$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa File: af0a8e4a-42b9-3667-8ce3-865564983774.roa (raw, json) Hash identifier: ZsSF45t4kcDxk0FKILejZyGhp6AVPqQVfF5EMeOWPj0= Subject key identifier: AD:00:01:3A:B4:DD:E4:0A:71:43:ED:E4:A2:D9:6C:83:42:9A:F2:53 Certificate issuer: /CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Certificate serial: 010D0C9F432858475910C0197E690157996869D4 Authority key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa Signing time: Fri 27 Sep 2024 01:00:31 +0000 ROA not before: Fri 27 Sep 2024 01:00:31 +0000 ROA not after: Thu 26 Dec 2024 02:00:31 +0000 asID: 11444 IP address blocks: 161.129.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:59:10:c0:19:7e:69:01:57:99:68:69:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Validity Not Before: Sep 27 01:00:31 2024 GMT Not After : Dec 26 02:00:31 2024 GMT Subject: CN=028dc66c-7e83-4ddc-9ace-98226c01ebc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:ac:75:e5:08:4c:2f:45:ea:d5:ce:81:71: 07:7f:bd:68:c2:45:42:91:95:3e:77:e7:83:b8:a3: 19:af:85:d4:15:0e:dd:4b:0d:86:56:d1:09:93:72: 57:c7:2d:93:4d:16:fb:92:bb:0b:0b:01:72:ef:49: 83:86:ea:d1:73:fe:1e:aa:b3:ef:ba:f2:83:05:80: 9a:b5:ae:74:ad:80:69:06:1a:53:8f:ae:b6:59:8d: 7d:19:07:d1:06:55:75:32:ee:c0:80:50:5f:c6:b7: b7:bc:10:f6:96:fd:9d:9e:ee:8b:63:b0:5a:ba:cb: 71:27:75:c2:8e:e3:fb:ac:0b:99:4a:f0:62:1d:9d: 93:b4:8d:78:9d:98:f3:d5:b7:45:91:78:4d:2d:73: 03:c1:c3:3b:f4:d9:78:70:15:22:09:f2:25:bd:d4: c1:9b:78:ca:37:28:4e:7f:1d:35:f9:f0:7e:48:6e: 5f:eb:f8:5a:4b:73:1e:45:b1:c9:d0:b2:3d:23:6b: f5:73:36:5f:9e:97:e4:fa:58:81:f1:0c:7f:2d:9c: 4d:cf:69:08:ab:b2:7f:c0:4f:69:77:ab:90:79:24: 1f:97:dc:f0:73:58:77:25:13:c9:55:5a:ca:06:b9: 9f:b8:a9:40:66:45:d5:dc:44:d5:32:3b:4b:85:49: fa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:00:01:3A:B4:DD:E4:0A:71:43:ED:E4:A2:D9:6C:83:42:9A:F2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl X509v3 Authority Key Identifier: keyid:F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer sbgp-ipAddrBlock: critical IPv4: 161.129.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:50:07:f2:37:37:65:ff:4a:df:74:30:5f:ab:0d:1f:fa:a2: fd:1a:37:59:42:25:22:b5:06:15:aa:d7:f5:bc:67:6c:54:4f: be:82:23:db:76:b7:81:83:3e:e4:98:10:22:8f:d4:52:fa:7d: 39:be:52:03:54:2b:a9:5b:cc:e8:ac:c1:2e:d1:69:eb:19:9a: 03:20:6d:5b:f2:db:6e:fe:8c:1e:08:d3:bd:dd:d6:7a:e6:d2: 53:fe:8d:3b:74:6f:71:dd:5c:5a:85:6c:28:44:29:a3:f8:cc: 09:31:18:b6:a4:42:b9:0b:78:fe:01:1a:ae:de:ee:3e:8d:44: e0:a8:46:14:f1:ef:b4:dc:66:43:44:30:f5:66:fb:22:a7:35: ab:f0:81:e8:78:a7:b8:0c:bf:e9:fd:24:42:fb:15:21:46:ae: b4:a2:cd:e4:7b:b1:c6:cc:40:af:5a:6f:ac:48:d7:53:47:4a: 3c:29:aa:6b:97:92:01:f5:57:ab:28:fd:b3:cc:56:3a:9b:eb: 41:84:40:17:d8:6e:1c:b2:73:57:d7:0f:7e:5a:fe:81:0d:ca: ae:86:7a:7b:80:94:5f:9d:8b:82:73:ed:eb:e6:ca:ae:b0:c0: bd:91:9e:7e:26:a7:0d:e4:b1:4b:70:d8:e1:0c:94:c1:e6:5a: bd:0d:fb:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZEMAZfmkBV5loadQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhi ZjRjMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk MDI4ZGM2NmMtN2U4My00ZGRjLTlhY2UtOTgyMjZjMDFlYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqysdeUITC9F6tXOgXEHf71owkVCkZU+d+eD uKMZr4XUFQ7dSw2GVtEJk3JXxy2TTRb7krsLCwFy70mDhurRc/4eqrPvuvKDBYCa ta50rYBpBhpTj662WY19GQfRBlV1Mu7AgFBfxre3vBD2lv2dnu6LY7BaustxJ3XC juP7rAuZSvBiHZ2TtI14nZjz1bdFkXhNLXMDwcM79Nl4cBUiCfIlvdTBm3jKNyhO fx01+fB+SG5f6/haS3MeRbHJ0LI9I2v1czZfnpfk+liB8Qx/LZxNz2kIq7J/wE9p d6uQeSQfl9zwc1h3JRPJVVrKBrmfuKlAZkXV3ETVMjtLhUn6IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0AATq03eQKcUPt5KLZbINCmvJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2 MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvYWYwYThlNGEtNDJiOS0z NjY3LThjZTMtODY1NTY0OTgzNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRhNjAwOWQtMTJiOC00YjM0LTk1 ZjktZDI2MTgwZDhiZjRjLzY0YTYwMDlkLTEyYjgtNGIzNC05NWY5LWQyNjE4MGQ4 YmY0Yy5jcmwwHwYDVR0jBBgwFoAU9xheiLqU8dG2wRT/9s/VCcWqX+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYx ODBkOGJmNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhQB/I3N2X/St90MF+rDR/6ov0aN1lCJSK1BhWq1/W8Z2xUT76CI9t2 t4GDPuSYECKP1FL6fTm+UgNUK6lbzOiswS7RaesZmgMgbVvy227+jB4I073d1nrm 0lP+jTt0b3HdXFqFbChEKaP4zAkxGLakQrkLeP4BGq7e7j6NROCoRhTx77TcZkNE MPVm+yKnNavwgeh4p7gMv+n9JEL7FSFGrrSizeR7scbMQK9ab6xI11NHSjwpqmuX kgH1V6so/bPMVjqb60GEQBfYbhyyc1fXD35a/oENyq6GenuAlF+di4Jz7evmyq6w wL2Rnn4mpw3ksUtw2OEMlMHmWr0N+/8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:56 2024 by rpki-client on console-fra.rpki-client.org