$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa File: 5b2340ea-6054-31e3-b42d-7f23e40eb030.roa (raw, json) Hash identifier: s4N1Tak+58rtE8zoVCNCcXNnYL5ZQxF8KheRKvwjRoU= Subject key identifier: B3:BE:22:2A:A0:61:BF:0B:76:19:00:4B:80:42:BE:4B:7A:D3:6C:1B Certificate issuer: /CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f Certificate serial: 010D0C9F43285847B696B41EAD7491BAF840A180 Authority key identifier: 68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 399603 IP address blocks: 64.112.14.0/24 maxlen: 32 2602:fc9c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:b4:1e:ad:74:91:ba:f8:40:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=d780abb2-fb7d-4fa6-b4bb-7c0ab921e963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fe:c6:d4:4d:ae:1f:03:d9:b5:1c:42:76:f8: d8:36:b9:1e:58:ff:11:ea:0c:ae:42:28:8e:0e:9a: 45:bb:a9:d4:c9:2f:04:6c:18:a5:34:02:90:4c:49: 3a:a8:b7:c1:39:96:eb:02:bd:1a:c6:c0:83:17:74: 3c:64:57:4a:77:f1:e4:87:4e:26:a9:95:99:4b:a3: 82:0e:6c:0d:4e:91:7c:97:14:4f:bc:a4:03:28:b4: 2b:d3:7d:6e:4a:7c:d0:6b:a8:3b:9b:26:b5:79:17: a9:f2:5e:83:23:f9:fd:52:14:5a:9b:a1:61:90:05: f8:1e:92:83:83:c9:c2:58:01:ff:0a:01:2e:09:a6: 6b:e4:49:f2:71:4a:dd:69:7b:0e:22:68:af:04:ea: 53:8f:95:67:24:d5:4f:5c:77:08:b2:b0:cd:41:f7: 4d:e5:4f:d8:e6:af:9f:2d:38:90:15:18:b7:62:8b: 8b:fa:9c:73:82:a5:01:fe:20:05:ea:b2:c2:46:9d: ec:dc:b1:7b:53:ee:c0:cb:ce:52:b1:cc:f6:60:d6: c6:ed:e8:fc:33:53:3f:c3:4d:83:2d:21:95:17:11: 04:6b:62:56:46:7b:36:f0:34:46:bd:33:bb:47:8e: 6e:e2:0f:39:0f:2c:0f:c5:21:23:7e:df:15:eb:45: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BE:22:2A:A0:61:BF:0B:76:19:00:4B:80:42:BE:4B:7A:D3:6C:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl X509v3 Authority Key Identifier: keyid:68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer sbgp-ipAddrBlock: critical IPv4: 64.112.14.0/24 IPv6: 2602:fc9c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0e:c3:93:da:9c:dd:bf:b9:5d:de:07:dc:3e:73:e5:1a:f6: df:c9:81:6f:8b:69:b4:42:ba:b8:4a:c9:08:2f:d7:5c:90:84: 7e:dd:64:86:83:5e:68:c4:e4:ca:9a:d7:c3:7d:b3:fb:45:63: 4b:b4:32:e9:47:7a:f4:2c:2f:6e:50:5c:86:62:42:67:d4:d4: 93:81:e4:29:e0:d2:e6:f3:7f:91:fc:e6:21:91:04:6b:4d:36: d6:0f:5e:78:85:d5:20:7c:78:6b:60:4c:ca:05:4b:c8:80:41: 61:94:ed:e4:29:88:28:ab:e5:74:19:f0:80:c2:09:9c:c6:3e: fb:f2:55:60:52:ba:fc:97:91:de:d0:e1:31:ab:58:14:f0:ce: cc:05:c6:83:85:25:49:42:4f:29:d3:67:b5:e0:ca:fa:5d:9a: 4f:dd:ba:de:8a:c1:ce:33:93:fe:a6:3c:84:62:40:27:52:3f: 2e:db:d7:6d:c5:33:79:15:70:89:67:1d:ca:b0:81:6c:68:1d: b2:ca:5a:4a:41:b1:56:ed:eb:46:85:bd:79:47:ff:bb:4a:32: 6d:ad:8d:16:19:3b:bf:be:ef:63:ea:f6:a8:f5:e2:1c:ca:e8: b4:92:f3:13:7e:d7:be:25:da:ee:b4:38:59:69:b3:2d:a6:42: f8:7d:8c:86 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEe2lrQerXSRuvhAoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI1ZjZjZjgtMWVmOC00NDJiLWEyM2QtNDNjZjc5ZWQ1 ZDNmMB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk ZDc4MGFiYjItZmI3ZC00ZmE2LWI0YmItN2MwYWI5MjFlOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP7G1E2uHwPZtRxCdvjYNrkeWP8R6gyuQiiO DppFu6nUyS8EbBilNAKQTEk6qLfBOZbrAr0axsCDF3Q8ZFdKd/Hkh04mqZWZS6OC DmwNTpF8lxRPvKQDKLQr031uSnzQa6g7mya1eRep8l6DI/n9UhRam6FhkAX4HpKD g8nCWAH/CgEuCaZr5EnycUrdaXsOImivBOpTj5VnJNVPXHcIsrDNQfdN5U/Y5q+f LTiQFRi3YouL+pxzgqUB/iAF6rLCRp3s3LF7U+7Ay85Sscz2YNbG7ej8M1M/w02D LSGVFxEEa2JWRns28DRGvTO7R45u4g85DywPxSEjft8V60XjXQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLO+IiqgYb8LdhkAS4BCvkt602wbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMjVm NmNmOC0xZWY4LTQ0MmItYTIzZC00M2NmNzllZDVkM2YvNWIyMzQwZWEtNjA1NC0z MWUzLWI0MmQtN2YyM2U0MGViMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDI1ZjZjZjgtMWVmOC00NDJiLWEy M2QtNDNjZjc5ZWQ1ZDNmLzAyNWY2Y2Y4LTFlZjgtNDQyYi1hMjNkLTQzY2Y3OWVk NWQzZi5jcmwwHwYDVR0jBBgwFoAUaD1Gqlk7+gSlHA4BIDF4Ax1XUWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMjVmNmNmOC0xZWY4LTQ0MmItYTIzZC00M2Nm NzllZDVkM2YuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAQHAOMA4E AgACMAgDBgQmAvycADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIDsOT2pzdv7ld3gfcPnPlGvbfyYFvi2m0 Qrq4SskIL9dckIR+3WSGg15oxOTKmtfDfbP7RWNLtDLpR3r0LC9uUFyGYkJn1NST geQp4NLm83+R/OYhkQRrTTbWD154hdUgfHhrYEzKBUvIgEFhlO3kKYgoq+V0GfCA wgmcxj778lVgUrr8l5He0OExq1gU8M7MBcaDhSVJQk8p02e14Mr6XZpP3breisHO M5P+pjyEYkAnUj8u29dtxTN5FXCJZx3KsIFsaB2yylpKQbFW7etGhb15R/+7SjJt rY0WGTu/vu9j6vao9eIcyui0kvMTfte+JdrutDhZabMtpkL4fYyG -----END CERTIFICATE-----Generated at Thu Nov 21 21:42:48 2024 by rpki-client on console-ams.rpki-client.org