$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa File: 54986207-7a58-36f6-8e77-f8161fa1649c.roa (raw, json) Hash identifier: OBJE2Yib5tDkKvKtHEYc9esZDv8uBOSYWokwTjBIBis= Subject key identifier: FD:61:93:E5:25:29:B7:18:D8:38:95:C7:71:96:28:EB:E4:28:BA:19 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F432858477BF656CDEFD8C390C86A3760 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 14500 IP address blocks: 173.244.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:56:cd:ef:d8:c3:90:c8:6a:37:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=ee27dd17-588a-4fdd-9772-9d0c263abb98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:10:97:9f:7c:52:a6:4e:33:cb:01:6f:04:1a: 84:ab:4a:77:f7:3b:02:9c:08:52:6f:64:80:2c:04: c0:a8:48:fd:a3:46:b9:52:16:d4:01:92:0f:6e:1c: e1:da:d8:2c:89:ef:0c:26:86:12:41:3b:ec:b7:b4: d0:ac:c1:36:43:10:bd:13:1f:17:d4:65:0d:34:34: e7:e8:1e:9e:dd:ce:6d:a4:2e:13:86:9d:b6:54:67: f6:51:80:85:68:c3:64:0e:be:dc:f1:ea:fd:fb:04: 3d:51:03:19:96:bd:9b:ce:b4:19:e4:58:a4:ec:ec: 40:e5:96:59:a6:02:84:c1:67:30:3e:76:b6:f9:93: 27:4d:7f:ce:f8:d9:fb:56:c8:05:cd:a9:e7:84:2e: 01:90:8b:e7:99:b3:7e:da:4e:81:1b:45:3e:5d:24: 56:dc:91:aa:14:20:94:d8:d7:d7:3a:58:92:b0:1c: c5:96:88:fa:bc:85:25:ee:5a:9e:44:89:19:df:69: 4a:39:09:0d:35:d7:51:bb:0b:cb:58:9f:f0:bb:45: bc:3c:10:58:fe:69:fa:53:4a:22:1a:04:47:2e:f3: 7d:65:ce:a4:48:74:be:da:59:95:64:48:f1:80:be: 54:dd:b6:78:2c:15:33:76:59:39:46:b5:cc:5d:3d: 76:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:61:93:E5:25:29:B7:18:D8:38:95:C7:71:96:28:EB:E4:28:BA:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 173.244.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8c:eb:22:40:f3:2d:61:dd:11:e8:85:9f:c3:f1:33:3e:84: e1:c0:c0:53:6c:a3:81:01:8c:44:30:ac:bc:f5:a2:0b:db:37: c9:62:4b:ca:c1:5c:be:8b:d5:71:16:00:14:d2:c2:a3:28:2b: d9:c1:1f:b9:41:95:87:1d:87:48:39:0e:e4:3f:0b:c1:e0:82: a6:97:29:5a:78:dc:d4:50:a6:ba:a2:0c:5c:dd:cd:63:ff:69: 82:91:2d:46:6a:2c:58:e9:48:19:54:32:6c:a5:68:74:69:78: cf:03:f2:a8:6c:1e:de:30:7b:9e:24:47:c6:1d:61:91:da:f2: 7d:1e:6d:83:7a:d0:43:9c:22:78:ee:13:b8:8b:3d:88:76:d5: 4e:50:e1:20:f8:2d:05:fc:94:b6:27:e9:d2:05:e3:fd:89:65: 28:1a:89:34:1e:23:30:11:d6:d7:39:7e:1b:6f:ce:17:9f:08: 95:41:0d:a4:51:5b:21:0a:08:d4:a3:74:d1:e6:f3:a1:9f:0b: b5:14:e2:3a:b4:4d:64:b7:c4:d8:85:55:fb:8f:43:4e:56:bc: 3e:93:b2:20:0c:8f:9f:65:55:1e:a8:25:c6:59:91:da:ec:c4: e5:d6:91:58:f8:f9:62:f6:a8:3e:56:2c:94:fa:94:f7:82:79: 4c:80:bd:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79lbN79jDkMhqN2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk ZWUyN2RkMTctNTg4YS00ZmRkLTk3NzItOWQwYzI2M2FiYjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxCXn3xSpk4zywFvBBqEq0p39zsCnAhSb2SA LATAqEj9o0a5UhbUAZIPbhzh2tgsie8MJoYSQTvst7TQrME2QxC9Ex8X1GUNNDTn 6B6e3c5tpC4Thp22VGf2UYCFaMNkDr7c8er9+wQ9UQMZlr2bzrQZ5Fik7OxA5ZZZ pgKEwWcwPna2+ZMnTX/O+Nn7VsgFzannhC4BkIvnmbN+2k6BG0U+XSRW3JGqFCCU 2NfXOliSsBzFloj6vIUl7lqeRIkZ32lKOQkNNddRuwvLWJ/wu0W8PBBY/mn6U0oi GgRHLvN9Zc6kSHS+2lmVZEjxgL5U3bZ4LBUzdlk5RrXMXT12LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1hk+UlKbcY2DiVx3GWKOvkKLoZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNTQ5ODYyMDctN2E1OC0z NmY2LThlNzctZjgxNjFmYTE2NDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyM6yJA8y1h3RHohZ/D8TM+hOHAwFNso4EBjEQwrLz1ogvbN8liS8rB XL6L1XEWABTSwqMoK9nBH7lBlYcdh0g5DuQ/C8HggqaXKVp43NRQprqiDFzdzWP/ aYKRLUZqLFjpSBlUMmylaHRpeM8D8qhsHt4we54kR8YdYZHa8n0ebYN60EOcInju E7iLPYh21U5Q4SD4LQX8lLYn6dIF4/2JZSgaiTQeIzAR1tc5fhtvzhefCJVBDaRR WyEKCNSjdNHm86GfC7UU4jq0TWS3xNiFVfuPQ05WvD6TsiAMj59lVR6oJcZZkdrs xOXWkVj4+WL2qD5WLJT6lPeCeUyAvZM= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:43 2024 by rpki-client on console-ams.rpki-client.org