$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa File: ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa (raw, json) Hash identifier: 57Wdq5OX2gVJ8AkjVQwWH3xA99/KJsp90wqu177s6fw= Subject key identifier: C8:01:5F:1A:76:AC:03:78:98:2A:49:4D:64:EE:83:B2:E0:B4:B0:E4 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F43285847E4C4AB5FD3F6EEE12178E5C0 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa Signing time: Sat 16 Nov 2024 02:00:28 +0000 ROA not before: Sat 16 Nov 2024 02:00:28 +0000 ROA not after: Fri 14 Feb 2025 02:00:28 +0000 asID: 394002 IP address blocks: 64.136.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e4:c4:ab:5f:d3:f6:ee:e1:21:78:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Nov 16 02:00:28 2024 GMT Not After : Feb 14 02:00:28 2025 GMT Subject: CN=2e6248f4-c5ea-4b55-a150-99944b930b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:58:30:5b:df:75:88:81:5a:87:59:77:0d:c4: 7a:bb:cc:73:ad:be:05:ad:e7:ff:83:2c:80:89:1a: 62:af:cf:3a:a8:12:96:a4:38:ae:09:c0:f3:84:76: 26:c5:8f:8c:ae:6f:55:8d:3f:06:b5:90:b9:50:af: 61:9e:fb:44:e4:28:09:a4:7a:c1:94:41:85:da:54: 35:61:c6:3a:33:d9:05:51:8f:b9:2a:8a:c0:19:46: f9:cc:e0:49:8d:58:44:19:89:35:23:25:bc:3d:ec: 9e:92:b5:ac:be:13:d1:a9:58:df:9c:26:a7:c5:71: 6d:8a:9a:49:08:5f:73:7b:12:66:f9:44:eb:09:d8: 12:6a:7d:08:4b:8f:f9:cd:46:58:65:e2:d7:6b:56: df:f7:10:cf:e0:38:f0:79:2e:e3:13:f9:21:41:35: c1:b5:cb:b3:67:78:98:4d:34:b6:99:a0:b9:dc:07: 53:91:5a:98:d6:06:40:0f:81:b4:09:33:53:98:ed: 3a:74:29:77:f3:58:65:76:5c:96:39:91:e5:6a:30: e3:34:28:7a:89:f8:2b:30:45:5b:af:fa:54:05:68: 11:a8:f2:6b:58:03:c7:5c:c3:b6:3d:28:14:93:79: 93:8d:91:fa:28:76:17:6b:8b:d5:03:14:46:fe:ed: f4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:01:5F:1A:76:AC:03:78:98:2A:49:4D:64:EE:83:B2:E0:B4:B0:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 64.136.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:6c:f2:47:c2:35:4b:84:49:bd:16:e5:e5:dd:b2:85:84:3a: 4d:42:ee:46:a6:f6:42:a8:c9:4d:cf:26:7b:ee:4b:ac:03:59: 73:84:63:9c:6f:3e:49:81:a3:2a:7b:8c:bd:87:b7:35:f5:45: d4:af:9a:1b:d5:92:46:d7:bc:50:ca:a0:d9:7b:a3:a8:92:a6: e6:d6:c9:7e:56:06:1c:c2:5b:86:e9:ca:41:f5:72:3f:00:80: 44:90:5c:64:72:11:15:d0:ea:67:d4:10:f7:3f:97:87:27:88: f4:bf:e1:d8:e5:b6:60:96:24:4b:80:e9:d2:73:1c:61:44:67: c0:df:84:3c:da:e2:94:72:7a:ca:d0:d8:e4:d1:cb:b3:51:83: 93:11:88:1e:e8:6d:56:ad:56:01:77:5b:2c:58:60:cc:e9:9f: f9:b4:59:3f:96:fb:5a:8a:1f:86:4b:37:0c:12:51:17:4e:d7: 2c:a8:5c:06:bc:ba:bc:b0:b9:53:70:1d:67:4e:ff:82:3e:c1: c9:28:ef:86:46:76:bb:f6:62:8b:b3:ad:22:5a:82:4e:82:fe: 5d:5c:f3:1f:a7:11:8b:9f:0b:6b:99:1d:14:d8:b6:db:1f:30: 2a:78:b3:b0:3d:5d:99:71:58:da:48:d8:d9:27:50:bb:96:e6: 2e:68:8d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfkxKtf0/bu4SF45cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI0MTExNjAyMDAyOFoXDTI1MDIxNDAyMDAyOFowLzEtMCsGA1UEAxMk MmU2MjQ4ZjQtYzVlYS00YjU1LWExNTAtOTk5NDRiOTMwYjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVgwW991iIFah1l3DcR6u8xzrb4Fref/gyyA iRpir886qBKWpDiuCcDzhHYmxY+Mrm9VjT8GtZC5UK9hnvtE5CgJpHrBlEGF2lQ1 YcY6M9kFUY+5KorAGUb5zOBJjVhEGYk1IyW8PeyekrWsvhPRqVjfnCanxXFtippJ CF9zexJm+UTrCdgSan0IS4/5zUZYZeLXa1bf9xDP4DjweS7jE/khQTXBtcuzZ3iY TTS2maC53AdTkVqY1gZAD4G0CTNTmO06dCl381hldlyWOZHlajDjNCh6ifgrMEVb r/pUBWgRqPJrWAPHXMO2PSgUk3mTjZH6KHYXa4vVAxRG/u305wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgBXxp2rAN4mCpJTWTug7LgtLDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYmEwZjU5NDktMDc5Mi0z ZjdjLTljZGUtYjdlNzQ1NDZlNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQIhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1s8kfCNUuESb0W5eXdsoWEOk1C7kam9kKoyU3PJnvuS6wDWXOEY5xv PkmBoyp7jL2HtzX1RdSvmhvVkkbXvFDKoNl7o6iSpubWyX5WBhzCW4bpykH1cj8A gESQXGRyERXQ6mfUEPc/l4cniPS/4djltmCWJEuA6dJzHGFEZ8DfhDza4pRyesrQ 2OTRy7NRg5MRiB7obVatVgF3WyxYYMzpn/m0WT+W+1qKH4ZLNwwSURdO1yyoXAa8 urywuVNwHWdO/4I+wcko74ZGdrv2YouzrSJagk6C/l1c8x+nEYufC2uZHRTYttsf MCp4s7A9XZlxWNpI2NknULuW5i5ojVE= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:22 2024 by rpki-client on console-ams.rpki-client.org