$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa File: bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa (raw, json) Hash identifier: OqHxo5Ax1i/UYGeAkKiIttfm0kM0bH5NrcQsjSy4PLQ= Subject key identifier: CB:B1:67:CF:DA:A3:7A:FA:CE:87:C0:06:B3:58:17:02:59:4C:07:E6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E8F5051BF751C81E1750FE40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 70.32.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:05:1b:f7:51:c8:1e:17:50:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=24654859-835a-46f2-bbde-64c50ee24965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:76:db:bb:b2:9d:50:00:48:89:05:59:e7: f5:8b:95:79:a4:19:aa:4e:da:bf:9c:90:9b:bc:8d: 16:5c:ba:56:69:11:0b:01:57:b6:bd:50:97:9a:9e: c5:d1:9f:5c:cc:f5:6e:f6:b7:00:77:30:1a:2c:c9: ba:47:f0:e3:24:23:d5:90:15:c1:15:ca:fc:f8:fa: 0f:48:e2:10:07:24:23:38:33:23:d2:b5:d8:d9:aa: 7e:b7:e9:aa:f1:3a:51:d5:e4:8b:c3:3a:c3:55:81: 5c:04:92:cd:e0:3a:55:e1:e3:77:48:dc:bd:9c:1a: 6a:5c:b8:f0:33:6b:ce:93:63:dd:1d:b9:76:ad:63: 7d:19:0f:a6:db:24:81:76:be:05:80:69:b3:6d:1a: db:e4:9c:f9:73:bb:27:2f:b1:fe:ab:c4:e9:a6:3c: b7:fc:8f:b3:35:9e:fd:e8:06:51:0e:4f:72:7b:ce: d3:54:d9:50:bb:fb:dc:67:43:a6:a9:69:a6:f5:02: d0:bb:8c:bf:cc:48:26:06:5f:60:74:bd:58:53:09: 2f:c3:7b:65:b5:b5:95:10:09:97:33:c5:8c:8c:0f: a8:30:53:56:ee:42:f1:43:66:1b:06:3a:f2:f7:8c: 77:32:09:2d:c4:9d:aa:e7:43:aa:30:e3:07:c5:a2: 68:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B1:67:CF:DA:A3:7A:FA:CE:87:C0:06:B3:58:17:02:59:4C:07:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:cf:ef:58:25:b1:85:5c:90:dc:8e:bb:47:8f:f7:d8:c2:61: 82:2d:27:a7:31:26:cd:05:51:00:0c:41:9e:d5:53:02:36:99: 65:8e:82:e6:bc:2a:90:0a:81:90:14:ec:79:26:da:7f:c9:d2: 56:c7:95:0b:cc:35:37:0a:e7:ac:1a:1a:88:46:ac:b5:50:dd: 5e:5b:3e:e4:f9:5b:24:a8:a5:75:76:fe:0f:b4:5b:f7:1d:55: 30:7f:f0:e1:c5:19:f8:8a:05:2f:64:02:b5:32:a7:19:38:9a: 30:25:96:24:8e:19:5d:02:15:25:16:20:68:95:b7:aa:0a:2d: 17:5d:04:ae:29:fa:7c:52:50:90:4f:6b:fb:6c:14:ef:04:2b: 34:dd:ac:3d:f6:e1:fa:33:0f:b7:57:91:d8:04:f0:a9:cd:69: 26:e3:00:39:41:fa:28:a8:95:00:bc:58:53:58:37:35:1d:ad: 95:ed:58:47:e4:b6:b4:2a:69:ac:2f:2a:a7:3d:4e:22:aa:1d: 1d:9f:df:dd:81:f3:53:11:9a:ad:4b:11:33:ec:06:a8:b1:81: cf:62:6f:db:10:e8:da:28:ea:26:e4:a9:85:b0:f9:03:0d:b8: 50:84:55:52:0d:d2:5a:f5:3a:80:5b:b1:9e:9e:78:d9:f8:dc: 66:23:c7:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9QUb91HIHhdQ/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MjQ2NTQ4NTktODM1YS00NmYyLWJiZGUtNjRjNTBlZTI0OTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpJ227uynVAASIkFWef1i5V5pBmqTtq/nJCb vI0WXLpWaRELAVe2vVCXmp7F0Z9czPVu9rcAdzAaLMm6R/DjJCPVkBXBFcr8+PoP SOIQByQjODMj0rXY2ap+t+mq8TpR1eSLwzrDVYFcBJLN4DpV4eN3SNy9nBpqXLjw M2vOk2PdHbl2rWN9GQ+m2ySBdr4FgGmzbRrb5Jz5c7snL7H+q8Tppjy3/I+zNZ79 6AZRDk9ye87TVNlQu/vcZ0OmqWmm9QLQu4y/zEgmBl9gdL1YUwkvw3tltbWVEAmX M8WMjA+oMFNW7kLxQ2YbBjry94x3MgktxJ2q50OqMOMHxaJomQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuxZ8/ao3r6zofABrNYFwJZTAfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmFiMzdiNWQtNTVkYi0z ZjU3LWEwYTYtNWQzM2MzZGRjOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTP71glsYVckNyOu0eP99jCYYItJ6cxJs0FUQAMQZ7VUwI2mWWOgua8 KpAKgZAU7Hkm2n/J0lbHlQvMNTcK56waGohGrLVQ3V5bPuT5WySopXV2/g+0W/cd VTB/8OHFGfiKBS9kArUypxk4mjAlliSOGV0CFSUWIGiVt6oKLRddBK4p+nxSUJBP a/tsFO8EKzTdrD324fozD7dXkdgE8KnNaSbjADlB+iiolQC8WFNYNzUdrZXtWEfk trQqaawvKqc9TiKqHR2f392B81MRmq1LETPsBqixgc9ib9sQ6Noo6ibkqYWw+QMN uFCEVVIN0lr1OoBbsZ6eeNn43GYjx6A= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:16 2024 by rpki-client on console-fra.rpki-client.org