$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/daa2fabc-9c56-318e-90b1-cadec688c590.roa File: daa2fabc-9c56-318e-90b1-cadec688c590.roa (raw, json) Hash identifier: r8p5nWuYSKv3mVzsM6Kd+2B2XS9cwAsLIXOsv9x4DpI= Subject key identifier: 42:81:19:F2:7D:5C:E5:B0:E3:26:26:D5:47:8E:83:45:3F:B3:46:8A Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F432858471AF1B185A4E1C820410E5E40 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/daa2fabc-9c56-318e-90b1-cadec688c590.roa Signing time: Wed 04 Sep 2024 18:57:57 +0000 ROA not before: Wed 04 Sep 2024 18:57:57 +0000 ROA not after: Tue 03 Dec 2024 19:57:57 +0000 asID: 5645 IP address blocks: 24.246.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1a:f1:b1:85:a4:e1:c8:20:41:0e:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Sep 4 18:57:57 2024 GMT Not After : Dec 3 19:57:57 2024 GMT Subject: CN=3f0aa85c-fc94-4640-bf3f-ed1ed0ff5c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c6:ca:fb:a4:fc:2d:b9:d6:09:1b:8b:13:fc: c2:86:82:3f:d4:4c:c3:fb:23:33:4d:dc:32:f7:85: 82:0a:c8:06:bf:c8:a2:5e:25:ad:3b:29:2e:4b:e0: 6d:bd:30:a1:35:71:45:00:3d:e4:bb:b5:6a:3f:47: 58:a1:c6:28:ba:6a:3b:9c:26:0c:b2:c9:5e:28:38: 3a:39:37:af:e7:9a:4a:59:ef:70:d6:03:34:e2:be: 12:49:34:45:97:c1:54:3e:d2:6a:35:24:0a:e0:a7: 79:62:f7:aa:53:8b:35:d7:90:fd:34:8a:0c:f3:9d: bd:48:85:dd:7a:bf:7c:2b:bd:13:0a:ff:7a:ea:42: 36:45:dc:4d:09:2a:6c:90:fa:04:58:11:35:ca:80: ef:ea:ce:45:f4:82:4e:67:f9:c1:d6:b1:8d:ea:b6: f5:81:33:d8:a0:87:19:ae:9a:01:1e:de:8e:13:6e: 07:d4:e1:3a:40:a5:46:e0:bc:0c:f7:dc:4f:4d:9e: 5e:e9:be:b4:bc:7b:e6:7b:78:55:13:22:b5:37:58: 17:1b:5c:86:4f:9e:9d:6a:66:09:ea:41:3d:b4:7f: 0c:92:00:f5:ac:eb:3c:5a:6f:8e:bd:66:18:2e:ca: 93:ab:35:9e:25:20:35:bd:84:8a:b7:4b:48:f0:06: 8f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:81:19:F2:7D:5C:E5:B0:E3:26:26:D5:47:8E:83:45:3F:B3:46:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/daa2fabc-9c56-318e-90b1-cadec688c590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 24.246.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:24:61:4a:33:e3:f1:bc:49:ff:ec:c9:1d:76:56:37:14:50: 8d:04:f4:bb:70:a0:5d:19:d2:e3:51:cc:cf:17:cd:2a:a9:2b: 95:e2:38:7e:f4:28:8d:1a:fb:09:7b:29:37:43:1c:34:b6:30: bc:74:f7:2d:59:2f:23:8b:77:c8:01:02:79:80:c2:26:01:b3: 46:de:51:92:c9:b6:c0:7a:99:e6:3d:4e:04:d2:25:e7:1c:59: 1f:3e:9b:ba:a6:85:35:f4:a6:51:be:8c:ad:32:2f:15:42:01: 61:fb:f1:e3:5b:2d:69:b8:33:7e:f5:49:22:9e:da:f3:06:1c: 03:71:21:3a:2b:da:fd:3b:9e:a3:c7:ea:3b:9c:28:35:e3:eb: 9f:9a:84:d3:d4:af:13:54:c5:40:52:99:90:63:23:4d:65:b0: fb:db:10:46:ad:a8:fc:19:91:e5:05:45:f5:25:03:6b:4b:55: 68:3c:ab:11:e6:17:ed:15:d0:eb:1b:5d:e4:50:b9:6d:99:6c: 10:48:0f:8c:d7:54:fe:4a:5d:b2:31:68:11:44:3f:93:d2:dc: 3e:6e:4c:e7:11:2e:41:9f:f6:47:4d:47:b8:65:3e:04:31:85: 80:ef:1e:d4:db:2a:9e:f1:72:db:56:b5:d0:89:80:fd:72:f1: 42:c4:12:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEca8bGFpOHIIEEOXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI0MDkwNDE4NTc1N1oXDTI0MTIwMzE5NTc1N1owLzEtMCsGA1UEAxMk M2YwYWE4NWMtZmM5NC00NjQwLWJmM2YtZWQxZWQwZmY1YzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8bK+6T8LbnWCRuLE/zChoI/1EzD+yMzTdwy 94WCCsgGv8iiXiWtOykuS+BtvTChNXFFAD3ku7VqP0dYocYoumo7nCYMssleKDg6 OTev55pKWe9w1gM04r4SSTRFl8FUPtJqNSQK4Kd5YveqU4s115D9NIoM8529SIXd er98K70TCv966kI2RdxNCSpskPoEWBE1yoDv6s5F9IJOZ/nB1rGN6rb1gTPYoIcZ rpoBHt6OE24H1OE6QKVG4LwM99xPTZ5e6b60vHvme3hVEyK1N1gXG1yGT56damYJ 6kE9tH8MkgD1rOs8Wm+OvWYYLsqTqzWeJSA1vYSKt0tI8AaP0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKBGfJ9XOWw4yYm1UeOg0U/s0aKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZGFhMmZhYmMtOWM1Ni0z MThlLTkwYjEtY2FkZWM2ODhjNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGPYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUkYUoz4/G8Sf/syR12VjcUUI0E9LtwoF0Z0uNRzM8XzSqpK5XiOH70 KI0a+wl7KTdDHDS2MLx09y1ZLyOLd8gBAnmAwiYBs0beUZLJtsB6meY9TgTSJecc WR8+m7qmhTX0plG+jK0yLxVCAWH78eNbLWm4M371SSKe2vMGHANxITor2v07nqPH 6jucKDXj65+ahNPUrxNUxUBSmZBjI01lsPvbEEatqPwZkeUFRfUlA2tLVWg8qxHm F+0V0OsbXeRQuW2ZbBBID4zXVP5KXbIxaBFEP5PS3D5uTOcRLkGf9kdNR7hlPgQx hYDvHtTbKp7xcttWtdCJgP1y8ULEEuM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:33 2024 by rpki-client on console-ams.rpki-client.org