$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/694ba017-8f45-370a-b378-b1d875587774.roa File: 694ba017-8f45-370a-b378-b1d875587774.roa (raw, json) Hash identifier: 2IZuwQsOeQmJcTVGoOtuVMcwBHmXiP39aszNYXZSG0A= Subject key identifier: D6:F5:BA:9C:6A:5A:A1:B9:EB:AA:3D:99:6C:35:69:5B:7E:76:B1:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E8F526A994C87D627C7BF300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/694ba017-8f45-370a-b378-b1d875587774.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 70.32.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:26:a9:94:c8:7d:62:7c:7b:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=d3167f64-5856-4c28-ad40-712d0fd1a885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:db:a6:c4:e9:76:33:57:a0:2d:04:c9:15:5a: 1a:14:30:df:49:03:9d:74:81:80:23:a4:ad:42:14: e8:2f:00:c7:94:66:13:d8:17:72:06:1c:d4:fe:33: 1a:7b:30:a2:af:65:84:d6:d0:d7:6f:16:58:5d:fa: 6c:a9:12:c9:cf:7f:6b:fb:9f:01:6c:81:b6:0f:b1: 1f:2c:55:ff:d5:be:c8:98:ff:fb:f3:eb:f6:d5:25: e6:63:9b:24:d8:9c:b9:34:2a:0b:28:2b:d9:0c:e6: d2:fb:9f:0f:a6:32:df:ce:3a:10:59:b4:40:b2:ed: 9b:87:10:53:18:88:32:72:ca:5e:2e:30:2f:c7:2a: e4:3b:23:f6:d2:96:c0:a7:35:7f:0e:8a:f8:43:3f: 73:47:5e:cd:13:bb:c3:8e:06:07:f9:8c:3d:e3:e8: 9f:83:2d:5b:70:3f:92:ce:c6:66:9a:9f:c0:ea:54: c8:4e:30:79:c5:ce:90:be:c2:e3:d9:6b:c7:62:be: 3e:2b:71:93:f5:9e:e3:ea:48:f5:3b:71:60:a8:dc: 1c:99:af:b8:61:ec:91:dd:81:9a:c2:8b:18:44:f0: ed:47:32:14:32:89:63:35:93:74:4e:83:65:32:cc: 43:c9:82:f9:78:6e:4d:09:ae:9d:e6:e7:d6:96:1a: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F5:BA:9C:6A:5A:A1:B9:EB:AA:3D:99:6C:35:69:5B:7E:76:B1:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/694ba017-8f45-370a-b378-b1d875587774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:82:7a:a1:13:62:f0:5d:76:b8:e2:b4:54:98:95:08:6f:84: 87:ba:e7:41:93:9f:c6:a2:bc:15:06:c3:b8:aa:81:02:a8:a5: f4:b6:f4:44:7b:35:08:ec:e4:e8:b2:56:8e:27:63:c2:37:08: c3:a9:54:08:1e:ec:fc:15:3d:2c:3c:46:92:f2:7b:2b:08:36: 50:b4:b9:62:9a:61:b1:66:3f:5e:6e:09:8c:5e:54:61:17:71: 33:ed:2c:c6:ea:a8:d4:d7:ef:b0:d1:62:06:9b:51:0c:6d:c1: 2c:d6:71:00:da:17:f4:0e:ce:61:14:0d:df:07:02:54:bf:73: 39:11:f9:e2:01:e1:8a:26:90:b3:23:90:67:ef:aa:81:16:ae: 3a:c9:fe:df:77:50:32:86:17:55:1d:b1:91:39:a4:0c:1f:02: 0e:d9:2b:ea:b1:e7:f4:c4:47:89:5c:b6:87:09:75:e1:a4:cf: 2a:f8:a3:b1:19:2b:71:16:ea:e7:43:e1:eb:93:f8:31:a2:d8: e3:e9:59:b3:51:8f:ad:08:a2:e4:93:dc:4b:f3:91:0f:94:8e: 53:4d:29:4e:54:a8:96:23:6f:3a:98:05:dd:06:2d:a2:be:a6: 5a:2d:5a:aa:b2:67:ae:db:27:8e:e4:b5:39:b8:3e:f4:2c:0a: ff:ae:17:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9SaplMh9Ynx78wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDMxNjdmNjQtNTg1Ni00YzI4LWFkNDAtNzEyZDBmZDFhODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9umxOl2M1egLQTJFVoaFDDfSQOddIGAI6St QhToLwDHlGYT2BdyBhzU/jMaezCir2WE1tDXbxZYXfpsqRLJz39r+58BbIG2D7Ef LFX/1b7ImP/78+v21SXmY5sk2Jy5NCoLKCvZDObS+58PpjLfzjoQWbRAsu2bhxBT GIgycspeLjAvxyrkOyP20pbApzV/Dor4Qz9zR17NE7vDjgYH+Yw94+ifgy1bcD+S zsZmmp/A6lTITjB5xc6QvsLj2WvHYr4+K3GT9Z7j6kj1O3FgqNwcma+4YeyR3YGa wosYRPDtRzIUMoljNZN0ToNlMsxDyYL5eG5NCa6d5ufWlhravwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNb1upxqWqG566o9mWw1aVt+drEBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjk0YmEwMTctOGY0NS0z NzBhLWIzNzgtYjFkODc1NTg3Nzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyCeqETYvBddrjitFSYlQhvhIe650GTn8aivBUGw7iqgQKopfS29ER7 NQjs5OiyVo4nY8I3CMOpVAge7PwVPSw8RpLyeysINlC0uWKaYbFmP15uCYxeVGEX cTPtLMbqqNTX77DRYgabUQxtwSzWcQDaF/QOzmEUDd8HAlS/czkR+eIB4YomkLMj kGfvqoEWrjrJ/t93UDKGF1UdsZE5pAwfAg7ZK+qx5/TER4lctocJdeGkzyr4o7EZ K3EW6udD4euT+DGi2OPpWbNRj60IouST3EvzkQ+UjlNNKU5UqJYjbzqYBd0GLaK+ plotWqqyZ67bJ47ktTm4PvQsCv+uFxI= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:12 2024 by rpki-client on console-ams.rpki-client.org