$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa File: 2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa (raw, json) Hash identifier: 1zAu+6hE/tOXVG7TLQl2axhNps3JjCJHQgRvsFA5t/s= Subject key identifier: CD:3F:74:40:3A:59:14:48:BC:99:5D:70:03:15:62:80:15:F0:73:34 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F432858475FF3AB62B5B6CCF5056A8800 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa Signing time: Sun 29 Sep 2024 12:12:42 +0000 ROA not before: Sun 29 Sep 2024 12:12:42 +0000 ROA not after: Sat 28 Dec 2024 13:12:42 +0000 asID: 140952 IP address blocks: 64.145.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5f:f3:ab:62:b5:b6:cc:f5:05:6a:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Sep 29 12:12:42 2024 GMT Not After : Dec 28 13:12:42 2024 GMT Subject: CN=7ab2de51-6983-4e66-91c3-276d5fd0061a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:50:a4:8b:cf:37:c6:08:d1:6b:40:cd:21:76: a0:c1:36:e0:f6:f2:2a:eb:85:0f:ee:9d:6d:50:df: ae:f2:17:90:92:d0:d9:97:e5:31:7f:16:6f:f3:a8: 29:85:18:aa:26:e0:e7:d1:aa:dc:29:22:79:7b:d9: 8e:7f:8c:7d:87:f7:35:26:17:4f:68:4f:20:22:db: 1e:1d:9e:55:cf:92:fc:57:3e:62:de:f5:a0:9b:30: 00:70:aa:8d:89:e1:19:f9:2e:ea:1c:df:11:01:a1: ba:57:39:11:03:88:e7:bc:c4:59:af:fc:96:60:94: e0:9e:40:d2:2e:e8:00:b6:2f:f0:7c:66:32:07:11: 11:6e:99:09:30:b6:30:3e:be:31:22:17:f9:6a:4e: 90:5c:54:20:1a:41:45:05:95:40:d9:af:03:b6:b5: b0:72:31:2a:05:0f:8f:0e:15:fe:79:23:cf:77:6a: 0a:b2:ab:b0:73:ff:31:b3:db:88:9b:de:44:be:23: e0:13:e5:dc:db:85:99:56:fe:82:c6:00:23:9a:03: 57:d2:d4:4b:5c:72:f3:f9:b8:c9:c4:55:23:19:db: 51:7e:e2:80:9c:83:fd:08:fd:29:cb:7a:b7:5f:9a: 49:2d:e7:97:07:18:45:22:56:46:40:b1:a7:ae:91: b7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3F:74:40:3A:59:14:48:BC:99:5D:70:03:15:62:80:15:F0:73:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 64.145.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:68:97:1e:c1:8c:42:62:d2:10:c2:0c:7d:2d:7b:ea:03:19: 7f:4a:7b:40:5b:f5:9c:4c:40:13:96:1b:22:74:d4:14:92:3e: 5f:10:46:b9:26:51:b3:23:ee:b2:f2:13:af:ca:d7:82:f9:26: 29:94:cf:4d:16:eb:e1:bf:d0:f3:be:5f:1b:56:5a:46:6d:00: b9:3b:cf:b1:7a:e7:11:06:2d:52:1b:24:da:fc:8a:ea:24:44: ea:74:11:70:f8:2f:ee:a0:c6:3d:7a:67:2f:34:d0:34:31:5f: 75:b2:70:9c:a2:90:3d:d7:33:b7:d8:6f:bd:a5:80:82:c7:8f: 09:1e:20:9c:54:b8:dd:0d:dd:b7:ba:da:e6:30:80:03:ad:60: 32:c2:11:76:8d:c7:22:8b:e5:af:7b:aa:93:55:43:fe:76:27: a1:bf:bb:e9:97:bd:70:28:9e:cd:61:96:d7:3b:ea:4b:23:ed: f6:a3:1c:a1:e8:95:15:5a:cf:5e:37:19:ab:e4:da:db:38:30: 65:04:99:b6:38:2c:21:38:f1:3b:49:8e:61:1f:7b:b7:52:95: 2c:13:82:00:9d:68:38:36:0f:a8:70:d3:41:22:f7:0f:dd:9e: 64:fb:da:bc:fd:37:89:0e:4b:de:39:2e:15:eb:da:73:b9:60: 87:23:4b:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdf86titbbM9QVqiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI0MDkyOTEyMTI0MloXDTI0MTIyODEzMTI0MlowLzEtMCsGA1UEAxMk N2FiMmRlNTEtNjk4My00ZTY2LTkxYzMtMjc2ZDVmZDAwNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVCki883xgjRa0DNIXagwTbg9vIq64UP7p1t UN+u8heQktDZl+UxfxZv86gphRiqJuDn0arcKSJ5e9mOf4x9h/c1JhdPaE8gItse HZ5Vz5L8Vz5i3vWgmzAAcKqNieEZ+S7qHN8RAaG6VzkRA4jnvMRZr/yWYJTgnkDS LugAti/wfGYyBxERbpkJMLYwPr4xIhf5ak6QXFQgGkFFBZVA2a8DtrWwcjEqBQ+P DhX+eSPPd2oKsquwc/8xs9uIm95EviPgE+Xc24WZVv6CxgAjmgNX0tRLXHLz+bjJ xFUjGdtRfuKAnIP9CP0py3q3X5pJLeeXBxhFIlZGQLGnrpG3eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0/dEA6WRRIvJldcAMVYoAV8HM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMmVmZjg2ZDUtNGExZC0z MGY5LWFlYTYtNmZhOTIzZGI5Nzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQJFaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5olx7BjEJi0hDCDH0te+oDGX9Ke0Bb9ZxMQBOWGyJ01BSSPl8QRrkm UbMj7rLyE6/K14L5JimUz00W6+G/0PO+XxtWWkZtALk7z7F65xEGLVIbJNr8iuok ROp0EXD4L+6gxj16Zy800DQxX3WycJyikD3XM7fYb72lgILHjwkeIJxUuN0N3be6 2uYwgAOtYDLCEXaNxyKL5a97qpNVQ/52J6G/u+mXvXAons1hltc76ksj7fajHKHo lRVaz143Gavk2ts4MGUEmbY4LCE48TtJjmEfe7dSlSwTggCdaDg2D6hw00Ei9w/d nmT72rz9N4kOS945LhXr2nO5YIcjSxc= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org