$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa File: ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa (raw, json) Hash identifier: o5Y3CEH3MhJhH8cUI+3NxV4sh8CgFXVrkNvbhHN6bR0= Subject key identifier: BF:B8:70:9E:08:AE:35:3D:A5:37:3C:71:E9:F6:82:AF:DF:75:B2:92 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285845CB3E432AB9E687917D652800 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa Signing time: Tue 07 May 2024 13:00:35 +0000 ROA not before: Tue 07 May 2024 13:00:35 +0000 ROA not after: Mon 05 Aug 2024 13:00:35 +0000 asID: 13414 IP address blocks: 64.63.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:cb:3e:43:2a:b9:e6:87:91:7d:65:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: May 7 13:00:35 2024 GMT Not After : Aug 5 13:00:35 2024 GMT Subject: CN=f5bdaf08-9ff1-4607-a573-13d762ae0b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:97:a6:33:44:26:9a:2e:4b:61:6a:cc:9b:22: 27:84:d9:dd:52:9a:81:42:ef:48:c2:9f:89:49:9d: 37:33:35:98:e4:08:ab:d4:97:1a:62:2d:ab:15:9d: d3:b9:32:fa:7f:d7:bd:9e:21:a2:f1:05:b9:3d:97: 55:f4:58:1f:80:3a:bb:31:71:f9:8b:e1:11:44:03: 2a:02:db:70:54:9f:9c:1e:fa:66:7d:fa:e6:b1:83: 8b:21:82:bf:b2:16:42:21:66:f8:88:2d:ac:90:8f: 3a:f6:be:54:15:8f:66:f0:b0:c9:3b:56:43:df:13: aa:92:0b:21:a8:01:35:44:14:b8:63:cc:61:cd:bd: 94:fe:6e:86:db:f3:87:c4:55:c8:49:0e:96:bd:2c: 4f:11:da:e7:70:86:8d:fb:e2:2e:55:d0:1b:25:34: 3e:8d:93:43:63:b3:7e:f4:ba:8a:a3:12:4d:38:3a: 9c:a3:36:75:97:7e:53:39:e9:b4:c7:7d:64:b6:07: 61:2c:88:cc:3a:79:07:49:5a:da:cd:cd:55:8a:0d: 5d:34:93:80:c8:ca:0b:20:dc:a9:9a:c4:ee:81:d7: 66:e8:aa:56:f4:63:31:f2:05:75:6c:b1:81:fa:67: bc:7e:c2:0d:6e:45:4d:b1:0b:97:3d:60:c7:31:c4: 60:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B8:70:9E:08:AE:35:3D:A5:37:3C:71:E9:F6:82:AF:DF:75:B2:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:11:85:a0:1d:00:4b:c9:dd:72:a2:b5:8c:07:63:5d:0d:43: 75:f7:e2:b4:de:01:3e:c6:28:60:0e:dc:e8:84:b1:bd:47:ef: 0d:5b:0d:f5:b5:dd:5a:f1:52:49:1a:2a:6b:ad:bc:f1:07:73: f1:8e:46:31:bf:f6:ee:56:27:dc:50:55:e6:2b:a0:2e:c6:af: 22:ec:f6:c4:5f:bf:fe:be:e4:25:e7:ed:7a:7b:9f:c0:46:2d: 1d:73:46:98:62:4f:39:91:26:17:d3:93:d9:f9:48:08:96:02: 6b:2e:34:b4:3c:99:9a:4e:e1:5b:28:0e:3d:b9:1b:0b:58:70: 80:6f:72:3d:3d:3d:5d:a3:ec:05:c8:1d:28:42:77:fe:5b:c8: d8:2e:4c:d1:ca:33:a8:5f:44:ba:fc:8a:e8:10:72:0f:9c:bf: 7b:e3:af:1c:9a:f7:05:4c:73:61:b6:c5:d5:6f:62:cc:7a:39: 24:98:05:fb:4d:b5:ee:72:54:5a:94:d1:8b:06:c6:74:dd:19: 80:df:2c:5c:51:d5:30:03:25:c1:70:a7:bd:cb:ca:95:8f:f7: 45:4f:8e:58:70:01:c6:65:50:e9:41:4e:87:8f:ca:c2:13:26: e6:ff:a3:31:1a:03:b2:a0:16:70:f7:7c:bd:d0:bd:71:00:da: 63:bc:a7:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXLPkMqueaHkX1lKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDUwNzEzMDAzNVoXDTI0MDgwNTEzMDAzNVowLzEtMCsGA1UEAxMk ZjViZGFmMDgtOWZmMS00NjA3LWE1NzMtMTNkNzYyYWUwYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5emM0Qmmi5LYWrMmyInhNndUpqBQu9Iwp+J SZ03MzWY5Air1JcaYi2rFZ3TuTL6f9e9niGi8QW5PZdV9FgfgDq7MXH5i+ERRAMq AttwVJ+cHvpmffrmsYOLIYK/shZCIWb4iC2skI869r5UFY9m8LDJO1ZD3xOqkgsh qAE1RBS4Y8xhzb2U/m6G2/OHxFXISQ6WvSxPEdrncIaN++IuVdAbJTQ+jZNDY7N+ 9LqKoxJNODqcozZ1l35TOem0x31ktgdhLIjMOnkHSVrazc1Vig1dNJOAyMoLINyp msTugddm6KpW9GMx8gV1bLGB+me8fsINbkVNsQuXPWDHMcRgAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+4cJ4IrjU9pTc8cen2gq/fdbKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYmE5MjhjZDMtNzRlNy0z ZTVmLWEyNTgtYzUxZDUxZjVhNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMRhaAdAEvJ3XKitYwHY10NQ3X34rTeAT7GKGAO3OiEsb1H7w1bDfW1 3VrxUkkaKmutvPEHc/GORjG/9u5WJ9xQVeYroC7GryLs9sRfv/6+5CXn7Xp7n8BG LR1zRphiTzmRJhfTk9n5SAiWAmsuNLQ8mZpO4VsoDj25GwtYcIBvcj09PV2j7AXI HShCd/5byNguTNHKM6hfRLr8iugQcg+cv3vjrxya9wVMc2G2xdVvYsx6OSSYBftN te5yVFqU0YsGxnTdGYDfLFxR1TADJcFwp73LypWP90VPjlhwAcZlUOlBToePysIT Jub/ozEaA7KgFnD3fL3QvXEA2mO8p74= -----END CERTIFICATE-----Generated at Sat May 18 04:53:14 2024 by rpki-client on console-ams.rpki-client.org