$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/a032e0ab-f5b5-3c6c-a88b-91d5f8360099.roa File: a032e0ab-f5b5-3c6c-a88b-91d5f8360099.roa (raw, json) Hash identifier: ZN4mhHdQ7E1pb7h1bHve9oH+pA8xXwlWtnZfpwGfrxQ= Subject key identifier: 4F:2E:8D:7C:79:EB:50:5F:4F:93:56:8E:7C:20:EC:A4:7F:37:37:EA Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F432858471775BF835C5A2F0D2DB3CF10 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/a032e0ab-f5b5-3c6c-a88b-91d5f8360099.roa Signing time: Tue 03 Sep 2024 13:00:42 +0000 ROA not before: Tue 03 Sep 2024 13:00:42 +0000 ROA not after: Mon 02 Dec 2024 14:00:42 +0000 asID: 63062 IP address blocks: 67.44.16.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:17:75:bf:83:5c:5a:2f:0d:2d:b3:cf:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 3 13:00:42 2024 GMT Not After : Dec 2 14:00:42 2024 GMT Subject: CN=39f64056-a05a-4acd-bdc4-cdcab854ed41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:14:cf:2f:df:19:f7:82:75:96:ba:fa:c9: 7d:4c:4b:cf:d3:0a:b9:fc:5f:28:13:d8:ae:4f:1c: 5f:61:08:2a:75:cb:ca:3b:83:85:60:2d:fb:0f:9f: 39:15:81:1b:f6:57:ec:f4:43:95:b9:66:94:a2:90: f9:a1:aa:0d:a3:94:94:55:f1:d2:ee:b7:fb:f8:9d: 41:8e:b7:65:fd:11:e0:0c:bc:06:7d:f2:03:e6:81: 63:e4:b9:b5:78:d1:35:cb:91:4c:da:ff:b8:d7:c8: c8:ad:72:dc:f5:5e:f3:10:c9:df:79:dc:62:db:36: d1:c1:2e:8f:0c:86:8f:58:cb:2d:89:0d:e8:e8:b0: de:b3:04:7b:cb:ce:ee:d1:40:9b:93:0d:f9:bd:f3: 2b:0d:76:35:bd:fe:23:7f:13:9f:ac:1e:ee:48:02: 95:ff:14:9b:b9:a7:80:dc:94:9c:b8:35:ef:ed:75: a4:00:06:ab:98:cc:a3:a5:49:5a:9d:57:59:f5:c5: 3d:91:1e:02:34:c6:9d:36:ab:b1:19:b8:4f:64:e7: 8e:77:31:9f:03:f7:54:13:b2:71:15:30:99:78:8e: 68:ce:4e:52:0e:d5:22:04:89:36:66:bc:3d:90:4f: 61:1a:22:23:42:e3:55:d8:c8:e8:4c:5f:27:57:57: fd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2E:8D:7C:79:EB:50:5F:4F:93:56:8E:7C:20:EC:A4:7F:37:37:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/a032e0ab-f5b5-3c6c-a88b-91d5f8360099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:24:32:d7:1b:95:62:1f:9b:cd:d7:c5:95:c4:6b:d9:74:60: dd:ef:03:56:9d:ed:46:52:3a:5b:0c:44:77:c7:cc:c8:62:60: d9:26:9a:b2:a6:ea:b6:63:44:07:da:85:0f:32:08:b0:b9:5a: 6c:8b:03:52:56:93:03:15:a3:b5:80:02:7d:20:95:8e:42:9e: e6:40:54:b7:96:bb:f1:4d:34:b6:33:b8:3e:ee:df:ea:8a:54: 2f:6f:ef:4e:24:79:fa:79:82:23:ff:db:a9:13:cd:dc:0a:29: e2:44:bb:35:3c:67:ba:35:fa:e1:bc:44:e1:c9:3f:ca:18:fd: 0e:19:9f:96:c6:50:a3:ce:6f:9e:68:8c:aa:43:3d:fb:53:76: f4:e8:91:e2:54:3a:c7:0b:19:cb:ea:27:fd:54:85:97:b3:37: 5a:78:73:e4:5a:ec:ac:1b:6a:6b:fe:e3:2b:d1:a3:cf:0a:74: ce:d9:57:5a:fb:a4:34:9f:31:d9:f6:60:57:a9:b0:c8:1d:66: 9e:48:08:49:d2:0b:01:e3:31:21:5a:f9:3e:37:af:4a:b6:9f: da:3a:ec:9b:21:b2:8b:69:15:b4:6a:c9:56:af:7d:c4:f4:ef: 08:fb:e8:7c:56:e6:c2:61:53:a5:65:29:eb:5f:27:f3:47:ee: 07:23:bd:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcXdb+DXFovDS2zzxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI0MDkwMzEzMDA0MloXDTI0MTIwMjE0MDA0MlowLzEtMCsGA1UEAxMk MzlmNjQwNTYtYTA1YS00YWNkLWJkYzQtY2RjYWI4NTRlZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqEUzy/fGfeCdZa6+sl9TEvP0wq5/F8oE9iu TxxfYQgqdcvKO4OFYC37D585FYEb9lfs9EOVuWaUopD5oaoNo5SUVfHS7rf7+J1B jrdl/RHgDLwGffID5oFj5Lm1eNE1y5FM2v+418jIrXLc9V7zEMnfedxi2zbRwS6P DIaPWMstiQ3o6LDeswR7y87u0UCbkw35vfMrDXY1vf4jfxOfrB7uSAKV/xSbuaeA 3JScuDXv7XWkAAarmMyjpUlanVdZ9cU9kR4CNMadNquxGbhPZOeOdzGfA/dUE7Jx FTCZeI5ozk5SDtUiBIk2Zrw9kE9hGiIjQuNV2MjoTF8nV1f9DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8ujXx561BfT5NWjnwg7KR/NzfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvYTAzMmUwYWItZjViNS0z YzZjLWE4OGItOTFkNWY4MzYwMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMkMtcblWIfm83XxZXEa9l0YN3vA1ad7UZSOlsMRHfHzMhiYNkmmrKm 6rZjRAfahQ8yCLC5WmyLA1JWkwMVo7WAAn0glY5CnuZAVLeWu/FNNLYzuD7u3+qK VC9v704kefp5giP/26kTzdwKKeJEuzU8Z7o1+uG8ROHJP8oY/Q4Zn5bGUKPOb55o jKpDPftTdvTokeJUOscLGcvqJ/1UhZezN1p4c+Ra7Kwbamv+4yvRo88KdM7ZV1r7 pDSfMdn2YFepsMgdZp5ICEnSCwHjMSFa+T43r0q2n9o67JshsotpFbRqyVavfcT0 7wj76HxW5sJhU6VlKetfJ/NH7gcjvZI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org