$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/843317a2-294c-3284-83c8-9e6a60866a59.roa File: 843317a2-294c-3284-83c8-9e6a60866a59.roa (raw, json) Hash identifier: x3LsBVWPB+1qacCRuYHKzNs5zt8HdMhRmlv8J4ZyY20= Subject key identifier: DE:0F:FF:D6:12:FA:60:0A:83:5B:FD:6D:30:2E:AB:1E:D8:F3:2E:EF Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285847792BB30B5F24FA9CD97EAD20 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/843317a2-294c-3284-83c8-9e6a60866a59.roa Signing time: Tue 08 Oct 2024 13:00:40 +0000 ROA not before: Tue 08 Oct 2024 13:00:40 +0000 ROA not after: Mon 06 Jan 2025 14:00:40 +0000 asID: 18594 IP address blocks: 64.57.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:2b:b3:0b:5f:24:fa:9c:d9:7e:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Oct 8 13:00:40 2024 GMT Not After : Jan 6 14:00:40 2025 GMT Subject: CN=7864e0a9-339b-4d9b-a545-a99643a0f600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:44:b6:be:74:1c:ca:3e:b9:39:75:2f:87:ea: af:5f:76:1b:c1:bd:62:67:85:38:79:a0:dd:ee:de: 6a:d7:95:49:d0:df:f1:50:4a:8a:06:03:8f:e4:9c: 68:9b:82:22:1f:f9:8f:e2:8a:10:a8:6f:fa:45:44: c8:a7:89:2f:8d:13:d7:c4:74:d0:fb:8d:ab:db:a5: 82:93:fb:b7:7d:fa:9d:a2:f2:5e:dc:3e:7c:70:d8: 17:1d:38:db:38:4b:70:d3:d3:e7:35:99:11:26:24: c9:02:aa:98:23:07:a7:dd:a6:c6:21:d9:d3:86:39: fb:8a:fe:cc:04:37:d1:12:27:ba:d9:f7:17:37:bf: 5a:15:8b:25:55:2e:15:86:0b:ab:d0:fa:71:60:1e: 7e:8f:58:d4:62:dc:79:69:4c:ca:ff:f2:85:51:ff: d1:ef:ef:e1:a3:fd:50:d6:76:68:3c:6a:88:dd:c1: cf:6b:7a:4c:1d:5a:43:69:d0:cb:4a:97:cd:9b:bd: 83:74:8a:7c:77:08:e8:3f:10:45:0f:96:18:ee:10: 08:1e:3b:1b:6a:90:02:3a:2e:b4:a7:da:88:55:92: e7:61:81:85:3e:c6:5a:af:df:d9:17:d8:28:f4:1b: 20:52:7e:63:77:13:22:04:0d:00:4a:f0:14:63:17: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0F:FF:D6:12:FA:60:0A:83:5B:FD:6D:30:2E:AB:1E:D8:F3:2E:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/843317a2-294c-3284-83c8-9e6a60866a59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 64.57.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:0d:40:b2:86:ad:3d:20:54:57:15:a4:ca:ec:df:1d:d9:de: 8d:0a:17:69:30:fa:9b:89:24:96:f8:47:23:6c:69:0e:bc:61: fb:77:22:0b:b0:54:ec:63:dd:e1:d5:0f:7f:40:ae:f5:24:25: 52:43:8b:54:c4:e4:2d:6b:84:39:1e:5f:08:40:bd:bd:ca:42: 98:49:13:70:0f:84:c7:94:38:f6:3a:a2:bf:f5:4a:13:0a:a5: a5:ab:cf:2e:d9:a6:0b:78:5a:77:aa:ee:22:60:ee:fe:ee:e4: e3:bc:dd:ab:bd:af:fc:44:7d:0f:1f:21:cc:20:24:20:a9:b0: 89:e3:06:1a:2a:bd:44:a2:44:64:bd:66:66:a6:61:a0:61:25: fa:68:c8:a4:61:6f:bb:8c:4c:be:42:5e:40:e5:9d:7b:46:b5: f0:e9:55:e0:72:9f:a0:3a:2d:64:3d:d6:bd:11:96:c8:f6:92: 31:9e:e0:f0:be:94:07:e3:bc:70:ff:93:40:c3:00:50:81:af: a5:98:e6:22:f2:c7:bc:21:f5:2c:86:07:b6:5e:54:8b:32:55: 53:7d:07:83:45:2a:e6:2d:7e:a8:fa:50:0d:da:9d:ba:a1:d1: 36:ca:9e:47:c2:f9:e3:3b:40:29:77:e6:9a:43:6d:0a:7c:79: 84:e5:e1:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5K7MLXyT6nNl+rSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk Nzg2NGUwYTktMzM5Yi00ZDliLWE1NDUtYTk5NjQzYTBmNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikS2vnQcyj65OXUvh+qvX3Ybwb1iZ4U4eaDd 7t5q15VJ0N/xUEqKBgOP5Jxom4IiH/mP4ooQqG/6RUTIp4kvjRPXxHTQ+42r26WC k/u3ffqdovJe3D58cNgXHTjbOEtw09PnNZkRJiTJAqqYIwen3abGIdnThjn7iv7M BDfREie62fcXN79aFYslVS4Vhgur0PpxYB5+j1jUYtx5aUzK//KFUf/R7+/ho/1Q 1nZoPGqI3cHPa3pMHVpDadDLSpfNm72DdIp8dwjoPxBFD5YY7hAIHjsbapACOi60 p9qIVZLnYYGFPsZar9/ZF9go9BsgUn5jdxMiBA0ASvAUYxednQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4P/9YS+mAKg1v9bTAuqx7Y8y7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvODQzMzE3YTItMjk0Yy0z Mjg0LTgzYzgtOWU2YTYwODY2YTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDmXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoNQLKGrT0gVFcVpMrs3x3Z3o0KF2kw+puJJJb4RyNsaQ68Yft3Iguw VOxj3eHVD39ArvUkJVJDi1TE5C1rhDkeXwhAvb3KQphJE3APhMeUOPY6or/1ShMK paWrzy7Zpgt4Wneq7iJg7v7u5OO83au9r/xEfQ8fIcwgJCCpsInjBhoqvUSiRGS9 ZmamYaBhJfpoyKRhb7uMTL5CXkDlnXtGtfDpVeByn6A6LWQ91r0Rlsj2kjGe4PC+ lAfjvHD/k0DDAFCBr6WY5iLyx7wh9SyGB7ZeVIsyVVN9B4NFKuYtfqj6UA3anbqh 0TbKnkfC+eM7QCl35ppDbQp8eYTl4eU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:46 2024 by rpki-client on console-fra.rpki-client.org