$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/63b287bf-06fb-3517-91d3-f0207f69a676.roa File: 63b287bf-06fb-3517-91d3-f0207f69a676.roa (raw, json) Hash identifier: kM9HzeUSmU0O2tZo+1DYtkxpGIx5bf/VZBMwM4gFerE= Subject key identifier: 12:0C:13:2A:85:33:E1:77:64:87:39:A9:16:A8:45:A7:C3:A5:C1:50 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584797E13579AE3C040B2D664500 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/63b287bf-06fb-3517-91d3-f0207f69a676.roa Signing time: Sat 19 Oct 2024 13:00:42 +0000 ROA not before: Sat 19 Oct 2024 13:00:42 +0000 ROA not after: Fri 17 Jan 2025 14:00:42 +0000 asID: 22781 IP address blocks: 207.204.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:97:e1:35:79:ae:3c:04:0b:2d:66:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 19 13:00:42 2024 GMT Not After : Jan 17 14:00:42 2025 GMT Subject: CN=19c3830f-2764-45ee-9a6e-9da0ac6ff59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7c:e4:d3:ca:d0:b7:fb:48:b2:0a:96:83:d4: f8:e9:65:95:d5:f7:8e:62:40:56:86:56:f9:02:3e: 9e:c4:45:d8:a7:90:05:9d:aa:f8:1a:eb:86:03:5a: de:89:33:a4:25:df:7a:f7:5a:8e:8a:85:ad:2c:44: 3b:e2:cd:72:14:6c:48:d8:76:56:ec:31:b7:09:79: 37:c3:7e:d6:d2:69:c3:aa:78:e3:8b:8f:9a:e4:8e: 23:b5:60:e6:a3:d0:fc:ea:33:84:5c:72:73:98:75: 47:aa:d5:64:a5:4e:cb:82:07:b1:1f:71:24:7e:bc: d3:2d:ea:f1:dd:06:4b:21:f2:f5:d3:34:a7:7e:ef: 6c:75:38:c7:67:2d:ca:db:97:0f:7e:20:d5:9f:a7: 90:02:e2:a2:e4:42:cf:86:54:dc:a7:5c:78:2a:09: 33:31:44:19:59:a2:56:67:d9:37:b5:03:02:50:70: 92:3e:3e:62:b7:f3:74:4f:0b:0d:e4:c1:db:f0:09: 36:cb:71:95:16:ab:2d:49:cc:3e:c1:31:6f:f6:5a: 63:f9:de:1b:02:5a:49:01:73:4c:26:86:62:9e:cb: 77:24:c5:94:93:94:46:78:d0:e8:ed:56:a3:99:70: 47:39:08:3b:e6:69:df:ff:68:ed:83:5c:54:1f:54: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0C:13:2A:85:33:E1:77:64:87:39:A9:16:A8:45:A7:C3:A5:C1:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/63b287bf-06fb-3517-91d3-f0207f69a676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:1b:1c:a3:73:a5:5a:73:74:0b:07:f3:6a:c4:41:2b:97:49: a0:9b:21:f2:f8:43:21:e4:81:eb:e6:cd:58:ed:64:2d:a2:d2: 7f:dd:4b:a2:8a:fd:c3:fd:75:ba:1d:77:29:b9:fa:ca:4c:9d: f2:86:a1:25:8f:44:e5:a8:8f:2b:ba:41:a4:93:34:40:fa:eb: dd:d3:3f:06:91:01:40:fd:c7:18:66:26:2c:34:14:9e:32:a3: bd:96:eb:df:83:c3:ee:5f:e8:b5:62:18:58:dc:39:e1:a7:34: 45:8b:03:c8:55:66:c9:85:dc:f2:e2:b6:83:83:fb:66:d4:63: a1:f2:f3:86:90:9e:e8:f8:71:56:38:9d:dc:be:96:45:dc:95: 6f:70:24:fe:c2:c5:18:46:ff:7b:2b:f9:77:31:38:40:0b:57: e1:80:2c:ca:c3:c2:89:6d:b1:e0:2c:62:16:ec:3e:b6:36:a1: 67:70:c8:de:d3:09:9e:ed:cf:95:2b:15:27:05:51:84:2a:ad: 9c:fd:20:11:e5:2f:2d:42:b7:a3:d8:f4:7c:5f:f8:ff:17:74: d5:a6:5e:05:51:4b:8e:6a:f9:17:f9:55:01:b8:ae:3b:63:0a: e7:54:d1:98:14:a0:08:c9:84:75:ca:0b:ac:aa:a0:1e:1f:34: 79:36:af:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4TV5rjwECy1mRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk MTljMzgzMGYtMjc2NC00NWVlLTlhNmUtOWRhMGFjNmZmNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3zk08rQt/tIsgqWg9T46WWV1feOYkBWhlb5 Aj6exEXYp5AFnar4GuuGA1reiTOkJd9691qOioWtLEQ74s1yFGxI2HZW7DG3CXk3 w37W0mnDqnjji4+a5I4jtWDmo9D86jOEXHJzmHVHqtVkpU7LggexH3EkfrzTLerx 3QZLIfL10zSnfu9sdTjHZy3K25cPfiDVn6eQAuKi5ELPhlTcp1x4KgkzMUQZWaJW Z9k3tQMCUHCSPj5it/N0TwsN5MHb8Ak2y3GVFqstScw+wTFv9lpj+d4bAlpJAXNM JoZinst3JMWUk5RGeNDo7VajmXBHOQg75mnf/2jtg1xUH1QT2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIMEyqFM+F3ZIc5qRaoRafDpcFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNjNiMjg3YmYtMDZmYi0z NTE3LTkxZDMtZjAyMDdmNjlhNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHobHKNzpVpzdAsH82rEQSuXSaCbIfL4QyHkgevmzVjtZC2i0n/dS6KK /cP9dboddym5+spMnfKGoSWPROWojyu6QaSTNED6693TPwaRAUD9xxhmJiw0FJ4y o72W69+Dw+5f6LViGFjcOeGnNEWLA8hVZsmF3PLitoOD+2bUY6Hy84aQnuj4cVY4 ndy+lkXclW9wJP7CxRhG/3sr+XcxOEALV+GALMrDwoltseAsYhbsPrY2oWdwyN7T CZ7tz5UrFScFUYQqrZz9IBHlLy1Ct6PY9Hxf+P8XdNWmXgVRS45q+Rf5VQG4rjtj CudU0ZgUoAjJhHXKC6yqoB4fNHk2r+o= -----END CERTIFICATE-----Generated at Fri Nov 22 12:10:50 2024 by rpki-client on console-ams.rpki-client.org