99:33:a2:bc:8b:30:07:e8:40:16:29:57: ce:26:fd:df:c8:15:7e:bf:b2:fe:ff:38:06:6e:06: cd:00:87:61:c9:6f:65:04:49:6c:0c:c1:17:22:5c: 7e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CA:94:43:58:1A:A5:5A:7A:92:C3:2B:85:0C:95:72:39:4D:9E:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0426cb98-746d-3839-bac8-901e588c81ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ee:80:4f:1c:90:3f:b2:44:88:5a:5e:55:b0:b6:33:a5:cc: 6a:61:90:51:24:3e:e3:cd:27:92:67:93:d3:27:f8:12:d8:9f: 6e:96:eb:f0:d9:37:31:6d:98:ba:fb:72:c7:19:db:14:6c:63: 08:52:20:f9:cb:37:0f:cb:db:3b:47:67:3d:0e:90:06:02:71: 23:9c:24:c1:d5:04:17:a2:73:a8:73:89:81:a2:66:85:0a:49: ca:c8:78:5e:9d:1a:6a:d5:00:1c:26:db:95:d8:8d:5d:30:8b: be:11:98:44:ff:b5:38:60:b0:81:78:38:92:44:4b:c3:e3:01: 17:0c:1e:b4:a5:2d:5b:d0:36:28:68:d5:2d:78:50:11:c5:64: a8:b7:b2:46:24:bd:e6:09:93:9f:7d:69:b1:3d:97:7b:6c:3e: f7:6e:70:4a:ac:a4:ef:c4:60:23:28:1c:39:ca:f9:19:d1:34: 39:36:5b:c3:52:b8:6f:67:0f:d1:d6:2d:a2:41:75:13:f4:91: 1d:65:9a:10:39:87:94:56:74:25:ac:77:97:4b:ff:9e:66:36: 7b:44:ca:33:c0:96:e7:b3:49:23:4b:62:d6:2d:ad:49:7c:3d: 04:e9:9d:d4:ed:4a:1e:48:74:03:72:aa:2b:ae:6a:53:3d:6b: 48:c7:a9:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9UR075QwOUcEAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MjU5OGQzN2UtMmEyYS00ZDI4LTlkOWItNzJjMmY3OThiNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr+R33eDTNtKiGlSpyAJ5zJLzaPx16VH/qWq a8M8sKWM/yVoxFOKqCLQ3AyJkhP2XncKaSQ/LuVQlKgCdp10buaoF6M5lw3GCkh0 Nx0cxwLXb2mvhqUjuP8bkAkgSbf8r2PWbHB52L0CYu5EeZ/1A5feRxK4vlKkVem7 yf8hcMhFnHfJKpbNx3P/bMP2hIWWSTpyKctxv6QETzPsxHf8P0Kwf1MOEiJKLvgU ijotzmkKyK9peLWeLuN4rdP4VSmo5wncX7SYVsI4M03e/a8LtQkucwaZM6K8izAH 6EAWKVfOJv3fyBV+v7L+/zgGbgbNAIdhyW9lBElsDMEXIlx+1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHKlENYGqVaepLDK4UMlXI5TZ7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDQyNmNiOTgtNzQ2ZC0z ODM5LWJhYzgtOTAxZTU4OGM4MWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXugE8ckD+yRIhaXlWwtjOlzGphkFEkPuPNJ5Jnk9Mn+BLYn26W6/DZ NzFtmLr7cscZ2xRsYwhSIPnLNw/L2ztHZz0OkAYCcSOcJMHVBBeic6hziYGiZoUK ScrIeF6dGmrVABwm25XYjV0wi74RmET/tThgsIF4OJJES8PjARcMHrSlLVvQNiho 1S14UBHFZKi3skYkveYJk599abE9l3tsPvducEqspO/EYCMoHDnK+RnRNDk2W8NS uG9nD9HWLaJBdRP0kR1lmhA5h5RWdCWsd5dL/55mNntEyjPAluezSSNLYtYtrUl8 PQTpndTtSh5IdANyqiuualM9a0jHqXo= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:14 2024 by rpki-client on console-fra.rpki-client.org