$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0684bd6f-5d65-34d2-98dd-0b1dd6db2847.roa File: 0684bd6f-5d65-34d2-98dd-0b1dd6db2847.roa (raw, json) Hash identifier: kgJz1gVjjfxdN6BytcmTUoX+g3J9OInh7XirFKYPAOo= Subject key identifier: D0:CB:D9:C9:D0:30:1B:55:63:60:4E:E7:8F:B2:22:C8:03:D2:B7:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E8F51194F7DF1F46E4FBCE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0684bd6f-5d65-34d2-98dd-0b1dd6db2847.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 70.32.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:11:94:f7:df:1f:46:e4:fb:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=c88aab1f-369c-4f1c-9f08-1820e9e9492a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6d:ca:d0:47:73:27:37:e5:38:d7:46:5a:a5: 50:f8:99:37:8a:5d:3d:83:76:83:30:4d:ed:aa:5b: 4b:30:3e:96:a4:a2:1a:9b:2b:be:87:39:eb:ee:c6: 31:d5:9e:f9:68:7e:83:d5:93:83:ea:72:69:dc:77: bc:0a:83:6e:d7:1b:2c:06:5a:a7:31:48:88:a4:f7: b6:03:9d:cb:79:3e:a0:e9:52:24:7e:e1:19:9c:d3: 2b:f5:e3:24:85:78:c7:79:92:21:95:bf:3b:6d:f6: 3a:8b:1e:a0:3d:37:69:77:d1:60:2f:74:5a:2a:a8: 31:ce:7e:89:30:1e:35:5e:b0:a7:d1:23:22:47:91: 37:37:30:df:6e:e4:24:10:c7:1a:74:21:66:58:4c: b1:20:12:0c:f4:1a:79:d2:98:13:a8:fa:3b:3f:a0: 60:fe:cb:a0:dd:e9:58:d1:97:e9:c6:09:fb:ee:6e: 81:49:0d:b0:28:f6:c1:67:5c:f4:1f:2f:7e:09:66: fd:58:7c:82:4f:b5:fd:6a:b5:11:1c:5e:50:b5:72: ce:22:e4:4b:48:d4:97:00:5a:2e:f5:52:32:31:a8: de:eb:7d:cd:69:be:86:a2:2c:d8:4b:80:d6:3d:3b: d4:5f:be:4c:23:50:15:90:96:39:3b:a4:ef:9c:f0: 0f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CB:D9:C9:D0:30:1B:55:63:60:4E:E7:8F:B2:22:C8:03:D2:B7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0684bd6f-5d65-34d2-98dd-0b1dd6db2847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:95:9b:8a:28:40:9e:a5:29:59:f6:c1:db:07:d7:e6:e6:04: 2e:ad:12:9d:07:3e:bf:2b:1d:1c:ae:6d:a2:3a:f2:89:30:7a: 44:76:cf:ba:42:06:78:2c:2a:3a:e8:69:c3:43:d0:7c:6a:e1: a1:b9:96:94:2d:fa:02:ea:55:7a:4d:ba:22:86:bc:f0:1a:60: f8:00:6c:50:b3:5a:dd:bc:0b:cd:68:f3:99:c6:c8:c5:67:fc: ac:b7:f8:82:8b:d4:32:95:7f:46:ef:ba:c9:24:ce:e0:e7:c3: 74:5e:5b:6f:11:88:60:22:28:b8:5a:7f:86:0d:05:64:74:eb: b3:46:34:42:db:89:0d:88:99:9c:3a:4e:ae:0b:cc:f6:45:36: ff:b0:40:72:24:9e:f0:7b:af:d2:b0:13:96:41:af:2b:32:02: 92:59:19:7a:8e:c9:ec:75:cf:dd:35:e4:01:51:e4:04:08:70: 1f:27:e2:9d:a2:4c:2e:a9:dc:7d:ab:80:0c:f9:db:48:e2:66: e8:c6:de:82:a8:da:64:6a:0f:47:b1:33:fd:8f:af:9d:d7:b0: 79:15:0f:7e:12:78:c7:8a:72:71:ee:c0:12:17:1f:d6:28:32: 18:1a:bc:53:b9:62:a8:69:9d:55:cc:ae:58:08:37:c7:2a:d1: a4:26:2b:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9RGU998fRuT7zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk Yzg4YWFiMWYtMzY5Yy00ZjFjLTlmMDgtMTgyMGU5ZTk0OTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG3K0EdzJzflONdGWqVQ+Jk3il09g3aDME3t qltLMD6WpKIamyu+hznr7sYx1Z75aH6D1ZOD6nJp3He8CoNu1xssBlqnMUiIpPe2 A53LeT6g6VIkfuEZnNMr9eMkhXjHeZIhlb87bfY6ix6gPTdpd9FgL3RaKqgxzn6J MB41XrCn0SMiR5E3NzDfbuQkEMcadCFmWEyxIBIM9Bp50pgTqPo7P6Bg/sug3elY 0Zfpxgn77m6BSQ2wKPbBZ1z0Hy9+CWb9WHyCT7X9arURHF5QtXLOIuRLSNSXAFou 9VIyMaje633Nab6GoizYS4DWPTvUX75MI1AVkJY5O6TvnPAPFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDL2cnQMBtVY2BO54+yIsgD0rfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDY4NGJkNmYtNWQ2NS0z NGQyLTk4ZGQtMGIxZGQ2ZGIyODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACVm4ooQJ6lKVn2wdsH1+bmBC6tEp0HPr8rHRyubaI68okwekR2z7pC BngsKjroacND0Hxq4aG5lpQt+gLqVXpNuiKGvPAaYPgAbFCzWt28C81o85nGyMVn /Ky3+IKL1DKVf0bvuskkzuDnw3ReW28RiGAiKLhaf4YNBWR067NGNELbiQ2ImZw6 Tq4LzPZFNv+wQHIknvB7r9KwE5ZBrysyApJZGXqOyex1z9015AFR5AQIcB8n4p2i TC6p3H2rgAz520jiZujG3oKo2mRqD0exM/2Pr53XsHkVD34SeMeKcnHuwBIXH9Yo MhgavFO5YqhpnVXMrlgIN8cq0aQmK/o= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:50 2024 by rpki-client on console-ams.rpki-client.org