$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/472a610a-61ee-3f51-9eb6-ae5e2e6bde6d.roa File: 472a610a-61ee-3f51-9eb6-ae5e2e6bde6d.roa (raw, json) Hash identifier: PE1yfWMH5jJOWmcVtTuxABFM59bPsf/aXDT/VmmLtts= Subject key identifier: 2E:70:DE:66:95:3B:C6:DB:6F:DB:0F:64:85:02:9A:B8:13:A2:9A:AA Certificate issuer: /CN=687d1923-22fe-4744-9984-8ca387a57cf3 Certificate serial: 010D0C9F43285847A30BEC78439D541E0EDD7B68 Authority key identifier: BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/472a610a-61ee-3f51-9eb6-ae5e2e6bde6d.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 400495 IP address blocks: 63.141.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0b:ec:78:43:9d:54:1e:0e:dd:7b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687d1923-22fe-4744-9984-8ca387a57cf3 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=d1991a86-0a1c-469a-9261-789703ef08d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a8:01:07:cc:7a:1a:7e:c7:db:df:a0:c5:6d: 3f:6d:ba:62:7c:a4:db:7a:ef:e7:d0:f8:32:94:b3: 0d:82:28:89:e0:fe:53:d3:b9:74:07:df:b6:4f:0d: 0b:80:45:2f:94:e8:a1:84:9e:80:0a:39:75:c2:e9: 06:f6:89:1b:ca:e2:97:88:8b:86:2e:fb:87:48:99: 52:47:a3:1d:81:db:29:ae:6a:09:73:d0:33:df:da: ca:e8:e5:5f:bb:b0:cf:36:7a:da:77:c7:07:65:23: d5:66:e3:5c:6e:a5:70:01:b3:d2:45:1a:38:15:f2: a1:e5:31:5e:69:ba:b2:3c:17:41:e9:c2:03:38:93: 07:a2:6a:3e:08:57:e0:fe:ab:75:b8:9f:ae:b1:ae: e0:58:36:eb:12:11:e1:d7:16:a3:47:bd:0e:e7:27: 0e:bb:84:48:41:34:a0:95:69:6d:80:36:2b:5f:9b: 3e:48:01:e4:f3:56:6e:08:69:cd:92:4c:3a:32:85: fb:22:18:a6:5f:1f:48:8e:17:a2:13:f7:3a:c4:5a: b8:98:9f:c3:ef:eb:07:83:01:d0:a9:b6:f2:5f:56: 30:d3:38:80:03:96:f9:36:bf:f7:84:56:57:73:c5: cc:a0:96:74:47:cf:e2:79:01:51:d3:72:8c:6b:5e: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:70:DE:66:95:3B:C6:DB:6F:DB:0F:64:85:02:9A:B8:13:A2:9A:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/472a610a-61ee-3f51-9eb6-ae5e2e6bde6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl X509v3 Authority Key Identifier: keyid:BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer sbgp-ipAddrBlock: critical IPv4: 63.141.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5c:07:0a:a8:71:c3:f2:8e:98:80:d4:ef:29:bd:ec:15:b8: dc:56:10:ea:21:1d:8f:67:f3:b5:3d:03:fb:c0:f8:e6:11:3b: f4:79:fc:ba:9f:84:ea:4f:24:dd:b7:64:a2:88:76:1a:44:8f: 6f:ce:11:8e:34:e3:d3:b0:d4:17:a0:bb:cc:85:ae:ac:cc:eb: b1:b1:ce:5f:d2:13:27:1e:85:01:5f:52:ab:77:74:d5:30:1d: 1a:75:b5:d1:a1:3a:86:91:cd:14:32:3d:c7:4c:c1:3e:ed:2a: a2:41:c8:ab:57:d5:99:1f:10:d6:8f:c6:fe:b7:9c:6b:24:99: aa:0f:15:2b:43:4f:e3:a0:e1:27:2f:87:84:90:f3:62:26:30: 27:7a:fa:ea:f1:cc:17:98:3b:15:e1:e0:bb:7e:c5:ee:03:79: 02:c3:40:3c:f5:aa:5e:ff:6a:0c:1f:bd:55:e7:4d:b5:14:f1: 1b:67:a0:a9:3f:32:f0:9e:49:9e:95:a7:5f:1b:67:44:b2:1a: 8a:04:14:a5:ff:50:63:1e:ea:52:24:5f:64:cb:cc:db:75:31: e4:7f:2a:c9:66:a3:10:69:e7:b2:6b:c1:19:fd:7c:f8:1f:37: fb:9e:05:0f:bc:93:42:df:6f:c0:44:64:97:c8:35:cb:db:2b: da:35:bf:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC+x4Q51UHg7de2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg3ZDE5MjMtMjJmZS00NzQ0LTk5ODQtOGNhMzg3YTU3 Y2YzMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk ZDE5OTFhODYtMGExYy00NjlhLTkyNjEtNzg5NzAzZWYwOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KgBB8x6Gn7H29+gxW0/bbpifKTbeu/n0Pgy lLMNgiiJ4P5T07l0B9+2Tw0LgEUvlOihhJ6ACjl1wukG9okbyuKXiIuGLvuHSJlS R6MdgdsprmoJc9Az39rK6OVfu7DPNnrad8cHZSPVZuNcbqVwAbPSRRo4FfKh5TFe abqyPBdB6cIDOJMHomo+CFfg/qt1uJ+usa7gWDbrEhHh1xajR70O5ycOu4RIQTSg lWltgDYrX5s+SAHk81ZuCGnNkkw6MoX7IhimXx9IjheiE/c6xFq4mJ/D7+sHgwHQ qbbyX1Yw0ziAA5b5Nr/3hFZXc8XMoJZ0R8/ieQFR03KMa17G7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5w3maVO8bbb9sPZIUCmrgTopqqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODdk MTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2EzODdhNTdjZjMvNDcyYTYxMGEtNjFlZS0z ZjUxLTllYjYtYWU1ZTJlNmJkZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjg3ZDE5MjMtMjJmZS00NzQ0LTk5 ODQtOGNhMzg3YTU3Y2YzLzY4N2QxOTIzLTIyZmUtNDc0NC05OTg0LThjYTM4N2E1 N2NmMy5jcmwwHwYDVR0jBBgwFoAUuhD3Zvx04hITn+zVuCQ4jiO2RpEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ODdkMTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2Ez ODdhNTdjZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP40mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVcBwqoccPyjpiA1O8pvewVuNxWEOohHY9n87U9A/vA+OYRO/R5/Lqf hOpPJN23ZKKIdhpEj2/OEY4049Ow1Begu8yFrqzM67Gxzl/SEycehQFfUqt3dNUw HRp1tdGhOoaRzRQyPcdMwT7tKqJByKtX1ZkfENaPxv63nGskmaoPFStDT+Og4Scv h4SQ82ImMCd6+urxzBeYOxXh4Lt+xe4DeQLDQDz1ql7/agwfvVXnTbUU8RtnoKk/ MvCeSZ6Vp18bZ0SyGooEFKX/UGMe6lIkX2TLzNt1MeR/KslmoxBp57JrwRn9fPgf N/ueBQ+8k0Lfb8BEZJfINcvbK9o1v60= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:38 2024 by rpki-client on console-ams.rpki-client.org