$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa File: 40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa (raw, json) Hash identifier: Z+EGRZK0U6Y9J6UgWopDDfRL97ajswlUgmeQIKtQLKU= Subject key identifier: CB:C1:5E:1A:32:62:D7:53:EF:FF:03:2F:46:82:15:6F:E0:4B:5C:BE Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F43285847792BB0D008F15C27EFC93280 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa Signing time: Tue 08 Oct 2024 13:00:40 +0000 ROA not before: Tue 08 Oct 2024 13:00:40 +0000 ROA not after: Mon 06 Jan 2025 14:00:40 +0000 asID: 1239 IP address blocks: 63.160.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:2b:b0:d0:08:f1:5c:27:ef:c9:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Oct 8 13:00:40 2024 GMT Not After : Jan 6 14:00:40 2025 GMT Subject: CN=5796df5e-b985-44ce-91d2-8b3b443e32a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:a7:e2:1b:fa:bf:fb:8a:88:be:3b:9a:a9: cc:6a:95:9e:c0:c5:95:60:5e:cd:bd:f4:7a:3c:47: e0:76:93:7e:65:5d:bc:08:30:34:a2:20:6d:ca:c4: cc:35:f6:d5:18:a4:56:d9:7d:fd:ba:c5:67:47:13: 18:c5:76:f0:40:87:53:fe:39:bb:87:e8:4e:15:e1: 34:33:09:d7:05:da:a5:b0:01:c0:a6:38:e5:b7:37: 27:91:92:57:fd:f4:41:17:3d:ff:24:ff:10:c3:aa: b2:27:80:63:58:01:1c:ff:52:9a:cf:7f:21:2b:72: e6:67:a0:25:21:8b:93:87:ea:d3:91:8f:bb:9f:1c: 7e:59:fe:47:48:4a:18:5c:3c:c5:76:15:e1:ba:60: 9c:00:81:53:33:03:49:ea:3d:20:08:59:44:14:af: d4:ac:4e:75:a1:40:80:36:24:06:5b:bf:ab:38:56: 07:77:8e:95:64:70:c6:f3:5c:11:98:ea:7f:bd:06: bc:9b:33:51:a3:fa:97:fd:d0:f4:9c:5e:40:d3:70: b6:1a:ab:77:88:d9:0e:6f:c4:fe:0d:7f:74:3d:3d: 61:82:e9:1a:ff:48:45:63:12:b7:dd:3d:06:eb:47: 4d:45:16:a5:95:8a:22:67:66:6c:6a:c6:96:76:25: 79:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C1:5E:1A:32:62:D7:53:EF:FF:03:2F:46:82:15:6F:E0:4B:5C:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.160.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:28:4d:0e:58:6f:39:4c:d3:44:57:43:67:7e:03:aa:c7:19: 12:2f:99:3f:64:c0:bc:a0:45:cc:e4:9e:47:fa:c6:4c:51:4b: 51:f0:0c:eb:1b:36:6c:7b:62:4d:00:47:a8:fc:70:2a:59:99: 36:ce:1b:c4:fc:8a:ca:85:06:f9:12:f1:5f:e1:fd:7e:78:df: 9b:b1:98:16:18:6b:11:f3:89:ae:65:b7:a5:5c:57:bc:1f:04: 8c:f9:39:a2:56:f1:fd:a7:3f:32:78:2f:e3:c8:0c:21:96:04: e1:d0:3c:33:cc:35:92:05:6b:03:14:db:ce:25:3b:c6:dd:be: 24:f3:85:0c:67:26:7a:07:ba:d0:12:60:56:dd:ff:d9:c3:a8: a9:a0:70:9b:b7:58:16:70:b1:fd:33:87:8f:b1:d3:d3:c9:92: 5f:ef:ac:ff:25:09:43:4c:1e:be:6c:3d:70:0a:fe:ec:eb:a0: f4:05:b5:ff:ed:57:e8:2e:56:2b:03:df:35:7f:56:bd:80:73: 4b:bf:7e:05:71:e5:73:44:82:de:c4:da:8b:a0:17:b3:a1:aa: 1c:b0:d2:b0:51:55:3d:a4:3f:8e:8d:61:8a:b6:7e:43:15:9f: c4:6e:65:d2:fd:01:35:79:bf:51:7e:9f:9d:56:c7:5c:ce:7a: 33:d8:e0:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5K7DQCPFcJ+/JMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk NTc5NmRmNWUtYjk4NS00NGNlLTkxZDItOGIzYjQ0M2UzMmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEqn4hv6v/uKiL47mqnMapWewMWVYF7NvfR6 PEfgdpN+ZV28CDA0oiBtysTMNfbVGKRW2X39usVnRxMYxXbwQIdT/jm7h+hOFeE0 MwnXBdqlsAHApjjltzcnkZJX/fRBFz3/JP8Qw6qyJ4BjWAEc/1Kaz38hK3LmZ6Al IYuTh+rTkY+7nxx+Wf5HSEoYXDzFdhXhumCcAIFTMwNJ6j0gCFlEFK/UrE51oUCA NiQGW7+rOFYHd46VZHDG81wRmOp/vQa8mzNRo/qX/dD0nF5A03C2Gqt3iNkOb8T+ DX90PT1hguka/0hFYxK33T0G60dNRRallYoiZ2ZsasaWdiV5dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvBXhoyYtdT7/8DL0aCFW/gS1y+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvNDBmY2Q2YWEtOTRhMS0z MjA0LWIyMGUtZmZmMGExYTg4MzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6ArMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIoTQ5YbzlM00RXQ2d+A6rHGRIvmT9kwLygRczknkf6xkxRS1HwDOsb Nmx7Yk0AR6j8cCpZmTbOG8T8isqFBvkS8V/h/X5435uxmBYYaxHzia5lt6VcV7wf BIz5OaJW8f2nPzJ4L+PIDCGWBOHQPDPMNZIFawMU284lO8bdviTzhQxnJnoHutAS YFbd/9nDqKmgcJu3WBZwsf0zh4+x09PJkl/vrP8lCUNMHr5sPXAK/uzroPQFtf/t V+guVisD3zV/Vr2Ac0u/fgVx5XNEgt7E2ougF7Ohqhyw0rBRVT2kP46NYYq2fkMV n8RuZdL9ATV5v1F+n51Wx1zOejPY4Gk= -----END CERTIFICATE-----Generated at Mon Nov 25 03:10:26 2024 by rpki-client on console-ams.rpki-client.org