$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2ddd424e-b220-3461-a805-5aa7ad17482d.roa File: 2ddd424e-b220-3461-a805-5aa7ad17482d.roa (raw, json) Hash identifier: QNgSPgHqwqXQgzkudcMmHUg7AldC4jD9yBLHEs4zDNQ= Subject key identifier: 5B:E0:81:1F:0A:56:20:2B:B8:EE:A5:7B:A6:52:6C:7F:74:A5:8D:84 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F432858472B00817076A9CAFEE8FFBC40 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2ddd424e-b220-3461-a805-5aa7ad17482d.roa Signing time: Tue 10 Sep 2024 13:00:40 +0000 ROA not before: Tue 10 Sep 2024 13:00:40 +0000 ROA not after: Mon 09 Dec 2024 14:00:40 +0000 asID: 5511 IP address blocks: 64.79.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2b:00:81:70:76:a9:ca:fe:e8:ff:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Sep 10 13:00:40 2024 GMT Not After : Dec 9 14:00:40 2024 GMT Subject: CN=9600c418-b5bc-46e4-9d80-cdfe3adaed71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:66:92:79:42:be:a5:bf:06:5e:ff:bc:b6:b2: 8d:d1:62:6e:bb:d0:77:3b:f0:62:0b:be:0f:ae:67: 79:29:46:76:48:41:d9:ba:4c:90:a7:1b:1c:c0:2d: 17:c4:22:b8:cc:e9:f0:86:e1:e1:18:b9:40:51:c6: 1a:61:18:37:63:fe:b9:b2:4d:e1:4e:1d:3f:24:97: 61:c8:8e:3b:59:5d:5f:17:0d:e4:47:e8:4e:ee:bd: 74:00:bb:6d:9d:74:89:12:7c:6c:67:6c:c7:45:c9: aa:ea:91:d3:e1:45:be:31:1b:f6:e4:2e:97:73:b2: 88:40:91:52:2c:c4:b3:7e:16:71:e4:60:23:3f:7b: 44:21:24:53:ee:23:26:89:82:9b:17:3d:ee:84:cd: db:22:5b:99:bc:d2:c1:ed:ad:0b:dd:04:a3:46:e6: 69:de:8f:16:aa:18:bf:b9:98:4e:74:cb:3a:1d:6b: fb:97:96:c6:1d:06:b7:dd:90:8c:5c:7a:9e:3d:83: 4f:50:08:b6:57:c2:04:bf:b4:c0:14:b0:5d:c0:35: 1c:53:92:ef:37:d2:22:ec:cb:cb:04:e0:3f:26:5a: fb:8f:d2:6c:19:b0:ae:13:41:c2:2d:5f:5c:45:90: be:09:1d:ac:11:83:a0:49:ed:20:44:47:5a:94:dd: d6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E0:81:1F:0A:56:20:2B:B8:EE:A5:7B:A6:52:6C:7F:74:A5:8D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2ddd424e-b220-3461-a805-5aa7ad17482d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 64.79.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:57:a8:0a:b2:32:01:5f:08:d6:a6:65:1a:33:78:ed:41:9c: 36:43:43:79:07:bf:31:4e:c4:49:b9:d7:69:1c:03:59:07:9d: ca:08:cc:15:e6:da:fa:cf:8f:75:fc:1c:f8:0a:db:22:bb:1f: 53:06:3f:21:13:e3:7f:d7:7b:e4:83:4c:9f:80:a5:dd:be:93: 78:90:09:71:65:14:d9:b9:47:18:ea:dd:5b:6c:c5:30:25:15: 7c:20:47:43:b5:95:52:ca:77:71:41:f9:99:f7:82:2f:94:a9: f3:ce:dc:8f:8a:b4:0a:37:52:a5:b0:b9:bd:c0:eb:15:f0:87: 59:70:4a:c3:95:75:1d:06:91:ea:98:07:9e:74:c8:f0:be:e7: bc:c9:b3:19:02:6a:79:98:65:0a:12:a2:e6:ce:2a:eb:2a:0d: 68:33:2e:30:c8:8d:32:52:3f:f3:5d:d4:d0:0f:93:b7:42:79: 13:06:1c:91:f9:4c:22:61:95:c2:4a:20:3a:cd:9f:1c:96:58: 80:3c:0b:a5:2f:ab:76:6d:09:a3:0a:7e:c6:b5:ab:86:7d:b0: c5:31:8e:0c:07:f2:2e:a8:6f:d8:ff:29:44:ef:19:f3:1d:45: fe:cc:d6:28:e0:5a:5d:3c:2c:bb:e9:a8:8e:35:83:19:ca:fd: 31:8f:1a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrAIFwdqnK/uj/vEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI0MDkxMDEzMDA0MFoXDTI0MTIwOTE0MDA0MFowLzEtMCsGA1UEAxMk OTYwMGM0MTgtYjViYy00NmU0LTlkODAtY2RmZTNhZGFlZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2aSeUK+pb8GXv+8trKN0WJuu9B3O/BiC74P rmd5KUZ2SEHZukyQpxscwC0XxCK4zOnwhuHhGLlAUcYaYRg3Y/65sk3hTh0/JJdh yI47WV1fFw3kR+hO7r10ALttnXSJEnxsZ2zHRcmq6pHT4UW+MRv25C6Xc7KIQJFS LMSzfhZx5GAjP3tEISRT7iMmiYKbFz3uhM3bIluZvNLB7a0L3QSjRuZp3o8Wqhi/ uZhOdMs6HWv7l5bGHQa33ZCMXHqePYNPUAi2V8IEv7TAFLBdwDUcU5LvN9Ii7MvL BOA/Jlr7j9JsGbCuE0HCLV9cRZC+CR2sEYOgSe0gREdalN3W4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvggR8KViAruO6le6ZSbH90pY2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvMmRkZDQyNGUtYjIyMC0z NDYxLWE4MDUtNWFhN2FkMTc0ODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQE/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtXqAqyMgFfCNamZRozeO1BnDZDQ3kHvzFOxEm512kcA1kHncoIzBXm 2vrPj3X8HPgK2yK7H1MGPyET43/Xe+SDTJ+Apd2+k3iQCXFlFNm5Rxjq3VtsxTAl FXwgR0O1lVLKd3FB+Zn3gi+UqfPO3I+KtAo3UqWwub3A6xXwh1lwSsOVdR0GkeqY B550yPC+57zJsxkCanmYZQoSoubOKusqDWgzLjDIjTJSP/Nd1NAPk7dCeRMGHJH5 TCJhlcJKIDrNnxyWWIA8C6Uvq3ZtCaMKfsa1q4Z9sMUxjgwH8i6ob9j/KUTvGfMd Rf7M1ijgWl08LLvpqI41gxnK/TGPGkQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org