$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/738ca01d-c305-33d7-9286-16441f2c8e35.roa File: 738ca01d-c305-33d7-9286-16441f2c8e35.roa (raw, json) Hash identifier: ZUFPWz34PIZbYkwf+lmaqSGcNSjzDwt8mAm1WSq4pa4= Subject key identifier: 6B:49:71:AB:B1:7D:D9:26:CD:45:0D:4D:EF:6A:05:E8:58:2C:15:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847081B1266285D62D2AC137680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/738ca01d-c305-33d7-9286-16441f2c8e35.roa Signing time: Thu 29 Aug 2024 01:00:32 +0000 ROA not before: Thu 29 Aug 2024 01:00:32 +0000 ROA not after: Wed 27 Nov 2024 02:00:32 +0000 asID: 15169 IP address blocks: 70.32.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:08:1b:12:66:28:5d:62:d2:ac:13:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 29 01:00:32 2024 GMT Not After : Nov 27 02:00:32 2024 GMT Subject: CN=da84ece3-4f55-4970-a8e0-f5bc666e46fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:48:66:1e:f4:ae:27:34:99:c2:85:9a:20:ad: 43:17:81:69:42:67:af:ce:05:24:fb:96:26:4a:a2: 25:f7:0b:97:d7:09:ac:ee:6b:b8:96:19:1c:6e:1b: db:8d:99:3b:5a:15:92:45:d5:b5:4d:9c:49:68:88: c6:14:b9:64:8e:c5:fe:eb:f4:8e:e9:51:b1:cf:fe: cc:fb:fe:5f:c1:ad:2e:ee:43:e0:de:d5:7a:8b:d4: e2:c2:49:f6:8a:7f:90:ef:8a:60:04:09:c3:b9:dc: e1:6e:e9:f4:e7:87:f2:92:e7:30:64:f6:1c:33:6d: 1c:f8:18:59:e4:0b:87:17:f1:f2:8c:a4:d8:7c:9b: 05:67:4f:dd:cd:37:9d:bc:5e:fb:73:0a:4b:61:c9: ed:ed:b2:1f:8b:cc:d0:ef:a5:c6:5e:c7:62:68:9f: 42:e8:6e:94:a3:8c:99:b5:7e:15:68:6a:5e:45:d9: aa:a1:ec:fc:ee:70:12:76:53:c2:f8:0b:2b:0e:b3: de:10:ad:38:7f:05:f1:67:f8:f7:72:22:b2:12:33: 34:b7:f6:c7:93:3b:2f:20:17:7b:35:e8:24:b7:12: 82:24:9e:5f:01:c1:0f:cd:77:e0:6e:09:c0:e1:fa: 8c:7e:61:39:ff:df:50:25:88:ae:ea:30:e1:f4:58: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:49:71:AB:B1:7D:D9:26:CD:45:0D:4D:EF:6A:05:E8:58:2C:15:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/738ca01d-c305-33d7-9286-16441f2c8e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e0:77:00:77:7a:e9:74:e6:0b:9d:ec:1c:91:b2:cb:cb:47: ec:0e:5b:fd:36:4f:53:c5:6c:16:86:51:e9:1a:c1:01:66:64: 8b:49:32:d5:84:8f:26:b4:61:17:8f:40:2f:89:3a:60:81:e2: 9f:6d:89:66:f2:50:fd:a8:8a:f4:8b:2d:09:e6:ad:a1:63:bd: 25:1c:fd:29:fe:86:2d:0b:3e:71:1c:79:5d:c5:29:cd:cd:2f: 93:37:da:de:c2:34:c4:2f:3f:c7:7b:48:40:d7:d6:da:e1:d2: 02:11:ec:71:2b:2c:2a:3f:3c:ce:be:75:f3:e8:c7:a8:a0:c8: 70:db:8d:e3:2d:19:64:f9:26:81:06:42:a3:79:76:3d:80:26: c3:b8:25:3f:e8:97:7a:11:8d:41:50:b1:5e:44:e9:0f:00:49: 74:c9:31:4e:39:a3:71:64:be:89:75:90:eb:e7:12:3e:5a:4e: 62:74:5e:1e:5d:dc:9b:ba:bf:2a:53:f8:c6:2b:85:ee:1c:8e: 9d:4d:48:fc:bb:73:eb:67:ba:e8:c0:51:0a:42:a3:eb:c9:2b: e5:99:6e:85:36:d6:11:c6:89:0c:76:50:44:34:b5:56:b5:a3: e3:3b:5d:5e:fc:9e:3f:6b:0f:a4:5c:d5:40:d5:5d:50:c4:cb: 2d:1e:44:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcIGxJmKF1i0qwTdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDgyOTAxMDAzMloXDTI0MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk ZGE4NGVjZTMtNGY1NS00OTcwLWE4ZTAtZjViYzY2NmU0NmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUhmHvSuJzSZwoWaIK1DF4FpQmevzgUk+5Ym SqIl9wuX1wms7mu4lhkcbhvbjZk7WhWSRdW1TZxJaIjGFLlkjsX+6/SO6VGxz/7M +/5fwa0u7kPg3tV6i9Tiwkn2in+Q74pgBAnDudzhbun054fykucwZPYcM20c+BhZ 5AuHF/HyjKTYfJsFZ0/dzTedvF77cwpLYcnt7bIfi8zQ76XGXsdiaJ9C6G6Uo4yZ tX4VaGpeRdmqoez87nASdlPC+AsrDrPeEK04fwXxZ/j3ciKyEjM0t/bHkzsvIBd7 NegktxKCJJ5fAcEPzXfgbgnA4fqMfmE5/99QJYiu6jDh9FiJ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtJcauxfdkmzUUNTe9qBehYLBVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzM4Y2EwMWQtYzMwNS0z M2Q3LTkyODYtMTY0NDFmMmM4ZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELgdwB3eul05gud7ByRssvLR+wOW/02T1PFbBaGUekawQFmZItJMtWE jya0YRePQC+JOmCB4p9tiWbyUP2oivSLLQnmraFjvSUc/Sn+hi0LPnEceV3FKc3N L5M32t7CNMQvP8d7SEDX1trh0gIR7HErLCo/PM6+dfPox6igyHDbjeMtGWT5JoEG QqN5dj2AJsO4JT/ol3oRjUFQsV5E6Q8ASXTJMU45o3Fkvol1kOvnEj5aTmJ0Xh5d 3Ju6vypT+MYrhe4cjp1NSPy7c+tnuujAUQpCo+vJK+WZboU21hHGiQx2UEQ0tVa1 o+M7XV78nj9rD6Rc1UDVXVDEyy0eRAs= -----END CERTIFICATE-----Generated at Sat Sep 7 22:45:03 2024 by rpki-client on console-ams.rpki-client.org