$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/140d05e1-672c-37c8-a96a-0dcf7366c49b.roa File: 140d05e1-672c-37c8-a96a-0dcf7366c49b.roa (raw, json) Hash identifier: bYccfsOw2Y2v4QaLNPvcbipgsesOLbAdGiNnLesiZS8= Subject key identifier: D9:D1:6F:74:D9:97:6B:48:28:40:0B:85:36:8C:D3:62:72:D2:77:E9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62AC224E1A58EE684462400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/140d05e1-672c-37c8-a96a-0dcf7366c49b.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 67.54.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:c2:24:e1:a5:8e:e6:84:46:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=5b0e7c7c-a6b5-48cb-a47f-2cd03e1f8d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:86:ef:24:0d:3b:e0:a6:51:22:cf:47:d9: 6e:02:06:4e:cc:e8:2e:a1:24:39:2a:35:5d:38:58: 9e:36:b6:01:fb:8a:cf:9d:87:14:e9:63:35:d5:3c: e9:04:39:a1:a0:fb:a2:f8:e6:71:e4:ea:c5:9c:48: e7:73:03:f4:3b:4b:52:9e:68:88:e7:df:43:4f:0e: 3b:37:1e:26:91:f2:66:2c:0c:51:98:d5:2b:25:96: e4:75:36:4b:fb:87:b6:1d:65:f4:05:56:11:22:18: a6:af:e2:93:80:d6:e3:3e:6f:1a:1f:4e:d5:6c:89: 61:2e:61:93:ab:77:89:ad:29:f8:4b:9d:49:ff:90: a1:5c:17:1b:f1:c9:35:92:0c:70:ab:96:9a:f7:3b: 16:bb:70:5b:cf:17:06:e0:2c:17:06:ec:06:a1:75: 4f:75:ee:fd:6d:09:61:64:1f:0b:77:22:99:e3:53: 46:5f:43:38:1f:75:b0:60:79:8c:fb:28:26:f3:58: 12:59:5a:5a:03:93:45:26:d2:1a:e5:45:fb:ee:68: ec:4d:ea:8b:a4:94:d8:cc:a4:c5:7b:b8:dc:79:89: 12:78:cc:ad:dc:d2:20:bc:87:9c:76:44:39:15:c9: 32:1b:d3:ec:b3:b0:e8:35:e0:ec:64:fb:b1:85:0e: cf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D1:6F:74:D9:97:6B:48:28:40:0B:85:36:8C:D3:62:72:D2:77:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/140d05e1-672c-37c8-a96a-0dcf7366c49b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:34:5d:b8:7b:da:d5:65:aa:89:d5:bb:e2:ce:8e:7c:fb:89: fd:ca:cf:23:e4:e5:c8:7b:31:70:8a:9b:59:a1:62:5b:43:11: ea:d2:47:23:73:5d:e3:70:f0:d9:d4:86:cc:0e:80:21:82:7f: 6f:be:86:25:46:71:56:2d:7a:be:09:37:43:5f:0a:4e:b3:ec: 38:23:11:12:78:f1:bb:be:0b:09:18:b0:d8:aa:d5:4c:14:0c: 31:7a:1c:e3:11:4d:e8:cb:1c:21:7a:9b:21:8a:9d:45:83:fa: 9d:cb:80:c5:88:8d:4d:d1:e6:c5:1a:dc:16:aa:0c:80:28:90: 2b:e3:fc:51:26:ed:66:5f:85:1a:4f:07:6b:ae:00:e0:f2:46: 4a:74:77:e6:0f:e6:f2:22:9d:20:39:2d:c5:47:62:30:60:6b: 9e:17:27:a9:12:0f:94:b2:d6:15:a9:13:3a:2b:49:60:d8:19: 34:2a:e4:9f:84:d4:ee:46:35:d8:8a:1f:cd:f2:15:9d:a1:66: f7:94:cb:d4:87:ec:e9:4f:8f:fc:b1:44:94:7e:1c:f8:c9:09: c8:3a:5f:6b:53:c2:f6:4d:a4:d0:e5:f1:09:e7:e8:60:98:73: b3:9b:6c:34:b7:d1:8c:af:f8:72:5d:e0:c7:6e:ad:d8:b4:60: 0e:a9:39:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKsIk4aWO5oRGJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NWIwZTdjN2MtYTZiNS00OGNiLWE0N2YtMmNkMDNlMWY4ZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrqG7yQNO+CmUSLPR9luAgZOzOguoSQ5KjVd OFieNrYB+4rPnYcU6WM11TzpBDmhoPui+OZx5OrFnEjncwP0O0tSnmiI599DTw47 Nx4mkfJmLAxRmNUrJZbkdTZL+4e2HWX0BVYRIhimr+KTgNbjPm8aH07VbIlhLmGT q3eJrSn4S51J/5ChXBcb8ck1kgxwq5aa9zsWu3BbzxcG4CwXBuwGoXVPde79bQlh ZB8LdyKZ41NGX0M4H3WwYHmM+ygm81gSWVpaA5NFJtIa5UX77mjsTeqLpJTYzKTF e7jceYkSeMyt3NIgvIecdkQ5FckyG9Pss7DoNeDsZPuxhQ7PBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnRb3TZl2tIKEALhTaM02Jy0nfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTQwZDA1ZTEtNjcyYy0z N2M4LWE5NmEtMGRjZjczNjZjNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc0Xbh72tVlqonVu+LOjnz7if3KzyPk5ch7MXCKm1mhYltDEerSRyNz XeNw8NnUhswOgCGCf2++hiVGcVYter4JN0NfCk6z7DgjERJ48bu+CwkYsNiq1UwU DDF6HOMRTejLHCF6myGKnUWD+p3LgMWIjU3R5sUa3BaqDIAokCvj/FEm7WZfhRpP B2uuAODyRkp0d+YP5vIinSA5LcVHYjBga54XJ6kSD5Sy1hWpEzorSWDYGTQq5J+E 1O5GNdiKH83yFZ2hZveUy9SH7OlPj/yxRJR+HPjJCcg6X2tTwvZNpNDl8Qnn6GCY c7ObbDS30Yyv+HJd4Mdurdi0YA6pOcc= -----END CERTIFICATE-----Generated at Fri Nov 22 02:11:02 2024 by rpki-client on console-fra.rpki-client.org