$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa File: 971c8edd-06bb-333f-94f5-8b5f3db41453.roa (raw, json) Hash identifier: dR2DRaqrFr5wZ+jujmw67NKiswgPtl+DfRk9S04tspE= Subject key identifier: A8:D1:9C:65:BB:92:E0:92:30:50:70:E5:62:6B:4C:69:FF:ED:91:05 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F432858471775B8B8DCDD20D613D66580 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa Signing time: Tue 03 Sep 2024 13:00:42 +0000 ROA not before: Tue 03 Sep 2024 13:00:42 +0000 ROA not after: Mon 02 Dec 2024 14:00:42 +0000 asID: 63062 IP address blocks: 67.44.32.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:17:75:b8:b8:dc:dd:20:d6:13:d6:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 3 13:00:42 2024 GMT Not After : Dec 2 14:00:42 2024 GMT Subject: CN=a8f419bd-fc39-4326-b036-cecda26ffc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:bc:23:00:f9:5e:dd:c3:3a:c8:52:d7:04: c0:54:1b:4a:61:ce:43:9c:c4:ed:3d:3f:d8:5c:85: 0b:30:35:28:1b:60:8a:e2:fe:ae:11:c6:20:7f:1f: 0e:ae:8a:e9:74:f7:9f:fd:8c:23:2f:01:60:fd:4b: dc:20:d3:ad:11:7b:3e:8f:7c:65:e4:1b:17:e2:c6: e4:a2:86:b7:0f:fe:fc:0f:46:74:a2:c0:2f:34:83: 4e:03:d4:85:4f:54:01:fb:b0:13:63:ae:a6:a4:c3: f3:27:2d:0c:c1:07:d5:c3:6b:62:64:07:31:62:e3: 93:f1:d3:ba:68:45:a2:29:d8:a0:c8:24:02:16:1c: ba:97:1a:02:c4:36:27:4c:93:a2:f1:30:9e:38:86: 56:7b:d8:eb:8e:b9:bd:7b:26:51:fb:a7:9b:33:80: 20:f2:5f:97:fc:4d:5e:ea:cd:15:73:0d:2c:83:a5: 8a:cd:25:56:ac:d1:1a:43:ae:b5:75:f6:54:a6:8d: ca:69:ee:9f:28:45:17:08:b9:ef:da:cf:5b:25:4d: 69:0e:79:39:22:34:2a:ca:ef:cd:c8:1d:56:83:53: 3e:02:ec:6b:e3:5b:4e:e9:7b:1e:f7:a9:68:73:97: 8d:cf:02:2d:07:5d:04:db:8f:fa:53:41:80:e2:31: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D1:9C:65:BB:92:E0:92:30:50:70:E5:62:6B:4C:69:FF:ED:91:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:06:6a:2b:8e:f8:54:21:c9:a7:0e:4c:90:d8:9b:18:3f:67: b0:a0:6c:45:16:6e:48:04:67:9a:3c:23:05:df:c4:a1:ea:16: 63:30:46:a5:9b:d8:13:7e:88:5f:3c:0c:ad:f8:17:03:91:24: 87:a0:08:ff:d5:90:63:c3:83:61:4f:ff:6a:30:7f:f4:8e:ec: 5d:79:68:da:45:8c:f0:07:f8:17:79:df:10:f9:ce:92:fc:66: 8e:57:6b:55:8e:ec:17:51:a9:1e:d3:56:1a:02:18:4a:ac:bd: d0:04:07:c6:fc:a2:de:96:56:2b:1d:61:7f:9d:e4:25:4a:c2: 4e:11:fc:2c:58:c6:d6:47:bc:d9:6c:2b:52:53:c4:b6:17:52: 9e:5b:d5:d6:6b:b7:bb:fe:fc:4a:f8:04:3a:12:58:6a:1c:f4: 9d:d6:cd:2c:6b:3b:37:76:5e:f7:06:50:78:c8:a3:eb:7f:ce: 8b:4e:f3:85:bb:56:ee:1d:79:11:b2:a1:62:9a:e1:96:18:85: 40:2d:33:b6:20:7a:75:1e:15:ae:92:31:fc:f7:02:ef:5a:ad: 33:44:b6:9a:4e:f2:d4:c0:40:d5:29:ae:b0:e5:93:10:9f:75: 40:cb:92:dc:66:e5:7a:10:0c:bd:b0:0c:9c:e1:1e:ff:a6:41: 42:15:de:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcXdbi43N0g1hPWZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI0MDkwMzEzMDA0MloXDTI0MTIwMjE0MDA0MlowLzEtMCsGA1UEAxMk YThmNDE5YmQtZmMzOS00MzI2LWIwMzYtY2VjZGEyNmZmYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2y8IwD5Xt3DOshS1wTAVBtKYc5DnMTtPT/Y XIULMDUoG2CK4v6uEcYgfx8OrorpdPef/YwjLwFg/UvcINOtEXs+j3xl5BsX4sbk ooa3D/78D0Z0osAvNINOA9SFT1QB+7ATY66mpMPzJy0MwQfVw2tiZAcxYuOT8dO6 aEWiKdigyCQCFhy6lxoCxDYnTJOi8TCeOIZWe9jrjrm9eyZR+6ebM4Ag8l+X/E1e 6s0Vcw0sg6WKzSVWrNEaQ661dfZUpo3Kae6fKEUXCLnv2s9bJU1pDnk5IjQqyu/N yB1Wg1M+Auxr41tO6Xse96loc5eNzwItB10E24/6U0GA4jH+0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjRnGW7kuCSMFBw5WJrTGn/7ZEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvOTcxYzhlZGQtMDZiYi0z MzNmLTk0ZjUtOGI1ZjNkYjQxNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMGaiuO+FQhyacOTJDYmxg/Z7CgbEUWbkgEZ5o8IwXfxKHqFmMwRqWb 2BN+iF88DK34FwORJIegCP/VkGPDg2FP/2owf/SO7F15aNpFjPAH+Bd53xD5zpL8 Zo5Xa1WO7BdRqR7TVhoCGEqsvdAEB8b8ot6WVisdYX+d5CVKwk4R/CxYxtZHvNls K1JTxLYXUp5b1dZrt7v+/Er4BDoSWGoc9J3WzSxrOzd2XvcGUHjIo+t/zotO84W7 Vu4deRGyoWKa4ZYYhUAtM7YgenUeFa6SMfz3Au9arTNEtppO8tTAQNUprrDlkxCf dUDLktxm5XoQDL2wDJzhHv+mQUIV3h0= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:16 2024 by rpki-client on console-fra.rpki-client.org