$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa File: 8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa (raw, json) Hash identifier: 3nPXG2mXbphyGC4zETduEClXO2xdXiG63VM8rRVl7Cc= Subject key identifier: BF:66:9A:06:C8:A9:E2:06:89:E3:EC:D1:C9:F6:AD:DF:6F:82:6E:60 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584789EBF8B16487BAC779B8E980 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa Signing time: Mon 14 Oct 2024 13:00:47 +0000 ROA not before: Mon 14 Oct 2024 13:00:47 +0000 ROA not after: Sun 12 Jan 2025 14:00:47 +0000 asID: 13414 IP address blocks: 64.63.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:89:eb:f8:b1:64:87:ba:c7:79:b8:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Oct 14 13:00:47 2024 GMT Not After : Jan 12 14:00:47 2025 GMT Subject: CN=d70709a8-ee39-4efe-b3e8-46d2f099858a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:c3:6e:f7:5e:ba:29:76:d9:82:85:4c:33: 20:a2:5e:17:a2:7f:03:11:b5:dd:eb:61:53:05:f9: a1:10:98:bc:e1:e4:02:ef:98:49:66:ed:ca:18:68: 73:7e:a1:5b:7d:b2:52:f2:f0:0a:17:f1:14:cc:8c: c8:4c:41:a7:4c:d3:b8:7f:19:72:87:c0:da:99:7f: e3:6e:47:23:d2:d3:ce:06:bb:90:a8:e6:48:1a:71: 49:d4:e7:11:a0:76:86:aa:3b:d0:2f:58:a1:a7:17: 6a:d4:57:69:d7:55:2d:96:93:4b:58:19:f5:2a:f5: 95:b8:f8:b3:ab:76:9d:cc:da:71:68:ea:a9:36:43: d0:ce:5b:ac:b9:a5:b0:0e:fa:79:70:20:73:e8:f2: 9d:7e:02:40:ff:15:3e:0d:f0:f1:43:6f:97:31:00: d6:d0:ae:a9:ad:d5:bd:70:ae:d9:fc:05:57:73:e5: 32:60:66:80:68:35:55:8d:d4:da:5e:71:16:91:17: e0:2e:28:93:7a:6c:09:c5:69:29:23:60:f9:4c:bd: c5:8c:c0:db:7c:9e:6c:ba:f5:79:22:cf:0c:19:03: d0:be:41:52:15:69:27:6f:23:b7:4d:3e:37:87:e6: ed:c8:49:66:1d:95:a2:ee:44:82:e1:3c:ba:c0:b2: af:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:66:9A:06:C8:A9:E2:06:89:E3:EC:D1:C9:F6:AD:DF:6F:82:6E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2e:e8:6a:a2:2e:0f:5f:1b:67:c3:48:1c:7b:6c:0f:09:20: 5f:e3:c1:34:36:eb:22:86:3c:8d:d7:4a:ae:0e:09:d6:49:51: f0:98:12:c2:e8:ca:ed:69:c9:81:b1:ae:80:60:c1:ae:5b:5f: c7:52:da:a4:cb:a8:03:ac:a9:76:3e:31:dc:2e:24:78:d8:bc: ea:37:1d:c8:36:7a:88:03:33:8c:75:14:74:8a:50:e3:98:89: e1:f4:f6:2c:ad:06:8b:e6:0d:b5:bc:20:25:17:f0:d2:e5:60: 54:eb:7c:16:74:8b:fc:83:1f:48:38:cb:61:9c:2b:53:26:57: 43:2d:72:34:98:9b:16:2b:b5:2a:b1:dd:26:f9:de:10:10:2a: 97:8d:65:66:e8:ba:99:34:7c:96:6c:f1:6b:7d:ec:79:48:ea: 6c:4b:5b:af:79:43:5e:8c:b6:15:1e:28:44:56:39:76:73:05: 04:77:aa:0d:85:e2:f8:01:28:93:77:06:40:6c:cb:02:21:7d: 2d:e1:96:74:2e:2f:af:67:54:13:6a:5a:aa:31:c9:20:d2:29: 9c:df:dc:63:d1:7f:b3:db:f2:3d:90:28:bd:b8:15:e1:c6:a7: 4a:59:31:16:89:3f:1a:1c:96:5c:a4:d0:d7:75:c4:62:ea:e8: 61:95:83:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeJ6/ixZIe6x3m46YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk ZDcwNzA5YTgtZWUzOS00ZWZlLWIzZTgtNDZkMmYwOTk4NThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBXDbvdeuil22YKFTDMgol4Xon8DEbXd62FT BfmhEJi84eQC75hJZu3KGGhzfqFbfbJS8vAKF/EUzIzITEGnTNO4fxlyh8DamX/j bkcj0tPOBruQqOZIGnFJ1OcRoHaGqjvQL1ihpxdq1Fdp11UtlpNLWBn1KvWVuPiz q3adzNpxaOqpNkPQzlusuaWwDvp5cCBz6PKdfgJA/xU+DfDxQ2+XMQDW0K6prdW9 cK7Z/AVXc+UyYGaAaDVVjdTaXnEWkRfgLiiTemwJxWkpI2D5TL3FjMDbfJ5suvV5 Is8MGQPQvkFSFWknbyO3TT43h+btyElmHZWi7kSC4Ty6wLKvXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9mmgbIqeIGiePs0cn2rd9vgm5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOGQ2YTk1ZGUtOGU4ZS0z YTEyLWFmMTAtNWI2ZTEzZWQ4N2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMu6GqiLg9fG2fDSBx7bA8JIF/jwTQ26yKGPI3XSq4OCdZJUfCYEsLo yu1pyYGxroBgwa5bX8dS2qTLqAOsqXY+MdwuJHjYvOo3Hcg2eogDM4x1FHSKUOOY ieH09iytBovmDbW8ICUX8NLlYFTrfBZ0i/yDH0g4y2GcK1MmV0MtcjSYmxYrtSqx 3Sb53hAQKpeNZWboupk0fJZs8Wt97HlI6mxLW695Q16MthUeKERWOXZzBQR3qg2F 4vgBKJN3BkBsywIhfS3hlnQuL69nVBNqWqoxySDSKZzf3GPRf7Pb8j2QKL24FeHG p0pZMRaJPxocllyk0Nd1xGLq6GGVg3k= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org