$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/bb120513-c816-385c-a3d5-45ae6fdc2108.roa File: bb120513-c816-385c-a3d5-45ae6fdc2108.roa (raw, json) Hash identifier: jKSbgeCefc5o/1LPuA6EeqPfDA+0XdoTBZmXfZHjzwc= Subject key identifier: 6A:7E:72:85:FB:38:A3:8B:11:49:8A:E9:30:C0:FF:38:E7:00:23:EF Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F43285847F154EFC676D726FA24F6C300 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/bb120513-c816-385c-a3d5-45ae6fdc2108.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 33724 IP address blocks: 64.136.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:ef:c6:76:d7:26:fa:24:f6:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=e4ec2743-ada7-45d8-8993-95749d9f84c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b8:75:70:05:ca:b0:13:b8:3e:ad:ea:a2:0d: 2a:66:98:9d:88:2b:0d:ae:8d:e9:a8:d3:53:d7:9b: 43:72:f4:82:9e:62:97:9e:30:e0:0c:3f:c0:3e:ff: e6:d3:ad:f8:28:bb:7f:a4:b4:57:fd:19:5f:ff:e3: 93:87:f2:aa:4a:8f:b1:2c:f6:37:0a:f1:f9:23:ca: 56:ff:3b:83:c3:7b:da:10:82:3f:dc:52:53:70:2a: 51:5d:e7:05:e2:a1:c5:dc:79:96:90:63:64:f3:26: 83:10:d6:be:27:bc:6a:d7:10:89:61:5a:69:b3:5b: 4f:c7:3e:e8:1c:ad:f8:6a:a0:9b:5a:04:b2:68:4e: 25:4b:a2:09:88:23:bf:27:73:ac:54:da:03:a3:0d: 75:fd:29:97:a8:4c:8f:f0:75:6b:91:7a:14:6e:00: 74:76:88:12:fe:04:a1:70:2b:f8:a0:18:52:a8:d0: 02:7e:05:22:1a:87:90:41:3f:4e:c8:5f:8e:e9:de: a5:78:e4:54:6e:32:7d:84:20:d0:bf:28:bc:b5:ce: 01:0a:a1:c5:b1:0e:c3:0d:14:55:34:c9:07:d2:d6: 44:c8:02:0c:c8:62:65:4e:50:ac:07:d0:e2:6c:91: d4:d1:2c:8c:3b:d6:4e:d8:2e:98:89:a5:30:9f:9a: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7E:72:85:FB:38:A3:8B:11:49:8A:E9:30:C0:FF:38:E7:00:23:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/bb120513-c816-385c-a3d5-45ae6fdc2108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 64.136.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d6:8e:26:4d:ac:88:28:02:8c:29:26:ab:19:19:6b:6f:15: 0a:7d:fe:90:6d:a5:d0:c9:27:18:28:cb:4b:52:42:da:42:9e: aa:38:e0:54:ad:a8:6f:b1:33:f7:59:53:98:39:20:e6:8b:fa: 09:6c:a4:19:ef:22:26:bd:97:72:73:a2:e7:10:03:28:9b:ae: 2d:b1:b4:94:36:a7:50:12:9e:92:39:b7:c2:94:68:e2:0a:64: 17:d6:a2:5a:65:ee:a5:e6:c5:5d:bc:dc:a3:47:83:12:c8:f7: 2f:ba:99:a7:35:2a:f7:e6:e9:62:c8:d6:85:d2:9d:1b:5d:ff: be:75:4d:ee:65:a0:50:82:ba:bb:6f:59:2b:e8:d2:b7:01:b8: a4:c8:d7:cb:b3:9c:00:32:5d:86:d2:b1:a4:19:4f:d8:80:48: 06:10:b8:60:85:83:12:52:2d:01:23:c4:86:3a:80:5f:10:4e: 2a:25:10:0a:bb:75:42:70:d8:33:16:51:29:21:7c:aa:1d:8e: e8:62:24:91:c9:4c:7e:4e:ed:5f:53:59:eb:f2:da:aa:a1:13: df:6c:6f:45:eb:c8:5f:94:56:91:41:f1:e0:d3:a6:a5:c6:75: 1d:f9:02:be:42:10:13:5d:40:99:26:bc:da:c0:e4:2a:20:4f: 7b:8b:f5:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVO/Gdtcm+iT2wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZTRlYzI3NDMtYWRhNy00NWQ4LTg5OTMtOTU3NDlkOWY4NGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirh1cAXKsBO4Pq3qog0qZpidiCsNro3pqNNT 15tDcvSCnmKXnjDgDD/APv/m0634KLt/pLRX/Rlf/+OTh/KqSo+xLPY3CvH5I8pW /zuDw3vaEII/3FJTcCpRXecF4qHF3HmWkGNk8yaDENa+J7xq1xCJYVpps1tPxz7o HK34aqCbWgSyaE4lS6IJiCO/J3OsVNoDow11/SmXqEyP8HVrkXoUbgB0dogS/gSh cCv4oBhSqNACfgUiGoeQQT9OyF+O6d6leORUbjJ9hCDQvyi8tc4BCqHFsQ7DDRRV NMkH0tZEyAIMyGJlTlCsB9DibJHU0SyMO9ZO2C6YiaUwn5qK3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGp+coX7OKOLEUmK6TDA/zjnACPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYmIxMjA1MTMtYzgxNi0z ODVjLWEzZDUtNDVhZTZmZGMyMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQIhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDWjiZNrIgoAowpJqsZGWtvFQp9/pBtpdDJJxgoy0tSQtpCnqo44FSt qG+xM/dZU5g5IOaL+glspBnvIia9l3JzoucQAyibri2xtJQ2p1ASnpI5t8KUaOIK ZBfWolpl7qXmxV283KNHgxLI9y+6mac1Kvfm6WLI1oXSnRtd/751Te5loFCCurtv WSvo0rcBuKTI18uznAAyXYbSsaQZT9iASAYQuGCFgxJSLQEjxIY6gF8QTiolEAq7 dUJw2DMWUSkhfKodjuhiJJHJTH5O7V9TWevy2qqhE99sb0XryF+UVpFB8eDTpqXG dR35Ar5CEBNdQJkmvNrA5CogT3uL9Ys= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:48 2024 by rpki-client on console-fra.rpki-client.org