$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/a6d6ff6e-99f6-38e4-9a63-c49a45ad404b.roa File: a6d6ff6e-99f6-38e4-9a63-c49a45ad404b.roa (raw, json) Hash identifier: Fym02kpbzuSGuJhd3cKiF7ygpMiEybbLqdLHzN0lZ3s= Subject key identifier: C9:85:00:33:58:3B:35:3A:B5:B6:10:4A:D7:40:86:DB:07:F2:A7:77 Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F43285847BEF6C6D78D7E81D6EDEAE180 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/a6d6ff6e-99f6-38e4-9a63-c49a45ad404b.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 57043 IP address blocks: 65.75.204.0/24 maxlen: 24 65.75.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:c6:d7:8d:7e:81:d6:ed:ea:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=1c598f9e-87aa-48a2-b1da-a6aed3e4d77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:a4:03:f8:cf:bc:98:c2:13:55:36:fb:86: eb:01:c8:f6:98:a6:92:cc:ed:e7:9c:d8:1c:1b:1e: b0:81:0b:46:4c:0d:b3:73:0a:ad:09:0d:1b:19:e2: 33:71:18:f2:b4:34:d2:f0:af:32:63:6e:cf:d8:fb: 63:71:b1:3a:51:7e:b9:f7:ec:c1:98:c1:da:cf:63: 4c:49:3b:31:b5:66:47:28:b7:d7:ab:8d:2c:67:a8: 0d:72:ce:eb:92:eb:c6:44:82:82:4b:16:12:05:60: 52:a1:90:3b:34:c7:b4:ce:93:64:1e:a6:d3:12:78: dc:4c:6b:41:f4:13:e9:2f:f3:ad:14:1c:20:0b:08: d7:31:98:70:97:c1:3a:e5:00:80:cd:93:22:66:b9: 11:ca:07:96:f1:85:df:4b:c1:db:2e:ed:90:2f:1d: 39:84:41:65:bb:27:42:0b:a7:95:69:96:03:13:4c: a7:b6:ba:dc:2f:86:7e:fb:d7:7b:50:bf:39:8b:72: 75:07:ff:04:8c:ba:f8:73:d2:4f:cf:20:38:80:47: 8c:2b:97:0b:63:b6:75:b1:2b:09:8d:ed:54:59:0a: f3:07:fe:87:fa:81:95:70:b9:81:ca:c8:6b:d4:ec: c3:70:be:12:7f:c7:5d:38:58:53:5a:84:d3:0c:69: 68:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:85:00:33:58:3B:35:3A:B5:B6:10:4A:D7:40:86:DB:07:F2:A7:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/a6d6ff6e-99f6-38e4-9a63-c49a45ad404b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 65.75.204.0/24 65.75.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:1e:50:fa:a8:05:ee:7e:16:37:5e:a3:d5:28:04:a9:80:39: ae:f3:98:61:40:e9:ba:03:97:9c:a2:ed:0f:7e:b4:9d:7d:dd: c1:6c:02:5d:bd:26:1b:5e:cf:c0:04:58:0c:c7:fb:ed:82:8b: f4:1e:6b:54:8b:74:50:5c:d0:21:dd:b3:1e:79:b0:a3:9c:ed: 78:fc:d0:52:28:59:00:3b:af:89:e0:e1:dd:e0:f4:36:06:21: c5:ba:65:84:45:40:d0:10:52:a4:12:cc:15:01:6f:6d:2f:5f: e6:fa:ad:2e:8a:41:59:02:b7:71:f1:3f:e1:d4:eb:1c:f3:19: 86:67:06:2e:0f:83:54:13:56:d4:c2:46:65:ab:2b:e6:a0:eb: 0a:80:ec:bd:d9:84:22:ba:a8:b8:8c:ef:4d:7f:62:24:36:54: b5:17:21:f1:eb:b8:2a:50:04:9f:ce:bc:d7:3a:00:d6:4f:79: 4c:f1:f8:1b:91:d8:a6:de:5a:b0:63:5f:be:dc:f8:a0:3d:b6: 8a:d3:17:c1:2c:f4:22:98:c9:8b:c7:df:b0:16:12:58:16:3a: 0d:8c:46:14:d9:31:d9:c1:ba:8c:a1:36:52:d8:5e:ba:2a:64: 1a:44:7e:bb:eb:fd:dd:85:22:88:a3:59:7d:9e:ff:70:e7:15: 9b:70:93:9a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEe+9sbXjX6B1u3q4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MWM1OThmOWUtODdhYS00OGEyLWIxZGEtYTZhZWQzZTRkNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PCkA/jPvJjCE1U2+4brAcj2mKaSzO3nnNgc Gx6wgQtGTA2zcwqtCQ0bGeIzcRjytDTS8K8yY27P2PtjcbE6UX659+zBmMHaz2NM STsxtWZHKLfXq40sZ6gNcs7rkuvGRIKCSxYSBWBSoZA7NMe0zpNkHqbTEnjcTGtB 9BPpL/OtFBwgCwjXMZhwl8E65QCAzZMiZrkRygeW8YXfS8HbLu2QLx05hEFluydC C6eVaZYDE0yntrrcL4Z++9d7UL85i3J1B/8EjLr4c9JPzyA4gEeMK5cLY7Z1sSsJ je1UWQrzB/6H+oGVcLmByshr1OzDcL4Sf8ddOFhTWoTTDGloswIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMmFADNYOzU6tbYQStdAhtsH8qd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvYTZkNmZmNmUtOTlmNi0z OGU0LTlhNjMtYzQ5YTQ1YWQ0MDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQUvMAwQA QUvPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIceUPqoBe5+Fjdeo9UoBKmAOa7zmGFA6boDl5yi7Q9+tJ19 3cFsAl29Jhtez8AEWAzH++2Ci/Qea1SLdFBc0CHdsx55sKOc7Xj80FIoWQA7r4ng 4d3g9DYGIcW6ZYRFQNAQUqQSzBUBb20vX+b6rS6KQVkCt3HxP+HU6xzzGYZnBi4P g1QTVtTCRmWrK+ag6wqA7L3ZhCK6qLiM701/YiQ2VLUXIfHruCpQBJ/OvNc6ANZP eUzx+BuR2KbeWrBjX77c+KA9torTF8Es9CKYyYvH37AWElgWOg2MRhTZMdnBuoyh NlLYXroqZBpEfrvr/d2FIoijWX2e/3DnFZtwk5o= -----END CERTIFICATE-----Generated at Fri Nov 22 11:39:38 2024 by rpki-client on console-fra.rpki-client.org