$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/caafb0e5-91a7-3e7f-bde6-fed499c7bf12.roa File: caafb0e5-91a7-3e7f-bde6-fed499c7bf12.roa (raw, json) Hash identifier: T03t5yzNbhZGaa4sNU8HClVf5TPtDyfHB8cablBS0DU= Subject key identifier: 21:B6:46:01:56:02:24:B1:B3:80:A9:2C:59:98:3C:0E:B6:AA:A9:9F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62AC4814B5E9E718035E740 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/caafb0e5-91a7-3e7f-bde6-fed499c7bf12.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 67.54.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:c4:81:4b:5e:9e:71:80:35:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=1ecbee7e-8d88-4727-9b6b-0cc429783b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:ca:5b:5f:75:0c:47:4c:eb:3e:74:79:92: 4e:e2:3f:f6:f6:9d:79:a1:25:f1:3e:47:0d:f4:92: be:7c:b1:f3:50:95:24:b3:6e:34:12:c4:8f:38:b0: aa:fd:76:9d:3d:6a:54:fa:36:d5:d3:4b:e8:77:6f: 3b:c1:d2:72:68:75:71:95:8a:f1:c7:33:57:3a:10: f7:0a:c2:a1:d6:60:fd:70:51:4c:bd:82:13:0a:6f: 6a:ba:e1:2d:1d:59:e2:a7:08:fb:a8:3e:8e:42:c6: ec:b6:62:3a:bf:cc:84:34:59:c2:36:d0:2a:22:70: ce:79:58:76:62:51:b7:84:85:b7:24:75:78:01:21: 4d:bd:db:2b:07:e6:c1:26:c4:3c:74:83:aa:2c:59: e8:21:de:32:aa:d0:f6:93:f8:61:09:cf:e6:91:35: 58:1a:94:da:11:30:af:cc:a7:65:69:28:84:60:6c: 58:87:65:9f:58:9b:f0:4a:89:49:84:d5:20:ae:9c: 02:6a:d2:4b:3c:a1:15:3b:cd:de:c2:fd:10:6a:21: e1:e5:ed:36:02:c5:a2:a9:37:6a:4c:fc:21:03:f1: ab:f6:da:8e:3e:a2:9c:e5:f4:8f:50:4f:6e:12:ae: ee:d1:71:b7:79:11:4d:95:08:2e:a2:44:e6:6d:26: 14:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B6:46:01:56:02:24:B1:B3:80:A9:2C:59:98:3C:0E:B6:AA:A9:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/caafb0e5-91a7-3e7f-bde6-fed499c7bf12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ca:69:20:41:d9:37:f9:46:37:bb:87:5c:45:c2:16:34:46: f2:21:c2:ae:51:97:f0:cf:ca:cb:b2:62:26:26:d6:22:2c:85: 00:3f:f9:bf:b8:b2:32:e6:bc:f1:c4:9f:3c:fc:34:fa:a4:65: d0:47:ee:75:6c:43:35:c7:6c:c5:93:43:57:96:12:cd:79:32: 0a:2f:c3:85:fa:dd:a0:a7:f9:d6:3b:65:0f:03:7f:56:75:85: 13:1c:2a:95:6d:f0:1e:a0:98:da:3e:f7:ac:9a:2b:d3:01:5b: cc:9e:a4:2f:e3:1d:c4:64:bd:e4:30:72:6f:64:e0:23:27:69: 7e:68:98:8d:70:9a:51:02:40:4a:ca:d6:18:5a:ac:fb:00:85: 15:ef:5d:14:c4:50:f7:f3:35:fc:a5:c8:c9:2b:e8:12:91:df: 55:c8:3a:7b:79:4f:fe:9e:20:39:bf:9a:5b:24:a9:d2:a1:e0: b0:a0:ed:09:f0:8e:11:d7:d3:bc:8f:fd:10:b6:d7:61:38:22: f8:45:99:ce:e5:e9:f4:68:f8:1b:25:34:a8:12:86:aa:83:29: af:f3:d2:ec:f6:15:95:8b:1f:80:da:97:22:18:75:82:7e:05: d6:c6:49:af:d9:b6:d6:ee:bc:bf:ea:91:a2:8d:98:6c:11:15: 77:91:6b:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKsSBS16ecYA150AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MWVjYmVlN2UtOGQ4OC00NzI3LTliNmItMGNjNDI5NzgzYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOnKW191DEdM6z50eZJO4j/29p15oSXxPkcN 9JK+fLHzUJUks240EsSPOLCq/XadPWpU+jbV00vod287wdJyaHVxlYrxxzNXOhD3 CsKh1mD9cFFMvYITCm9quuEtHVnipwj7qD6OQsbstmI6v8yENFnCNtAqInDOeVh2 YlG3hIW3JHV4ASFNvdsrB+bBJsQ8dIOqLFnoId4yqtD2k/hhCc/mkTVYGpTaETCv zKdlaSiEYGxYh2WfWJvwSolJhNUgrpwCatJLPKEVO83ewv0QaiHh5e02AsWiqTdq TPwhA/Gr9tqOPqKc5fSPUE9uEq7u0XG3eRFNlQguokTmbSYUfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG2RgFWAiSxs4CpLFmYPA62qqmfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2FhZmIwZTUtOTFhNy0z ZTdmLWJkZTYtZmVkNDk5YzdiZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPKaSBB2Tf5Rje7h1xFwhY0RvIhwq5Rl/DPysuyYiYm1iIshQA/+b+4 sjLmvPHEnzz8NPqkZdBH7nVsQzXHbMWTQ1eWEs15Mgovw4X63aCn+dY7ZQ8Df1Z1 hRMcKpVt8B6gmNo+96yaK9MBW8yepC/jHcRkveQwcm9k4CMnaX5omI1wmlECQErK 1hharPsAhRXvXRTEUPfzNfylyMkr6BKR31XIOnt5T/6eIDm/mlskqdKh4LCg7Qnw jhHX07yP/RC212E4IvhFmc7l6fRo+BslNKgShqqDKa/z0uz2FZWLH4DalyIYdYJ+ BdbGSa/ZttbuvL/qkaKNmGwRFXeRaww= -----END CERTIFICATE-----Generated at Sun Nov 24 18:27:44 2024 by rpki-client on console-ams.rpki-client.org