$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/80d79225-d47a-33b5-b17d-0e051345c7d6.roa File: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (raw, json) Hash identifier: FKQcWwf+3TA9kmtwYiGZY31ZqdGH4zc3ch5ZlC7avOY= Subject key identifier: E0:4B:B5:C9:8E:41:1D:E7:FE:80:B1:22:BF:B6:E2:86:F4:EB:FD:EE Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F43285847EC9937F422D793DC6A3CAAD0 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/80d79225-d47a-33b5-b17d-0e051345c7d6.roa Signing time: Mon 18 Nov 2024 21:19:26 +0000 ROA not before: Mon 18 Nov 2024 21:19:26 +0000 ROA not after: Sun 16 Feb 2025 21:19:26 +0000 asID: 62592 IP address blocks: 162.219.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ec:99:37:f4:22:d7:93:dc:6a:3c:aa:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Nov 18 21:19:26 2024 GMT Not After : Feb 16 21:19:26 2025 GMT Subject: CN=d77283f8-3ae1-4e5e-a36f-40add3c8648b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:71:15:5b:6b:6b:99:f9:82:04:72:43:62:fa: 7d:73:2b:47:63:82:46:06:fe:68:b7:ef:9e:7e:bc: ef:2d:2c:06:87:34:1b:64:06:33:1b:54:5e:7d:78: af:3f:69:bb:79:75:09:fe:3f:24:90:85:aa:7b:1c: d1:76:c7:b1:e8:0c:1a:8b:31:12:0f:b8:89:35:05: 41:73:6d:ac:18:95:5e:a0:00:1a:d1:84:31:f4:f5: 6a:6d:d0:89:5e:0f:a1:39:4d:40:3b:14:6f:07:56: 4a:3e:02:2d:38:38:6a:64:96:e6:60:31:a7:46:a0: ad:90:31:72:17:8b:49:bb:fa:e2:b7:da:22:9f:70: 3f:64:f0:00:a3:05:64:2d:6f:69:74:92:0d:f0:37: 91:a6:a5:d0:8b:cd:0a:4b:b7:d5:e3:3d:f6:19:b3: 43:c5:c8:7d:c9:3f:cc:b8:e1:c7:3b:15:27:fa:d2: 4a:b7:05:e5:3b:26:ab:2e:1b:43:30:7a:25:4d:54: d0:2b:1f:cd:32:b6:0d:76:92:97:07:7a:31:ab:fa: 16:1c:06:ee:06:d3:d3:d3:36:5b:9b:30:c2:99:75: 6a:7c:4b:70:44:75:22:f8:61:25:86:53:5d:29:b3: 8b:4d:07:41:d1:c5:89:b7:12:c3:c6:8c:73:26:41: f8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4B:B5:C9:8E:41:1D:E7:FE:80:B1:22:BF:B6:E2:86:F4:EB:FD:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/80d79225-d47a-33b5-b17d-0e051345c7d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: 162.219.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:63:37:c6:eb:c5:bb:2b:6a:e1:f8:09:d7:84:dd:fb:c7:98: 1a:5c:63:29:e6:49:6e:e3:c3:ef:72:c5:d4:53:dd:a8:75:87: fc:ab:e2:c3:38:36:68:db:30:5a:59:b0:17:87:cd:6e:a6:09: fd:c8:a7:e8:6b:26:37:49:3c:10:25:3f:50:29:dc:e9:39:2e: c1:2e:06:c2:11:9b:97:f8:07:3f:31:bd:60:a1:61:65:0d:ac: 62:c6:47:02:55:99:c6:6f:4f:8a:ce:df:62:38:89:8b:e6:72: 36:41:40:80:ec:9c:b2:56:48:88:dd:ed:9b:c9:41:15:0d:02: 44:7b:ef:4d:a1:54:d4:ab:ca:f0:2d:37:e1:62:d2:f4:6e:6f: 55:42:a5:ed:03:99:01:f9:3c:17:f0:75:e2:41:ea:77:aa:7c: a8:f4:8a:9f:3f:ad:0c:44:72:8a:13:22:da:bd:b5:9d:73:0f: b9:85:78:e3:57:cb:1c:bd:b6:97:e7:a2:a4:3b:72:fc:bc:fd: 8d:14:3c:05:26:3e:e3:1e:b2:4a:c9:38:8e:56:67:2e:fd:cb: a5:7f:10:d2:8a:5a:75:4d:2e:b4:b3:c5:7c:3f:2f:32:17:30: 86:44:76:04:b2:82:d9:03:b1:0f:cd:ff:09:fc:b7:7c:6d:c3: 7b:33:7a:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfsmTf0IteT3Go8qtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI0MTExODIxMTkyNloXDTI1MDIxNjIxMTkyNlowLzEtMCsGA1UEAxMk ZDc3MjgzZjgtM2FlMS00ZTVlLWEzNmYtNDBhZGQzYzg2NDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHEVW2trmfmCBHJDYvp9cytHY4JGBv5ot++e frzvLSwGhzQbZAYzG1RefXivP2m7eXUJ/j8kkIWqexzRdsex6AwaizESD7iJNQVB c22sGJVeoAAa0YQx9PVqbdCJXg+hOU1AOxRvB1ZKPgItODhqZJbmYDGnRqCtkDFy F4tJu/rit9oin3A/ZPAAowVkLW9pdJIN8DeRpqXQi80KS7fV4z32GbNDxch9yT/M uOHHOxUn+tJKtwXlOyarLhtDMHolTVTQKx/NMrYNdpKXB3oxq/oWHAbuBtPT0zZb mzDCmXVqfEtwRHUi+GElhlNdKbOLTQdB0cWJtxLDxoxzJkH4mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBLtcmOQR3n/oCxIr+24ob06/3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvODBkNzkyMjUtZDQ3YS0z M2I1LWIxN2QtMGUwNTEzNDVjN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBjN8brxbsrauH4CdeE3fvHmBpcYynmSW7jw+9yxdRT3ah1h/yr4sM4 NmjbMFpZsBeHzW6mCf3Ip+hrJjdJPBAlP1Ap3Ok5LsEuBsIRm5f4Bz8xvWChYWUN rGLGRwJVmcZvT4rO32I4iYvmcjZBQIDsnLJWSIjd7ZvJQRUNAkR7702hVNSryvAt N+Fi0vRub1VCpe0DmQH5PBfwdeJB6neqfKj0ip8/rQxEcooTItq9tZ1zD7mFeONX yxy9tpfnoqQ7cvy8/Y0UPAUmPuMeskrJOI5WZy79y6V/ENKKWnVNLrSzxXw/LzIX MIZEdgSygtkDsQ/N/wn8t3xtw3szelI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:51 2024 by rpki-client on console-fra.rpki-client.org