$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa File: ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa (raw, json) Hash identifier: K9xv0+mAAaR/tTvn57MssdNaWfx3NJV0NsfeD/nwoCk= Subject key identifier: 35:CC:85:7F:12:C8:B8:E8:11:FD:88:2C:D3:DD:C1:E2:12:A5:53:29 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584789EBF30F639CFD712AADB5C0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa Signing time: Mon 14 Oct 2024 13:00:47 +0000 ROA not before: Mon 14 Oct 2024 13:00:47 +0000 ROA not after: Sun 12 Jan 2025 14:00:47 +0000 asID: 13414 IP address blocks: 64.63.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:89:eb:f3:0f:63:9c:fd:71:2a:ad:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Oct 14 13:00:47 2024 GMT Not After : Jan 12 14:00:47 2025 GMT Subject: CN=a3792d88-9308-473b-9a35-a9df3ff8a1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0b:29:61:99:e0:74:b4:7a:73:7e:cc:63:21: db:16:e7:be:7d:2d:a8:7b:7f:73:f5:1b:aa:6b:8e: a3:e7:55:b2:32:65:44:06:e4:6c:d6:d9:d2:4e:ba: 4d:aa:0c:88:e0:f1:88:03:cf:f0:f0:b7:63:57:99: 38:c5:ff:29:f0:16:d9:c0:0b:2b:e5:a2:fc:82:a4: 85:4c:9a:1e:cb:56:17:79:50:1d:ed:d0:ae:99:39: 08:0a:f3:81:98:12:74:e1:0d:a6:71:30:bf:f0:d6: 0e:78:a9:c0:33:45:12:6e:b8:d5:87:cc:c3:73:2e: db:d6:a7:de:e8:4b:4a:53:eb:9d:00:db:2a:e9:4f: 35:a2:82:ba:4b:0a:b6:44:8c:e5:22:a6:86:0e:47: 24:4c:84:7e:dc:4e:2b:b2:12:37:1c:03:64:98:0f: ec:e1:c3:8c:7c:b8:d2:b1:9f:88:72:16:8c:d0:83: d8:c1:11:79:bc:c2:f7:74:96:9e:39:46:74:05:a1: 73:42:66:40:11:73:db:1c:98:c0:4e:c8:41:07:35: c4:9d:18:24:d1:54:50:77:29:f3:1e:da:25:a9:8e: 61:a2:1d:3c:bc:29:bb:a6:3d:28:de:67:7f:7e:99: 1f:5a:eb:81:88:73:1e:c2:d1:c7:b3:9f:0d:a8:7d: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CC:85:7F:12:C8:B8:E8:11:FD:88:2C:D3:DD:C1:E2:12:A5:53:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:ea:ef:2c:eb:e5:f2:9e:2f:ac:b4:ec:0c:0c:8d:27:97:96: 2c:a3:aa:bb:1d:8c:f1:bd:38:15:63:61:39:87:c7:91:14:c2: c4:19:c0:e6:68:a2:8d:3d:8a:1f:7c:54:35:4f:dd:0c:ec:bf: 0a:db:fa:d2:c0:f9:03:c2:c7:d7:cf:51:6b:f6:c9:de:3f:49: e4:35:98:cc:2f:47:aa:66:ea:ea:91:9c:2d:58:a2:98:79:f1: 10:7b:fd:eb:2e:5a:39:2d:ce:ff:de:a8:ae:30:05:f7:4a:55: d3:a2:4f:b0:21:15:4a:04:50:e5:90:69:4e:f8:ec:34:76:89: be:7b:0a:32:29:2b:f6:d7:a8:83:a0:7d:91:4c:50:8a:47:d5: 51:4a:50:93:98:52:2e:dc:84:dd:fb:1f:47:50:a0:cf:5a:fb: 41:7f:1b:e5:6e:c7:8b:e1:92:09:8a:50:4a:73:59:17:d2:bd: 6e:b3:43:59:45:a9:77:3e:c1:39:da:d0:d1:2b:f3:fc:94:47: 1b:da:b1:53:8f:fe:54:29:60:93:03:d3:8e:e6:cd:0a:87:26: 4c:5e:f3:cc:ab:72:a5:58:f2:c2:38:28:62:f6:0f:58:ad:85: d9:28:05:8f:73:1d:eb:4d:65:e3:89:c4:e2:5a:34:29:41:88: 39:7c:94:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeJ6/MPY5z9cSqttcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk YTM3OTJkODgtOTMwOC00NzNiLTlhMzUtYTlkZjNmZjhhMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgspYZngdLR6c37MYyHbFue+fS2oe39z9Ruq a46j51WyMmVEBuRs1tnSTrpNqgyI4PGIA8/w8LdjV5k4xf8p8BbZwAsr5aL8gqSF TJoey1YXeVAd7dCumTkICvOBmBJ04Q2mcTC/8NYOeKnAM0USbrjVh8zDcy7b1qfe 6EtKU+udANsq6U81ooK6Swq2RIzlIqaGDkckTIR+3E4rshI3HANkmA/s4cOMfLjS sZ+IchaM0IPYwRF5vML3dJaeOUZ0BaFzQmZAEXPbHJjATshBBzXEnRgk0VRQdynz HtolqY5hoh08vCm7pj0o3md/fpkfWuuBiHMewtHHs58NqH1uZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXMhX8SyLjoEf2ILNPdweISpVMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYmE5MjhjZDMtNzRlNy0z ZTVmLWEyNTgtYzUxZDUxZjVhNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfq7yzr5fKeL6y07AwMjSeXliyjqrsdjPG9OBVjYTmHx5EUwsQZwOZo oo09ih98VDVP3Qzsvwrb+tLA+QPCx9fPUWv2yd4/SeQ1mMwvR6pm6uqRnC1Yoph5 8RB7/esuWjktzv/eqK4wBfdKVdOiT7AhFUoEUOWQaU747DR2ib57CjIpK/bXqIOg fZFMUIpH1VFKUJOYUi7chN37H0dQoM9a+0F/G+Vux4vhkgmKUEpzWRfSvW6zQ1lF qXc+wTna0NEr8/yURxvasVOP/lQpYJMD047mzQqHJkxe88yrcqVY8sI4KGL2D1it hdkoBY9zHetNZeOJxOJaNClBiDl8lGc= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org