$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/74c824e4-4562-3705-89a2-2170b4d3d88a.roa File: 74c824e4-4562-3705-89a2-2170b4d3d88a.roa (raw, json) Hash identifier: pMFG2h6z4cq5XtNiRzs1TzSLV1hehfHYNXV0zpU03xw= Subject key identifier: B1:9C:56:A9:6C:A1:D3:08:C3:28:0F:82:3C:90:D3:AC:27:9B:FA:10 Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Certificate serial: 010D0C9F4328584797E13FC3C4AB47A7E538D080 Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/74c824e4-4562-3705-89a2-2170b4d3d88a.roa Signing time: Sat 19 Oct 2024 13:00:42 +0000 ROA not before: Sat 19 Oct 2024 13:00:42 +0000 ROA not after: Fri 17 Jan 2025 14:00:42 +0000 asID: 33362 IP address blocks: 70.35.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:97:e1:3f:c3:c4:ab:47:a7:e5:38:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Validity Not Before: Oct 19 13:00:42 2024 GMT Not After : Jan 17 14:00:42 2025 GMT Subject: CN=8d047d91-f444-496b-99c4-2f26aa00a835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:fd:a1:d1:e1:9a:10:09:ea:d0:24:77:35: ea:be:13:c8:b4:4c:d5:6b:62:df:98:a6:1f:33:84: 36:c4:48:1b:c2:15:62:fb:d8:93:e1:ce:4d:eb:01: 59:f6:c1:f1:34:e4:63:5f:4a:1a:b5:3b:1e:89:91: c2:84:88:56:fb:a9:4e:e0:1f:6e:39:38:eb:e1:4f: d2:a2:c5:dd:08:f3:df:16:c9:4c:cf:0f:6d:e0:96: 38:d1:e2:b9:91:49:fe:2f:75:c1:75:2f:49:da:58: 6e:e9:21:fd:0b:00:ab:54:7b:98:b4:fa:d0:42:82: 9e:95:b6:52:3f:9a:1c:6f:d6:ee:42:90:08:cf:ab: 55:8a:b1:1d:9b:f7:cf:d8:72:ca:a9:24:8c:6e:34: 15:ce:67:e6:ba:6d:11:68:99:18:0f:9c:6a:91:83: 9c:fe:2e:f7:b2:44:41:c1:75:f6:7c:55:bd:05:80: f7:bb:4b:aa:96:3b:a0:e4:33:7c:43:ef:f8:87:c1: 4d:2c:1d:d7:cd:0a:06:64:c8:3b:a0:65:8d:34:9a: 95:96:1c:d9:f3:6d:83:57:e8:51:60:82:f4:d3:d7: 9e:f4:56:80:ed:6b:26:94:8d:32:94:d2:2b:09:cf: 18:66:68:7f:16:ef:42:00:f2:42:98:18:a7:eb:33: 1c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9C:56:A9:6C:A1:D3:08:C3:28:0F:82:3C:90:D3:AC:27:9B:FA:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/74c824e4-4562-3705-89a2-2170b4d3d88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl X509v3 Authority Key Identifier: keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer sbgp-ipAddrBlock: critical IPv4: 70.35.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:aa:50:aa:d6:5d:42:dc:59:67:f5:bb:e5:13:9d:09:aa:0f: 46:9c:08:cb:d1:76:cf:2b:6f:00:70:9c:fd:9d:a9:28:8e:17: 59:96:7a:94:a6:35:64:4f:e1:96:d4:39:ca:09:7c:03:55:92: 2e:32:26:31:da:54:33:8d:de:8d:26:af:f9:0f:f7:6f:a2:09: 7d:06:8a:57:8b:a8:cc:0d:2f:8a:2f:c4:61:f0:9c:89:b6:0a: 7e:e6:29:64:cb:2d:c4:a6:6f:0b:d9:6e:f5:f2:0d:69:86:91: d4:7f:3b:40:3b:ea:2d:3e:95:0c:e5:f7:62:4a:de:fd:0c:a9: 3c:a0:7a:bf:46:f0:9f:9b:b8:1e:53:3b:f6:44:ea:aa:0c:13: 6c:ac:4b:3d:e2:61:db:36:86:be:51:d9:43:ba:b2:b7:b7:da: 3a:9e:2a:19:86:af:9e:10:a4:45:ce:09:61:d7:a4:0e:66:76: 81:2b:7c:6b:ef:7b:4c:a9:69:5f:e5:40:d5:8f:62:15:69:ea: e3:9b:74:09:aa:69:8b:cd:2c:c1:e4:84:6e:ac:1f:2b:09:46: 40:17:41:8a:d9:43:19:78:7d:c8:5f:9f:be:b0:3f:39:c3:9c: 89:4d:c8:08:1a:bf:62:c4:f9:f2:65:c8:84:bf:4d:1f:1f:90: 24:6d:70:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4T/DxKtHp+U40IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm NTZmMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk OGQwNDdkOTEtZjQ0NC00OTZiLTk5YzQtMmYyNmFhMDBhODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ39odHhmhAJ6tAkdzXqvhPItEzVa2LfmKYf M4Q2xEgbwhVi+9iT4c5N6wFZ9sHxNORjX0oatTseiZHChIhW+6lO4B9uOTjr4U/S osXdCPPfFslMzw9t4JY40eK5kUn+L3XBdS9J2lhu6SH9CwCrVHuYtPrQQoKelbZS P5ocb9buQpAIz6tVirEdm/fP2HLKqSSMbjQVzmfmum0RaJkYD5xqkYOc/i73skRB wXX2fFW9BYD3u0uqljug5DN8Q+/4h8FNLB3XzQoGZMg7oGWNNJqVlhzZ822DV+hR YIL009ee9FaA7WsmlI0ylNIrCc8YZmh/Fu9CAPJCmBin6zMclQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGcVqlsodMIwygPgjyQ06wnm/oQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvNzRjODI0ZTQtNDU2Mi0z NzA1LTg5YTItMjE3MGI0ZDNkODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1 NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0 ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5 YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6qUKrWXULcWWf1u+UTnQmqD0acCMvRds8rbwBwnP2dqSiOF1mWepSm NWRP4ZbUOcoJfANVki4yJjHaVDON3o0mr/kP92+iCX0GileLqMwNL4ovxGHwnIm2 Cn7mKWTLLcSmbwvZbvXyDWmGkdR/O0A76i0+lQzl92JK3v0MqTyger9G8J+buB5T O/ZE6qoME2ysSz3iYds2hr5R2UO6sre32jqeKhmGr54QpEXOCWHXpA5mdoErfGvv e0ypaV/lQNWPYhVp6uObdAmqaYvNLMHkhG6sHysJRkAXQYrZQxl4fchfn76wPznD nIlNyAgav2LE+fJlyIS/TR8fkCRtcOY= -----END CERTIFICATE-----Generated at Sun Nov 24 22:16:08 2024 by rpki-client on console-fra.rpki-client.org