$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d0c700f9-664c-320a-9ebe-8423a5faed0d.roa File: d0c700f9-664c-320a-9ebe-8423a5faed0d.roa (raw, json) Hash identifier: JZy8ryE6D91o8hhKGixvFgzidWdyimFmEE08sMeZzSU= Subject key identifier: 55:82:A5:94:06:81:10:BC:D5:16:99:DA:A6:45:06:DC:F5:58:A0:65 Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Certificate serial: 010D0C9F43285847B5315367BB7882F829E2D600 Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d0c700f9-664c-320a-9ebe-8423a5faed0d.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 54613 IP address blocks: 134.195.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:53:67:bb:78:82:f8:29:e2:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=ecbd901a-6ee1-4cbc-8281-edfb92469ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:a1:9b:de:1e:25:ce:0c:ca:96:f5:9b:47: 44:80:26:0f:85:ec:d7:ea:f0:46:79:f7:f0:1c:19: 70:22:e7:d3:ef:12:91:b4:10:82:33:83:4e:35:f2: 8e:97:35:71:3e:ee:76:0c:95:09:73:0d:5b:8d:32: 8c:cf:1c:b5:69:ff:0c:ac:a5:b4:c6:46:c2:df:99: be:6e:c8:bc:e8:01:f0:6d:bf:8b:39:ab:4a:e5:b2: 21:e6:ed:ed:1b:e1:a6:74:f3:54:ec:f8:55:b2:a2: 05:69:66:6c:eb:18:1c:ae:65:a5:56:75:61:44:a3: d7:af:cd:c1:06:aa:b7:1e:ad:11:e2:ad:fb:e6:37: 6a:7b:cd:9d:63:f3:c0:29:fe:6f:7a:dd:0a:f7:ae: 34:e1:bb:22:74:b7:b4:80:d0:a9:fa:e3:27:82:c8: c0:db:d7:ba:44:83:44:df:a2:df:27:ad:aa:b2:d0: c8:71:3b:37:3c:1d:c1:43:6b:b9:15:4c:c4:8e:6d: 6b:d2:bc:3e:f0:6c:f7:64:01:25:cb:07:d0:eb:5b: 7b:24:71:9d:86:28:78:21:97:52:85:9a:6a:69:3d: 80:3a:28:b2:03:88:21:53:1c:fd:04:78:c1:56:a5: 92:9f:31:d8:cc:84:c8:c1:43:3d:7f:a4:6d:b8:93: 98:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:82:A5:94:06:81:10:BC:D5:16:99:DA:A6:45:06:DC:F5:58:A0:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d0c700f9-664c-320a-9ebe-8423a5faed0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl X509v3 Authority Key Identifier: keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer sbgp-ipAddrBlock: critical IPv4: 134.195.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:29:3e:1a:27:36:43:c8:43:35:6e:6f:16:e1:ad:2b:af:65: 42:6e:2b:b6:b1:6b:99:c3:be:c0:16:5d:a1:98:b0:b4:da:21: d0:0c:6b:56:b2:3d:c1:59:f4:41:c1:0e:a5:90:3e:7f:a7:5b: cf:c8:6f:d4:7e:b8:56:fc:d7:e9:1b:7e:cd:30:e5:e7:6a:22: 13:95:06:9e:25:b4:7e:c6:33:59:a1:ee:b8:65:6e:2e:07:e4: 0d:af:31:0f:b9:c6:91:d1:56:b6:6c:f2:59:12:e2:98:1f:bc: f9:7d:dc:77:72:b5:be:57:f5:06:55:a1:77:2b:bd:c0:1a:e5: 11:b3:5f:49:b2:53:4a:49:da:7f:c6:db:9d:69:4a:90:06:c2: 30:8e:87:ce:d3:6a:d4:90:52:3e:e9:ff:5e:3d:20:69:a3:d3: c2:f1:7a:fd:96:55:13:36:71:01:df:52:d3:0e:31:d6:dd:3d: 9f:78:7b:37:1c:c5:65:9e:84:d3:76:47:dd:b4:59:4c:87:87: 9b:6e:ec:78:59:f1:60:fd:70:14:6d:21:d4:2e:d3:fa:13:76: 76:2e:b5:67:95:9d:85:c4:c6:ca:29:be:18:62:54:c1:6a:90: 12:6f:0f:c5:c7:6b:22:42:ac:3b:53:3b:83:b8:41:78:cd:87: a6:f8:0c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MVNnu3iC+Cni1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4 OTc2MB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk ZWNiZDkwMWEtNmVlMS00Y2JjLTgyODEtZWRmYjkyNDY5Y2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTGhm94eJc4Mypb1m0dEgCYPhezX6vBGeffw HBlwIufT7xKRtBCCM4NONfKOlzVxPu52DJUJcw1bjTKMzxy1af8MrKW0xkbC35m+ bsi86AHwbb+LOatK5bIh5u3tG+GmdPNU7PhVsqIFaWZs6xgcrmWlVnVhRKPXr83B Bqq3Hq0R4q375jdqe82dY/PAKf5vet0K96404bsidLe0gNCp+uMngsjA29e6RINE 36LfJ62qstDIcTs3PB3BQ2u5FUzEjm1r0rw+8Gz3ZAElywfQ61t7JHGdhih4IZdS hZpqaT2AOiiyA4ghUxz9BHjBVqWSnzHYzITIwUM9f6RtuJOYDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWCpZQGgRC81RaZ2qZFBtz1WKBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvZDBjNzAwZjktNjY0Yy0z MjBhLTllYmUtODQyM2E1ZmFlZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4 ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj YTU2ODg5NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsNMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcpPhonNkPIQzVubxbhrSuvZUJuK7axa5nDvsAWXaGYsLTaIdAMa1ay PcFZ9EHBDqWQPn+nW8/Ib9R+uFb81+kbfs0w5edqIhOVBp4ltH7GM1mh7rhlbi4H 5A2vMQ+5xpHRVrZs8lkS4pgfvPl93Hdytb5X9QZVoXcrvcAa5RGzX0myU0pJ2n/G 251pSpAGwjCOh87TatSQUj7p/149IGmj08Lxev2WVRM2cQHfUtMOMdbdPZ94ezcc xWWehNN2R920WUyHh5tu7HhZ8WD9cBRtIdQu0/oTdnYutWeVnYXExsopvhhiVMFq kBJvD8XHayJCrDtTO4O4QXjNh6b4DAo= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:52 2024 by rpki-client on console-ams.rpki-client.org