$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa File: 3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa (raw, json) Hash identifier: AtovKNbtJ+3LLUL6eBlw+lp64c5/6DEb9+WFM0Ev820= Subject key identifier: 78:EF:28:1B:46:1E:AE:D9:41:43:2C:12:1C:1E:58:9D:67:79:4C:9F Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F432858474850A36F527DEB5D6C0A6D40 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 14618 IP address blocks: 192.184.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:a3:6f:52:7d:eb:5d:6c:0a:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=5888c927-9caf-4628-9899-25b3509bd1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:2a:2e:53:ae:74:51:af:bc:e6:96:ba:1d: b9:c3:0a:66:03:a5:30:b6:cc:81:87:d7:95:54:1e: c1:a9:e4:8c:38:c5:0a:27:65:ec:72:74:ed:a3:7e: 83:79:2c:17:2c:d9:95:33:01:3f:37:94:28:b9:75: 45:da:51:2a:34:d5:4c:08:53:c2:01:7b:ed:be:58: 42:ac:b1:ed:f9:65:82:de:73:95:45:09:5e:f4:c5: e1:c0:ba:20:68:2f:c6:24:bf:d1:d4:62:ac:94:33: f3:6a:4d:2e:97:90:e0:75:27:57:f8:e0:24:5a:03: a7:9e:e5:af:80:f4:58:c9:eb:f1:6d:ae:d2:2f:a7: 52:ef:5c:73:09:0e:b1:75:ea:8d:3a:15:71:a5:49: 20:d9:9e:07:50:df:e0:41:d3:18:3a:1e:6d:20:2b: ef:97:00:97:ac:f5:e2:ed:13:73:bc:dd:f4:ff:72: 6f:56:2c:f5:52:93:be:61:2f:63:fe:86:50:6c:55: 23:02:7c:de:f9:31:a3:91:90:df:c3:e6:42:ba:67: 59:6c:de:fc:ea:11:0b:13:ba:5b:35:08:2b:f6:b4: 78:91:53:26:9c:1d:d3:e5:b8:93:09:44:de:61:34: 77:e8:e5:07:b6:7c:97:d7:e6:33:21:d8:49:b3:76: 72:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EF:28:1B:46:1E:AE:D9:41:43:2C:12:1C:1E:58:9D:67:79:4C:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a5:21:26:d9:35:9e:58:f2:9f:2d:95:52:db:c0:11:57:53: d8:87:b2:57:72:45:2f:22:85:9b:7d:ff:53:ad:d5:c1:b9:0a: d3:e6:84:a1:18:af:b9:af:cc:f8:23:e7:e9:f6:da:cd:59:4e: 67:ec:2a:cf:95:82:7a:8f:d1:9d:4f:35:84:a6:b0:dd:76:d7: 7d:c7:82:e3:5f:6d:bb:35:40:b2:b3:b6:0a:f6:f9:04:86:1b: d1:98:d1:3d:47:9f:73:4d:0e:79:d6:f6:7a:32:36:e8:6d:59: 85:4b:ee:a5:7e:f3:2b:63:af:8e:f8:88:6c:8a:98:5f:15:c1: 4e:58:8a:7d:31:36:1c:a8:81:77:5a:0a:b2:d6:72:e3:34:e1: 0d:2f:d0:99:b8:76:a3:2c:59:7f:66:0f:80:75:46:bf:40:7a: 40:3b:cc:4f:af:21:30:3a:53:68:92:e5:ee:4f:bc:bc:7e:eb: 51:94:b9:7f:a0:64:64:5b:d3:bd:d2:e9:b6:90:36:17:72:43: e8:87:f4:16:ae:c2:24:b2:cb:02:73:97:70:e5:d3:ac:57:0b: 67:3e:e7:62:83:eb:1b:99:66:0d:ee:68:61:eb:05:4e:16:2a: 87:22:e3:1b:57:bf:fc:77:f0:d1:63:f4:0f:a2:17:86:6f:5e: a4:27:6a:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdIUKNvUn3rXWwKbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk NTg4OGM5MjctOWNhZi00NjI4LTk4OTktMjViMzUwOWJkMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv4qLlOudFGvvOaWuh25wwpmA6UwtsyBh9eV VB7BqeSMOMUKJ2XscnTto36DeSwXLNmVMwE/N5QouXVF2lEqNNVMCFPCAXvtvlhC rLHt+WWC3nOVRQle9MXhwLogaC/GJL/R1GKslDPzak0ul5DgdSdX+OAkWgOnnuWv gPRYyevxba7SL6dS71xzCQ6xdeqNOhVxpUkg2Z4HUN/gQdMYOh5tICvvlwCXrPXi 7RNzvN30/3JvViz1UpO+YS9j/oZQbFUjAnze+TGjkZDfw+ZCumdZbN786hELE7pb NQgr9rR4kVMmnB3T5biTCUTeYTR36OUHtnyX1+YzIdhJs3ZynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjvKBtGHq7ZQUMsEhweWJ1neUyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvM2FiNGViYWYtYmU4MC0z MTNiLWFmYmEtMmQxZmNmM2Q0ZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOlISbZNZ5Y8p8tlVLbwBFXU9iHsldyRS8ihZt9/1Ot1cG5CtPmhKEY r7mvzPgj5+n22s1ZTmfsKs+VgnqP0Z1PNYSmsN12133HguNfbbs1QLKztgr2+QSG G9GY0T1Hn3NNDnnW9noyNuhtWYVL7qV+8ytjr474iGyKmF8VwU5Yin0xNhyogXda CrLWcuM04Q0v0Jm4dqMsWX9mD4B1Rr9AekA7zE+vITA6U2iS5e5PvLx+61GUuX+g ZGRb073S6baQNhdyQ+iH9BauwiSyywJzl3Dl06xXC2c+52KD6xuZZg3uaGHrBU4W Koci4xtXv/x38NFj9A+iF4ZvXqQnamA= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:42 2024 by rpki-client on console-ams.rpki-client.org