$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55cb962a-d487-3220-a541-2f39c0af0b8b.roa File: 55cb962a-d487-3220-a541-2f39c0af0b8b.roa (raw, json) Hash identifier: rtYqyY3UUotM4mKMfE8cnHvIbm4wtwH2/v+mlgO4REM= Subject key identifier: B4:34:EC:5E:66:A2:1F:C2:04:CA:90:6F:35:31:2B:3D:88:DB:A6:D3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E7080129A03CB4102C3F280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55cb962a-d487-3220-a541-2f39c0af0b8b.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 396982 IP address blocks: 70.32.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:80:12:9a:03:cb:41:02:c3:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=6760dca5-0ce4-4900-96a4-f3ce9d6953bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:45:81:83:33:7e:40:59:2a:f7:4e:72:b0: 7b:9f:de:f4:5e:15:3c:3c:f9:22:ea:c1:32:d0:2e: 67:40:6b:44:65:45:27:9e:b6:76:1f:1f:8d:d0:43: 9a:4d:d8:ed:2c:3c:c2:0c:9b:3b:9c:41:c1:cd:5b: 33:2e:d0:b1:ff:26:67:9d:16:da:80:74:b7:64:15: c8:b6:67:14:9b:b6:85:84:4e:35:d8:e1:c3:68:02: 38:8f:32:d2:8d:14:56:ca:0e:4f:cf:3f:aa:50:cf: 1d:ae:c8:33:55:5a:9c:b4:11:29:34:05:35:be:9d: b7:40:b9:a8:2d:d4:f6:5c:47:92:dc:f4:c3:04:4a: 5c:92:c0:b2:9a:c9:af:ff:66:7c:35:9f:6c:35:91: 2a:a1:d6:54:62:54:cc:95:fb:b7:f7:08:ea:4a:f8: f5:15:be:5e:19:c2:f0:f6:82:a0:a4:a9:a8:b2:ff: 7d:60:9a:4e:e1:19:ae:b8:04:8d:5a:ae:49:d8:50: 20:8e:98:db:82:2f:51:3b:4b:ce:b5:a1:bc:7b:da: 70:83:e1:27:43:60:53:0e:12:6f:a7:41:7d:16:91: c5:db:dd:0b:ad:fb:4b:44:db:30:34:56:2d:a8:49: 05:86:58:3b:2c:d1:96:7f:dc:1b:f4:f2:c4:aa:99: 1c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:34:EC:5E:66:A2:1F:C2:04:CA:90:6F:35:31:2B:3D:88:DB:A6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55cb962a-d487-3220-a541-2f39c0af0b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:71:df:14:81:ea:ac:9d:30:32:a4:86:8b:a9:fd:cc:ad:6d: 7c:22:ff:7d:f9:6f:95:f3:6b:a7:12:d6:8c:94:3e:58:58:72: 7d:23:10:f2:2c:17:60:87:42:f4:79:32:8a:21:f8:24:7f:91: 67:d0:e9:19:86:1b:cc:75:4e:87:18:04:69:2d:43:88:c6:96: f0:a1:30:40:d7:8e:b4:b0:3f:05:ff:af:0a:e6:25:d8:d1:2d: 80:f7:8d:aa:09:1b:4c:79:40:c6:6b:c2:0a:38:c9:82:c7:23: 99:e0:67:55:f9:74:fa:56:41:99:81:a8:0c:6e:a5:5b:1d:05: b5:e7:f6:eb:45:37:2a:41:97:40:3c:89:5d:c8:a5:2d:fa:0b: 3b:66:18:a6:fd:a9:72:c4:49:73:47:eb:ff:8e:56:0f:4f:89: 0a:a1:a6:03:3f:b7:cf:1e:09:96:ed:33:9a:c1:5b:eb:9a:d5: 5a:14:72:e0:20:e9:55:16:a8:fa:da:00:0b:e2:c1:29:ff:cc: 3b:7c:8b:0a:f0:26:f8:cb:d3:d4:ff:4b:aa:17:f5:d6:a1:24: 53:4c:f1:a6:2b:3a:02:4a:30:c3:70:b3:dc:23:f8:60:f6:aa: 42:47:f6:50:08:c5:ff:bf:f0:42:ec:74:68:b2:ac:90:2a:bf: 75:36:a8:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecIASmgPLQQLD8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk Njc2MGRjYTUtMGNlNC00OTAwLTk2YTQtZjNjZTlkNjk1M2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf9FgYMzfkBZKvdOcrB7n970XhU8PPki6sEy 0C5nQGtEZUUnnrZ2Hx+N0EOaTdjtLDzCDJs7nEHBzVszLtCx/yZnnRbagHS3ZBXI tmcUm7aFhE412OHDaAI4jzLSjRRWyg5Pzz+qUM8drsgzVVqctBEpNAU1vp23QLmo LdT2XEeS3PTDBEpcksCymsmv/2Z8NZ9sNZEqodZUYlTMlfu39wjqSvj1Fb5eGcLw 9oKgpKmosv99YJpO4RmuuASNWq5J2FAgjpjbgi9RO0vOtaG8e9pwg+EnQ2BTDhJv p0F9FpHF290LrftLRNswNFYtqEkFhlg7LNGWf9wb9PLEqpkciQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ07F5moh/CBMqQbzUxKz2I26bTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTVjYjk2MmEtZDQ4Ny0z MjIwLWE1NDEtMmYzOWMwYWYwYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1x3xSB6qydMDKkhoup/cytbXwi/335b5Xza6cS1oyUPlhYcn0jEPIs F2CHQvR5Mooh+CR/kWfQ6RmGG8x1TocYBGktQ4jGlvChMEDXjrSwPwX/rwrmJdjR LYD3jaoJG0x5QMZrwgo4yYLHI5ngZ1X5dPpWQZmBqAxupVsdBbXn9utFNypBl0A8 iV3IpS36CztmGKb9qXLESXNH6/+OVg9PiQqhpgM/t88eCZbtM5rBW+ua1VoUcuAg 6VUWqPraAAviwSn/zDt8iwrwJvjL09T/S6oX9dahJFNM8aYrOgJKMMNws9wj+GD2 qkJH9lAIxf+/8ELsdGiyrJAqv3U2qHM= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:11 2024 by rpki-client on console-ams.rpki-client.org