$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1f488ac3-ad33-356c-988c-89da07e21928.roa File: 1f488ac3-ad33-356c-988c-89da07e21928.roa (raw, json) Hash identifier: mDHF30BraL0dn6+ZsmYASgBo/LSxYNc+2ip8ff51A+I= Subject key identifier: 4A:C7:4B:42:A8:CE:AB:59:18:F1:19:2C:62:05:59:A4:E6:47:58:BD Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F43285847B96175A72B9F45043E0670A0 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1f488ac3-ad33-356c-988c-89da07e21928.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 6621 IP address blocks: 67.142.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:75:a7:2b:9f:45:04:3e:06:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=534d2471-7e00-40a0-bbc9-4a60ecfcec82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:f8:19:c7:3f:9d:25:96:c1:7c:38:94:6b: 3d:0e:a8:ed:c7:f6:d0:46:8a:f9:9c:e5:b1:0e:69: ea:ad:ca:44:87:cc:21:81:f1:54:ed:5b:3b:8b:01: ef:ed:dd:ba:4e:cf:99:e1:d8:c5:3d:84:cb:cc:62: 2a:e8:0c:03:d5:2e:d6:9e:ea:e1:35:df:8e:0b:25: 46:de:53:df:4e:a8:1d:fc:63:6a:f1:5c:48:38:f8: 61:65:67:1f:0d:16:0f:2a:c9:97:8c:05:95:26:ef: 95:1b:d8:98:fa:8b:a3:7c:83:6c:b9:21:ef:2b:8c: 63:1b:96:c8:ea:e7:62:b7:05:87:07:25:41:ce:2f: da:0e:f5:d2:11:0e:9d:3d:e2:ec:76:62:e9:60:80: 16:34:5f:0a:19:a3:3d:06:62:88:1f:14:c2:fa:9c: 16:04:f4:46:85:78:d8:62:75:6c:cc:a1:11:a6:f2: 0d:26:4e:2c:75:c2:9c:fc:50:e2:a3:5a:01:69:32: cd:65:73:79:46:3a:77:28:5e:8d:c3:6b:8c:2c:c4: 80:ed:36:91:e7:1c:71:e1:5c:b7:00:da:1b:68:b3: 48:5d:8a:95:2c:d7:23:d7:18:be:6f:f6:9d:07:36: 61:a0:8d:34:34:6f:25:e8:32:ad:58:d5:b0:58:27: df:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C7:4B:42:A8:CE:AB:59:18:F1:19:2C:62:05:59:A4:E6:47:58:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1f488ac3-ad33-356c-988c-89da07e21928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.142.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:33:af:ca:7a:bf:b5:fe:e9:42:1b:f4:ab:99:8d:05:19:8e: 56:a0:91:13:53:db:44:4e:da:45:66:67:50:27:2d:96:8d:40: f1:81:22:d4:ee:5b:58:6c:dc:1f:46:0e:85:15:ec:9a:41:ea: 57:5c:bf:c8:81:20:17:9b:d9:3f:3b:5f:73:3f:2c:bb:f0:32: 36:7b:68:7f:b4:f4:f6:f0:47:13:97:0d:e9:ec:3f:44:a6:c7: 02:e2:93:cb:8a:18:66:96:e1:f3:db:ce:59:6f:cb:49:57:42: da:a4:3b:d4:f8:2a:b4:4e:e2:cc:81:f8:90:eb:cc:9b:1b:44: bd:62:24:02:13:da:f7:8d:7e:43:c2:3f:ec:84:68:2d:77:eb: 5c:94:91:2b:74:30:99:9e:9e:4c:92:b0:e5:00:55:5b:72:70: 40:7a:87:22:90:b7:b6:4e:e2:ca:e8:15:3b:63:97:10:79:11: a4:9f:b4:71:12:b8:a2:fb:f1:8b:db:89:52:d7:07:e3:bb:24: 7c:16:0a:d1:0a:72:a7:24:b5:4d:c6:74:9e:d3:97:72:d3:0c: 73:cd:77:2a:67:87:c2:52:6f:0f:f3:5b:cd:16:dd:df:48:a5: 22:bc:d7:2d:73:ae:93:99:47:95:06:94:fc:58:48:cf:ff:dc: 68:bb:fc:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXWnK59FBD4GcKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk NTM0ZDI0NzEtN2UwMC00MGEwLWJiYzktNGE2MGVjZmNlYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mf4Gcc/nSWWwXw4lGs9Dqjtx/bQRor5nOWx DmnqrcpEh8whgfFU7Vs7iwHv7d26Ts+Z4djFPYTLzGIq6AwD1S7WnurhNd+OCyVG 3lPfTqgd/GNq8VxIOPhhZWcfDRYPKsmXjAWVJu+VG9iY+oujfINsuSHvK4xjG5bI 6uditwWHByVBzi/aDvXSEQ6dPeLsdmLpYIAWNF8KGaM9BmKIHxTC+pwWBPRGhXjY YnVszKERpvINJk4sdcKc/FDio1oBaTLNZXN5Rjp3KF6Nw2uMLMSA7TaR5xxx4Vy3 ANobaLNIXYqVLNcj1xi+b/adBzZhoI00NG8l6DKtWNWwWCffSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErHS0KozqtZGPEZLGIFWaTmR1i9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMWY0ODhhYzMtYWQzMy0z NTZjLTk4OGMtODlkYTA3ZTIxOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ467MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkzr8p6v7X+6UIb9KuZjQUZjlagkRNT20RO2kVmZ1AnLZaNQPGBItTu W1hs3B9GDoUV7JpB6ldcv8iBIBeb2T87X3M/LLvwMjZ7aH+09PbwRxOXDensP0Sm xwLik8uKGGaW4fPbzllvy0lXQtqkO9T4KrRO4syB+JDrzJsbRL1iJAIT2veNfkPC P+yEaC1361yUkSt0MJmenkySsOUAVVtycEB6hyKQt7ZO4sroFTtjlxB5EaSftHES uKL78YvbiVLXB+O7JHwWCtEKcqcktU3GdJ7Tl3LTDHPNdypnh8JSbw/zW80W3d9I pSK81y1zrpOZR5UGlPxYSM//3Gi7/GE= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org