$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa File: 6c3485d6-1237-32dd-8713-2aed82f2e07d.roa (raw, json) Hash identifier: Uc5Q04VrMdwBXKrZPfwoSflHB83CRb9+X5JzjtMR0lE= Subject key identifier: A5:07:59:DA:5F:9D:BD:B8:FA:17:46:E3:18:9C:5A:62:B2:8C:E0:7E Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584726D07AF506F4A1C93DF19EC0 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 396982 IP address blocks: 170.10.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:7a:f5:06:f4:a1:c9:3d:f1:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=d49098cc-c00d-4558-83d7-c59506fde692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:49:65:23:3e:21:74:a6:15:e1:c1:9a:92: 12:98:79:ca:65:e2:5b:a2:3e:32:d0:23:cd:9b:76: f5:ac:25:7a:c3:13:f9:ad:72:82:9f:00:bc:95:3d: eb:aa:92:35:e8:97:44:90:e8:6d:4e:af:08:e8:e3: d5:fb:14:a3:5f:6b:d4:2b:24:67:50:7a:b6:5e:6d: b5:9d:e7:30:50:96:9c:30:33:ab:a1:ef:2c:98:96: 81:76:ab:70:01:7f:85:14:bc:18:3c:79:2a:f7:05: 75:3e:97:1b:bf:07:ea:e6:b7:a4:11:7a:0c:df:8a: 37:d9:9d:bd:97:85:b1:22:99:2e:3f:53:15:01:6e: 02:3e:60:c7:96:7b:6a:28:f8:f8:c6:94:d4:86:5d: 3d:4a:b4:2e:67:f1:a2:85:49:d4:d9:ac:63:f5:18: 71:23:dc:d6:af:f4:7f:16:4d:31:ca:fb:1e:23:03: 7f:1d:d9:e6:bf:a0:0c:ae:bc:ac:67:28:16:07:5c: 7a:89:2c:81:b5:86:77:4a:69:10:eb:99:a2:49:1b: a1:54:d5:9c:e0:91:54:58:23:44:b6:2d:df:85:90: 3f:70:de:27:7e:fa:7f:32:55:d5:1d:67:7b:ae:e4: 1e:d6:9a:fe:40:46:c0:e8:40:57:c5:f6:7f:a6:b2: 69:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:07:59:DA:5F:9D:BD:B8:FA:17:46:E3:18:9C:5A:62:B2:8C:E0:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:43:3f:32:2f:9c:25:77:7d:53:00:19:f2:3a:7a:f5:45:b4: 52:23:a1:3c:e4:fc:f3:79:70:02:30:6e:3c:01:bb:55:cd:c1: 4d:62:f7:fb:12:fb:71:d7:17:2b:e1:dc:5f:54:c8:f0:ae:68: 4d:90:83:63:f4:9c:c1:eb:65:3b:03:87:84:46:b9:00:50:66: 63:c3:13:0c:40:17:48:9b:f6:5b:d0:e2:39:e2:db:f0:bc:27: 6a:59:be:cd:c5:0e:62:92:fa:99:2a:2b:db:c3:eb:0f:89:8e: ea:08:93:1b:4b:05:2d:5a:38:92:c0:96:a8:e2:e5:30:09:ca: cd:87:34:9f:79:79:15:e9:75:a5:55:16:0b:07:25:7a:c9:57: fe:90:70:5a:d7:1a:87:b2:0c:43:89:fc:1e:ff:0f:fc:3b:12: 5b:9f:c1:33:68:fc:48:39:b2:93:4e:4c:9c:1b:1e:d3:4f:f1: 89:31:69:54:b2:c4:5c:6c:f4:38:37:1f:dd:2d:4a:d6:db:31: ca:30:bc:2f:58:d7:3b:9d:69:03:db:9b:1b:ed:d5:d2:df:8e: 7a:f3:65:31:5f:34:6c:8b:11:06:5d:ec:34:28:28:54:5e:f5: 8d:f4:42:9f:a4:f1:f4:33:b5:03:6b:04:d3:c6:66:d5:67:b2: 22:11:8b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0Hr1BvShyT3xnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk ZDQ5MDk4Y2MtYzAwZC00NTU4LTgzZDctYzU5NTA2ZmRlNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBpJZSM+IXSmFeHBmpISmHnKZeJboj4y0CPN m3b1rCV6wxP5rXKCnwC8lT3rqpI16JdEkOhtTq8I6OPV+xSjX2vUKyRnUHq2Xm21 necwUJacMDOroe8smJaBdqtwAX+FFLwYPHkq9wV1Ppcbvwfq5rekEXoM34o32Z29 l4WxIpkuP1MVAW4CPmDHlntqKPj4xpTUhl09SrQuZ/GihUnU2axj9RhxI9zWr/R/ Fk0xyvseIwN/Hdnmv6AMrrysZygWB1x6iSyBtYZ3SmkQ65miSRuhVNWc4JFUWCNE ti3fhZA/cN4nfvp/MlXVHWd7ruQe1pr+QEbA6EBXxfZ/prJpMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUHWdpfnb24+hdG4xicWmKyjOB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvNmMzNDg1ZDYtMTIzNy0z MmRkLTg3MTMtMmFlZDgyZjJlMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpDPzIvnCV3fVMAGfI6evVFtFIjoTzk/PN5cAIwbjwBu1XNwU1i9/sS +3HXFyvh3F9UyPCuaE2Qg2P0nMHrZTsDh4RGuQBQZmPDEwxAF0ib9lvQ4jni2/C8 J2pZvs3FDmKS+pkqK9vD6w+JjuoIkxtLBS1aOJLAlqji5TAJys2HNJ95eRXpdaVV FgsHJXrJV/6QcFrXGoeyDEOJ/B7/D/w7ElufwTNo/Eg5spNOTJwbHtNP8YkxaVSy xFxs9Dg3H90tStbbMcowvC9Y1zudaQPbmxvt1dLfjnrzZTFfNGyLEQZd7DQoKFRe 9Y30Qp+k8fQztQNrBNPGZtVnsiIRi4w= -----END CERTIFICATE-----Generated at Sun Nov 24 23:11:59 2024 by rpki-client on console-ams.rpki-client.org